package com.l7tech.policy.validator;

import com.l7tech.policy.AssertionPath;
import com.l7tech.policy.PolicyValidatorResult;
import com.l7tech.policy.assertion.Assertion;
import com.l7tech.policy.assertion.AssertionUtils;
import com.l7tech.policy.assertion.xmlsec.AddWssSecurityToken;
import com.l7tech.policy.assertion.xmlsec.AddWssUsernameToken;
import com.l7tech.policy.assertion.xmlsec.SecurityHeaderAddressable;
import com.l7tech.policy.assertion.xmlsec.WsSecurity;
import com.l7tech.policy.assertion.xmlsec.WssConfigurationAssertion;
import com.l7tech.policy.assertion.xmlsec.WssEncryptElement;
import com.l7tech.security.token.SecurityTokenType;

public class WsSecurityValidator implements AssertionValidator {
   private final WsSecurity a;
   private final WssVersionAssertionValidator b;
   private String c;
   private static final String d;

   public WsSecurityValidator(WsSecurity var1) {
      this.a = var1;
      this.b = new WssVersionAssertionValidator(var1);
      this.a();
   }

   @Override
   public void validate(AssertionPath var1, PolicyValidationContext var2, PolicyValidatorResult var3) {
      if (this.c != null && this.a(var1.getPath()) && !this.b(var1.getPath())) {
         var3.addError(new PolicyValidatorResult.Error(this.a, this.c, null));
      }

      this.b.validate(var1, var2, var3);
   }

   private void a() {
      if (!Assertion.isResponse(this.a)
         && this.a.isApplyWsSecurity()
         && this.a.getRecipientTrustedCertificateName() == null
         && this.a.getRecipientTrustedCertificateGoid() == null
         && this.a.getRecipientTrustedCertificateVariable() == null) {
         this.c = d;
      }
   }

   private boolean a(Assertion[] var1) {
      boolean var2 = false;

      for (Assertion var6 : var1) {
         if (var6.isEnabled()) {
            if (var6 == this.a) {
               break;
            }

            if (this.a(var6) && AssertionUtils.isSameTargetMessage(this.a, var6) && ((SecurityHeaderAddressable)var6).getRecipientContext().localRecipient()) {
               var2 = true;
               break;
            }
         }
      }

      return var2;
   }

   private boolean a(Assertion var1) {
      return var1 instanceof WssEncryptElement
         || var1 instanceof AddWssUsernameToken && ((AddWssUsernameToken)var1).isEncrypt()
         || var1 instanceof AddWssSecurityToken
            && ((AddWssSecurityToken)var1).isEncrypt()
            && ((AddWssSecurityToken)var1).getTokenType() == SecurityTokenType.WSS_USERNAME
         || var1 instanceof WssConfigurationAssertion && ((WssConfigurationAssertion)var1).isEncryptSignature();
   }

   private boolean b(Assertion[] var1) {
      boolean var2 = false;

      for (Assertion var6 : var1) {
         if (var6.isEnabled()) {
            if (var6 == this.a) {
               break;
            }

            if (var6 instanceof AddWssSecurityToken
               && AssertionUtils.isSameTargetMessage(this.a, var6)
               && ((SecurityHeaderAddressable)var6).getRecipientContext().localRecipient()) {
               AddWssSecurityToken var7 = (AddWssSecurityToken)var6;
               var2 = var7.getTokenType() == SecurityTokenType.WSSC_CONTEXT;
               if (var2) {
                  break;
               }
            }
         }
      }

      return var2;
   }

   static {
      String var10002 = a(
         94,
         a(
            "D\u0005\u0014]sh\u000fpIB\u0019dk\rlU_\\xzNf@DM\u007fh\u0007fDB\\4.\u0003pVB\u0019tkNv@Z\\uz\u000ba\u0005PVd.\u000bkFD@fz\u0007jK\u0018\u0019Bf\u0007v\u0005WJek\u001cqLYW6y\u0007iI\u0016Xzy\u000f|V\u0016_wg\u0002+"
         )
      );
      byte var10001 = -1;
      d = var10002;
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 48);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 91;
            case 1 -> 123;
            case 2 -> 104;
            case 3 -> 103;
            case 4 -> 72;
            case 5 -> 80;
            default -> 48;
         });
      }

      return new String(var10001).intern();
   }
}