package com.l7tech.external.assertions.gatewaymanagement.server.rest;

import com.l7tech.external.assertions.gatewaymanagement.server.rest.exceptions.InsufficientPermissionsException;
import com.l7tech.gateway.common.security.rbac.OperationType;
import com.l7tech.gateway.common.security.rbac.Role;
import com.l7tech.gateway.common.security.rbac.Role.Tag;
import com.l7tech.identity.User;
import com.l7tech.objectmodel.Entity;
import com.l7tech.objectmodel.EntityType;
import com.l7tech.objectmodel.FindException;
import com.l7tech.server.security.rbac.RbacServices;
import com.l7tech.server.security.rbac.SecurityFilter;
import com.l7tech.server.util.JaasUtils;
import com.l7tech.util.Pair;
import jakarta.inject.Inject;
import java.util.Collections;
import java.util.List;
import org.jetbrains.annotations.NotNull;
import org.jetbrains.annotations.Nullable;

public class RbacAccessService {
   @Inject
   private RbacServices rbacServices;
   @Inject
   private SecurityFilter securityFilter;
   private static final String[] a;

   public void validatePermitted(@NotNull Entity var1, @NotNull OperationType var2) {
      try {
         if (var1 == null) {
            a(0);
         }
      } catch (InsufficientPermissionsException var3) {
         throw a(var3);
      }

      try {
         if (var2 == null) {
            a(1);
         }
      } catch (InsufficientPermissionsException var4) {
         throw a(var4);
      }

      this.a(var1, var2, null);
   }

   public void validatePermitted(@NotNull Entity var1, @NotNull String var2) {
      try {
         if (var1 == null) {
            a(2);
         }
      } catch (InsufficientPermissionsException var3) {
         throw a(var3);
      }

      try {
         if (var2 == null) {
            a(3);
         }
      } catch (InsufficientPermissionsException var4) {
         throw a(var4);
      }

      this.a(var1, OperationType.OTHER, var2);
   }

   public void validatePermitted(@NotNull EntityType var1, @NotNull OperationType var2) {
      try {
         if (var1 == null) {
            a(4);
         }
      } catch (FindException var7) {
         throw a(var7);
      }

      try {
         if (var2 == null) {
            a(5);
         }
      } catch (FindException var8) {
         throw a(var8);
      }

      User var3 = this.a();

      try {
         try {
            if (!this.rbacServices.isPermittedForAnyEntityOfType(var3, var2, var1)) {
               throw new InsufficientPermissionsException(var3, var1, var2, null);
            }
         } catch (InsufficientPermissionsException var5) {
            throw a(var5);
         }
      } catch (FindException var6) {
         throw new InsufficientPermissionsException(var3, var1, var2, null, var6);
      }
   }

   private void a(@NotNull Entity var1, @NotNull OperationType var2, @Nullable String var3) {
      try {
         if (var1 == null) {
            a(6);
         }
      } catch (FindException var8) {
         throw a(var8);
      }

      try {
         if (var2 == null) {
            a(7);
         }
      } catch (FindException var9) {
         throw a(var9);
      }

      User var4 = this.a();

      try {
         try {
            if (!this.rbacServices.isPermittedForEntity(var4, var1, var2, var3)) {
               throw new InsufficientPermissionsException(var4, var1, var2, var3);
            }
         } catch (InsufficientPermissionsException var6) {
            throw a(var6);
         }
      } catch (FindException var7) {
         throw new InsufficientPermissionsException(var4, var1, var2, var3, var7);
      }
   }

   public void validateFullAdministrator() {
      User var1 = this.a();

      try {
         for (Role var3 : this.rbacServices.getAssignedRoles(new Pair(var1.getProviderId(), var1.getId()), var1)) {
            if (Tag.ADMIN.equals(var3.getTag())) {
               return;
            }
         }
      } catch (FindException var5) {
         String var10002 = var1.getLogin();
         String[] var4 = a;
         throw new InsufficientPermissionsException(var4[12] + var10002 + var4[2], var5);
      }

      String var7 = var1.getLogin();
      String[] var6 = a;
      throw new InsufficientPermissionsException(var6[0] + var7 + var6[3]);
   }

   @NotNull
   private User a() {
      User var1 = JaasUtils.getCurrentUser();

      try {
         if (var1 == null) {
            throw new InsufficientPermissionsException(a[1]);
         }
      } catch (InsufficientPermissionsException var3) {
         throw a(var3);
      }

      try {
         if (var1 == null) {
            a(8);
         }

         return var1;
      } catch (InsufficientPermissionsException var2) {
         throw a(var2);
      }
   }

   public final <ET> List<ET> accessFilter(@NotNull List<ET> var1, @NotNull EntityType var2, @NotNull OperationType var3, @Nullable String var4) {
      try {
         if (var1 == null) {
            a(9);
         }
      } catch (FindException var11) {
         throw a(var11);
      }

      try {
         if (var2 == null) {
            a(10);
         }
      } catch (FindException var9) {
         throw a(var9);
      }

      try {
         if (var3 == null) {
            a(11);
         }
      } catch (FindException var10) {
         throw a(var10);
      }

      User var6 = JaasUtils.getCurrentUser();
      List var5;
      if (var6 != null) {
         try {
            if (this.rbacServices.isPermittedForAnyEntityOfType(var6, var3, var2)) {
               var5 = var1;
            } else {
               var5 = (List)this.securityFilter.filter(var1, var6, var3, var4);
            }
         } catch (FindException var8) {
            throw new InsufficientPermissionsException(a[9] + var6.getLogin(), var8);
         }
      } else {
         var5 = Collections.emptyList();
      }

      return var5;
   }

   private static Exception a(Exception var0) {
      return var0;
   }

   static {
      String[] var5 = new String[18];
      int var3 = 0;
      String var2 = "I`K~DwopjW3Iarp`]3Kkn9pJv_>< Wj\u0019f^an9fLa_armi@3Lqhq`WgDg}m`]=\u001b9FVfA`<wjM3Kmr}%L`Hv<kjUv^*\"9aVv^$rvq\u0019{Lry9d]~DjujqKrYkn9wV\u007fH*>Xw^f@arm%_|_$\\WjM]Xhp9uXaLiym`K3\n!o>%Vu\r!o7 J3@qom%W|Y$~|%WfAh\u000e~`MPXvn|kMF^an\rvu\\aLpuvkmj]a\b|kMzYmyjNzjT<A3h|fQ<H|h|wWrA+}jv\\aYmswv\u0016tLpynd@~Lj}~`TvCp3j`KeHv3k`Jg\u0002V~xfxpNaojV\\a[m\u007f|$ZjL\u007fI$rvq\u0019uDhh|w\u0019vCpuml\\`\rbsk%L`Hv&9\u0011odUzIeh|U\\a@mhm`]\n|kMzY}H`u\\\u001cI`K~DwopjW3Iarp`]3Kkn9pJv_><\u0006|kMzY}NzjT<A3h|fQ<H|h|wWrA+}jv\\aYmswv\u0016tLpynd@~Lj}~`TvCp3j`KeHv3k`Jg\u0002V~xfxpNaojV\\a[m\u007f|\fxfZv^wZpiMv_";
      int var4 = "I`K~DwopjW3Iarp`]3Kkn9pJv_>< Wj\u0019f^an9fLa_armi@3Lqhq`WgDg}m`]=\u001b9FVfA`<wjM3Kmr}%L`Hv<kjUv^*\"9aVv^$rvq\u0019{Lry9d]~DjujqKrYkn9wV\u007fH*>Xw^f@arm%_|_$\\WjM]Xhp9uXaLiym`K3\n!o>%Vu\r!o7 J3@qom%W|Y$~|%WfAh\u000e~`MPXvn|kMF^an\rvu\\aLpuvkmj]a\b|kMzYmyjNzjT<A3h|fQ<H|h|wWrA+}jv\\aYmswv\u0016tLpynd@~Lj}~`TvCp3j`KeHv3k`Jg\u0002V~xfxpNaojV\\a[m\u007f|$ZjL\u007fI$rvq\u0019uDhh|w\u0019vCpuml\\`\rbsk%L`Hv&9\u0011odUzIeh|U\\a@mhm`]\n|kMzY}H`u\\\u001cI`K~DwopjW3Iarp`]3Kkn9pJv_><\u0006|kMzY}NzjT<A3h|fQ<H|h|wWrA+}jv\\aYmswv\u0016tLpynd@~Lj}~`TvCp3j`KeHv3k`Jg\u0002V~xfxpNaojV\\a[m\u007f|\fxfZv^wZpiMv_"
         .length();
      char var1 = 28;
      int var7 = -1;

      label24:
      while (true) {
         byte var10000 = 6;
         String var10001 = var2.substring(++var7, var7 + var1);
         byte var10002 = -1;

         while (true) {
            String var8 = a(var10000, a(var10001));
            switch (var10002) {
               case 0:
                  var5[var3++] = var8;
                  if ((var7 += var1) >= var4) {
                     a = var5;
                     return;
                  }

                  var1 = var2.charAt(var7);
                  break;
               default:
                  var5[var3++] = var8;
                  if ((var7 += var1) < var4) {
                     var1 = var2.charAt(var7);
                     continue label24;
                  }

                  var2 = "!3.\u001f\u001b\t\b\r],\u000e!\u0014\u000b\u0005]d\u0018{Y\u0017A\u00104\u0018!\\\n\u000e\ta\u00190\b\u0011\u0013\u0013a\u0005 \u0010\b\u0012\u000e\t)\u000e'3\u0014\u0004\u000f \u001f<\u0013\n/\u001c,\u000e";
                  var4 = "!3.\u001f\u001b\t\b\r],\u000e!\u0014\u000b\u0005]d\u0018{Y\u0017A\u00104\u0018!\\\n\u000e\ta\u00190\b\u0011\u0013\u0013a\u0005 \u0010\b\u0012\u000e\t)\u000e'3\u0014\u0004\u000f \u001f<\u0013\n/\u001c,\u000e"
                     .length();
                  var1 = '*';
                  var7 = -1;
            }

            var10000 = 126;
            var10001 = var2.substring(++var7, var7 + var1);
            var10002 = 0;
         }
      }
   }

   private static char[] a(String var0) {
      char[] var10000 = var0.toCharArray();
      if (var10000.length < 2) {
         var10000[0] = (char)(var10000[0] ^ 26);
      }

      return var10000;
   }

   private static String a(int var0, char[] var1) {
      int var10003 = var1.length;
      int var10002 = var0;
      char[] var10001 = var1;
      int var10000 = var10003;

      for (int var2 = 0; var10000 > var2; var2++) {
         var10001[var2] = (char)(var10001[var2] ^ var10002 ^ switch (var2 % 7) {
            case 0 -> 31;
            case 1 -> 3;
            case 2 -> 63;
            case 3 -> 21;
            case 4 -> 43;
            case 5 -> 2;
            default -> 26;
         });
      }

      return new String(var10001).intern();
   }
}
