E;net/minecraft/server/jsonrpc/security/AuthenticationHandler  %io/netty/channel/ChannelDuplexHandler()V  com/mojang/logging/LogUtils getLogger()Lorg/slf4j/Logger;  LOGGERLorg/slf4j/Logger;  securityConfig6Lnet/minecraft/server/jsonrpc/security/SecurityConfig;,  java/lang/Stringsplit'(Ljava/lang/String;)[Ljava/lang/String; !" #$com/google/common/collect/Sets newHashSet(([Ljava/lang/Object;)Ljava/util/HashSet; & '(allowedOriginsLjava/util/Set; * +, getClientIp<(Lio/netty/channel/ChannelHandlerContext;)Ljava/lang/String;.'io/netty/handler/codec/http/HttpRequest 0 12performSecurityChecks|(Lio/netty/handler/codec/http/HttpRequest;)Lnet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult; 456 78Onet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult isAllowed()Z :;< =>&io/netty/channel/ChannelHandlerContextchannel()Lio/netty/channel/Channel; @ ABAUTHENTICATED_KEYLio/netty/util/AttributeKey; DEF GHio/netty/channel/Channelattr7(Lio/netty/util/AttributeKey;)Lio/netty/util/Attribute; JKL MNjava/lang/BooleanvalueOf(Z)Ljava/lang/Boolean; PQR STio/netty/util/Attributeset(Ljava/lang/Object;)V 4V W8!isTokenSentInSecWebsocketProtocol Y ZBATTR_WEBSOCKET_ALLOWED J\ ]^TRUELjava/lang/Boolean;`5Authentication rejected for connection with ip {}: {} 4b cd getReason()Ljava/lang/String; fgh ijorg/slf4j/Loggerdebug9(Ljava/lang/String;Ljava/lang/Object;Ljava/lang/Object;)V l mnsendUnauthorizedResponse=(Lio/netty/channel/ChannelHandlerContext;Ljava/lang/String;)V Pp qrget()Ljava/lang/Object; Jt uvequals(Ljava/lang/Object;)Z x yz channelRead=(Lio/netty/channel/ChannelHandlerContext;Ljava/lang/Object;)V|.Dropping unauthenticated connection with ip {} f~ i'(Ljava/lang/String;Ljava/lang/Object;)V : close"()Lio/netty/channel/ChannelFuture;(io/netty/handler/codec/http/HttpResponse status2()Lio/netty/handler/codec/http/HttpResponseStatus;  .io/netty/handler/codec/http/HttpResponseStatuscode()I SWITCHING_PROTOCOLS0Lio/netty/handler/codec/http/HttpResponseStatus; headers+()Lio/netty/handler/codec/http/HttpHeaders;  +io/netty/handler/codec/http/HttpHeaderNamesSEC_WEBSOCKET_PROTOCOLLio/netty/util/AsciiString; minecraft-v1  S'io/netty/handler/codec/http/HttpHeadersU(Ljava/lang/CharSequence;Ljava/lang/Object;)Lio/netty/handler/codec/http/HttpHeaders;  write^(Lio/netty/channel/ChannelHandlerContext;Ljava/lang/Object;Lio/netty/channel/ChannelPromise;)V  parseTokenInAuthorizationHeader=(Lio/netty/handler/codec/http/HttpRequest;)Ljava/lang/String;   isValidApiKey(Ljava/lang/String;)Z 4 allowedS()Lnet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult;Invalid API key 4 deniede(Ljava/lang/String;)Lnet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult;  &parseTokenInSecWebsocketProtocolHeader  isAllowedOriginHeader,(Lio/netty/handler/codec/http/HttpRequest;)ZOrigin Not Allowed 4 T(Z)Lnet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult;Missing API key - ORIGIN q,(Ljava/lang/CharSequence;)Ljava/lang/String;  8isEmpty  v java/util/Setcontains  AUTHORIZATIONBearer   startsWith  length   substring(I)Ljava/lang/String;  dtrim minecraft-v1,  !java/nio/charset/StandardCharsetsUTF_8Ljava/nio/charset/Charset;  getBytes(Ljava/nio/charset/Charset;)[B  d4net/minecraft/server/jsonrpc/security/SecurityConfig secretKey  java/security/MessageDigestisEqual([B[B)Z D  remoteAddress()Ljava/net/SocketAddress;java/net/InetSocketAddress     getAddress()Ljava/net/InetAddress;    djava/net/InetAddressgetHostAddress makeConcatWithConstants&(Ljava/lang/String;)Ljava/lang/String;3io/netty/handler/codec/http/DefaultFullHttpResponse  'io/netty/handler/codec/http/HttpVersionHTTP_1_1)Lio/netty/handler/codec/http/HttpVersion;   UNAUTHORIZED  !" #$io/netty/buffer/Unpooled wrappedBuffer([B)Lio/netty/buffer/ByteBuf; & 'u(Lio/netty/handler/codec/http/HttpVersion;Lio/netty/handler/codec/http/HttpResponseStatus;Lio/netty/buffer/ByteBuf;)V  * + CONTENT_TYPE-application/json / 0CONTENT_LENGTH 234 M5java/lang/Integer(I)Ljava/lang/Integer; 7 8 CONNECTION :; <= writeAndFlush4(Ljava/lang/Object;)Lio/netty/channel/ChannelFuture;? @AoperationCompleteZ(Lio/netty/channel/ChannelHandlerContext;)Lio/netty/util/concurrent/GenericFutureListener; CDE FGio/netty/channel/ChannelFuture addListenerR(Lio/netty/util/concurrent/GenericFutureListener;)Lio/netty/channel/ChannelFuture;I authenticated KLM MNio/netty/util/AttributeKey0(Ljava/lang/String;)Lio/netty/util/AttributeKey;Pwebsocket_auth_allowed Signature1Lio/netty/util/AttributeKey;SUBPROTOCOL_VALUELjava/lang/String; ConstantValueSUBPROTOCOL_HEADER_PREFIX BEARER_PREFIX#Ljava/util/Set;K(Lnet/minecraft/server/jsonrpc/security/SecurityConfig;Ljava/lang/String;)VCodeLineNumberTableLocalVariableTablethis=Lnet/minecraft/server/jsonrpc/security/AuthenticationHandler;MethodParametersresultQLnet/minecraft/server/jsonrpc/security/AuthenticationHandler$SecurityCheckResult;request)Lio/netty/handler/codec/http/HttpRequest;context(Lio/netty/channel/ChannelHandlerContext;msgLjava/lang/Object;clientIpisAuthenticated StackMapTable Exceptionsmjava/lang/Exceptionresponse*Lio/netty/handler/codec/http/HttpResponse;ctxpromise!Lio/netty/channel/ChannelPromise;tokenInAuthorizationHeader!tokenInSecWebsocketProtocolHeader originHeader authHeaderRuntimeVisibleTypeAnnotations#Lorg/jspecify/annotations/Nullable; suppliedKeysuppliedKeyBytes[BconfiguredKeyBytesLjava/net/InetSocketAddress;reason responseBodycontent5Lio/netty/handler/codec/http/DefaultFullHttpResponse;!lambda$sendUnauthorizedResponse$0L(Lio/netty/channel/ChannelHandlerContext;Lio/netty/util/concurrent/Future;)Vfuture!Lio/netty/util/concurrent/Future; SourceFileAuthenticationHandler.javaRuntimeVisibleAnnotations*Lio/netty/channel/ChannelHandler$Sharable; NestMembersBootstrapMethods&{"error":"Unauthorized","message":""}$(Lio/netty/util/concurrent/Future;)V    $java/lang/invoke/StringConcatFactory(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite;  "java/lang/invoke/LambdaMetafactory metafactory(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite; InnerClassesSecurityCheckResult(io/netty/channel/ChannelHandler$Sharableio/netty/channel/ChannelHandlerSharable%java/lang/invoke/MethodHandles$Lookupjava/lang/invoke/MethodHandlesLookup!ABQRZBQRSTUVTUWTU'(QX YZl** *+*,%[$ %&'\ ]^'T_ 'yzZ*+)N,-,-:*/:3;+9?CIOUO+9XC[O6*_-ae+9?CIO*+ak+9?CoJ:[s *+,w*{-}+W[F+,-/#0:1B2[5l678<>?ABD\Hs`a{bc]^defghT(i^j[-42+Jkl_ dfZm,a,:H+9XCo2+9XCoJ[sW*+,-[H IUJeMlN\4 Xnom]^mpemfgmqrjekl_ pfq12ZM*+M,*,*+N-$*+ ¸*-İǸ[6 QR STVY"Z&[.\4_<`AbGf\*M]^MbcGsT"+tTj _bZ~%+ʶM, ,Й*%,[j lmp\ %]^%bc uTj _bZ)+ضM,,۶ݙ,۶[t vw'z\ )]^)bc vTj'_bwxZ)+M,,ݙ,[~ '\ )]^)bc vTj'_bwxZ%+Й+M*N,-[ \*%]^%yTz{|{j _y+,ZY+9M, [ \ ]^de}_dmnZi,N-:Y%:(),W(.1W(69W+:+>BW[& $3ETh\>i]^idei~TbTY{$En_ d~ Z<*W[\deklZ/HJ?OJX[  44 &