Daniel Elliott
f3960ee359
- Imported from https://github.com/supermegamestre/Project-Real-Resurrection-3 - APKTool decompilation (Smali bytecode) for modding and rebuilding APK - Supports both 32-bit (armeabi-v7a) and 64-bit (arm64-v8a) architectures - Includes full Smali source, resources, and native libraries - Ready to rebuild APK after modifications with apktool b command - Added comprehensive README-apktool.md with modding guide This branch complements the JADX branches: - Use JADX (main/discord-community) to UNDERSTAND code (readable Java) - Use APKTool (this branch) to MODIFY and REBUILD APK (editable Smali) Total: 44,417 files, 538.51 MB Smali source code
507 lines
14 KiB
Smali
507 lines
14 KiB
Smali
.class public final Lcom/facebook/internal/security/OidcSecurityUtil;
|
|
.super Ljava/lang/Object;
|
|
.source "SourceFile"
|
|
|
|
|
|
# static fields
|
|
.field public static final INSTANCE:Lcom/facebook/internal/security/OidcSecurityUtil;
|
|
|
|
.field private static final OPENID_KEYS_PATH:Ljava/lang/String;
|
|
|
|
.field public static final SIGNATURE_ALGORITHM_SHA256:Ljava/lang/String; = "SHA256withRSA"
|
|
|
|
.field public static final TIMEOUT_IN_MILLISECONDS:J = 0x1388L
|
|
|
|
|
|
# direct methods
|
|
.method public static synthetic $r8$lambda$dhxCIHn5ty9iClrxwBztPOJGQC8(Ljava/net/URL;Lkotlin/jvm/internal/Ref$ObjectRef;Ljava/lang/String;Ljava/util/concurrent/locks/ReentrantLock;Ljava/util/concurrent/locks/Condition;)V
|
|
.locals 0
|
|
|
|
.line 0
|
|
invoke-static {p0, p1, p2, p3, p4}, Lcom/facebook/internal/security/OidcSecurityUtil;->getRawKeyFromEndPoint$lambda-1(Ljava/net/URL;Lkotlin/jvm/internal/Ref$ObjectRef;Ljava/lang/String;Ljava/util/concurrent/locks/ReentrantLock;Ljava/util/concurrent/locks/Condition;)V
|
|
|
|
return-void
|
|
.end method
|
|
|
|
.method static constructor <clinit>()V
|
|
.locals 1
|
|
|
|
new-instance v0, Lcom/facebook/internal/security/OidcSecurityUtil;
|
|
|
|
invoke-direct {v0}, Lcom/facebook/internal/security/OidcSecurityUtil;-><init>()V
|
|
|
|
sput-object v0, Lcom/facebook/internal/security/OidcSecurityUtil;->INSTANCE:Lcom/facebook/internal/security/OidcSecurityUtil;
|
|
|
|
const-string v0, "/.well-known/oauth/openid/keys/"
|
|
|
|
sput-object v0, Lcom/facebook/internal/security/OidcSecurityUtil;->OPENID_KEYS_PATH:Ljava/lang/String;
|
|
|
|
return-void
|
|
.end method
|
|
|
|
.method private constructor <init>()V
|
|
.locals 0
|
|
|
|
.line 25
|
|
invoke-direct {p0}, Ljava/lang/Object;-><init>()V
|
|
|
|
return-void
|
|
.end method
|
|
|
|
.method public static final getPublicKeyFromString(Ljava/lang/String;)Ljava/security/PublicKey;
|
|
.locals 13
|
|
|
|
const-string v0, "key"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v2, "\n"
|
|
|
|
const-string v3, ""
|
|
|
|
const/4 v4, 0x0
|
|
|
|
const/4 v5, 0x4
|
|
|
|
const/4 v6, 0x0
|
|
|
|
move-object v1, p0
|
|
|
|
.line 62
|
|
invoke-static/range {v1 .. v6}, Lkotlin/text/StringsKt;->replace$default(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;ZILjava/lang/Object;)Ljava/lang/String;
|
|
|
|
move-result-object v7
|
|
|
|
const-string v8, "-----BEGIN PUBLIC KEY-----"
|
|
|
|
const-string v9, ""
|
|
|
|
const/4 v10, 0x0
|
|
|
|
const/4 v11, 0x4
|
|
|
|
const/4 v12, 0x0
|
|
|
|
.line 63
|
|
invoke-static/range {v7 .. v12}, Lkotlin/text/StringsKt;->replace$default(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;ZILjava/lang/Object;)Ljava/lang/String;
|
|
|
|
move-result-object v0
|
|
|
|
const-string v1, "-----END PUBLIC KEY-----"
|
|
|
|
const-string v2, ""
|
|
|
|
const/4 v3, 0x0
|
|
|
|
const/4 v4, 0x4
|
|
|
|
const/4 v5, 0x0
|
|
|
|
.line 64
|
|
invoke-static/range {v0 .. v5}, Lkotlin/text/StringsKt;->replace$default(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;ZILjava/lang/Object;)Ljava/lang/String;
|
|
|
|
move-result-object p0
|
|
|
|
const/4 v0, 0x0
|
|
|
|
.line 66
|
|
invoke-static {p0, v0}, Landroid/util/Base64;->decode(Ljava/lang/String;I)[B
|
|
|
|
move-result-object p0
|
|
|
|
const-string v0, "decode(pubKeyString, Base64.DEFAULT)"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
.line 67
|
|
new-instance v0, Ljava/security/spec/X509EncodedKeySpec;
|
|
|
|
invoke-direct {v0, p0}, Ljava/security/spec/X509EncodedKeySpec;-><init>([B)V
|
|
|
|
const-string p0, "RSA"
|
|
|
|
.line 68
|
|
invoke-static {p0}, Ljava/security/KeyFactory;->getInstance(Ljava/lang/String;)Ljava/security/KeyFactory;
|
|
|
|
move-result-object p0
|
|
|
|
.line 69
|
|
invoke-virtual {p0, v0}, Ljava/security/KeyFactory;->generatePublic(Ljava/security/spec/KeySpec;)Ljava/security/PublicKey;
|
|
|
|
move-result-object p0
|
|
|
|
const-string v0, "kf.generatePublic(x509publicKey)"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
return-object p0
|
|
.end method
|
|
|
|
.method public static final getRawKeyFromEndPoint(Ljava/lang/String;)Ljava/lang/String;
|
|
.locals 11
|
|
|
|
const-string v0, "kid"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "www."
|
|
|
|
.line 31
|
|
invoke-static {}, Lcom/facebook/FacebookSdk;->getFacebookDomain()Ljava/lang/String;
|
|
|
|
move-result-object v1
|
|
|
|
invoke-static {v0, v1}, Lkotlin/jvm/internal/Intrinsics;->stringPlus(Ljava/lang/String;Ljava/lang/Object;)Ljava/lang/String;
|
|
|
|
move-result-object v0
|
|
|
|
.line 32
|
|
new-instance v2, Ljava/net/URL;
|
|
|
|
const-string v1, "https"
|
|
|
|
sget-object v3, Lcom/facebook/internal/security/OidcSecurityUtil;->OPENID_KEYS_PATH:Ljava/lang/String;
|
|
|
|
invoke-direct {v2, v1, v0, v3}, Ljava/net/URL;-><init>(Ljava/lang/String;Ljava/lang/String;Ljava/lang/String;)V
|
|
|
|
.line 33
|
|
new-instance v0, Ljava/util/concurrent/locks/ReentrantLock;
|
|
|
|
invoke-direct {v0}, Ljava/util/concurrent/locks/ReentrantLock;-><init>()V
|
|
|
|
.line 34
|
|
invoke-virtual {v0}, Ljava/util/concurrent/locks/ReentrantLock;->newCondition()Ljava/util/concurrent/locks/Condition;
|
|
|
|
move-result-object v7
|
|
|
|
.line 35
|
|
new-instance v8, Lkotlin/jvm/internal/Ref$ObjectRef;
|
|
|
|
invoke-direct {v8}, Lkotlin/jvm/internal/Ref$ObjectRef;-><init>()V
|
|
|
|
.line 36
|
|
invoke-static {}, Lcom/facebook/FacebookSdk;->getExecutor()Ljava/util/concurrent/Executor;
|
|
|
|
move-result-object v9
|
|
|
|
new-instance v10, Lcom/facebook/internal/security/OidcSecurityUtil$$ExternalSyntheticLambda0;
|
|
|
|
move-object v1, v10
|
|
|
|
move-object v3, v8
|
|
|
|
move-object v4, p0
|
|
|
|
move-object v5, v0
|
|
|
|
move-object v6, v7
|
|
|
|
invoke-direct/range {v1 .. v6}, Lcom/facebook/internal/security/OidcSecurityUtil$$ExternalSyntheticLambda0;-><init>(Ljava/net/URL;Lkotlin/jvm/internal/Ref$ObjectRef;Ljava/lang/String;Ljava/util/concurrent/locks/ReentrantLock;Ljava/util/concurrent/locks/Condition;)V
|
|
|
|
invoke-interface {v9, v10}, Ljava/util/concurrent/Executor;->execute(Ljava/lang/Runnable;)V
|
|
|
|
.line 50
|
|
invoke-interface {v0}, Ljava/util/concurrent/locks/Lock;->lock()V
|
|
|
|
:try_start_0
|
|
sget-object p0, Ljava/util/concurrent/TimeUnit;->MILLISECONDS:Ljava/util/concurrent/TimeUnit;
|
|
|
|
const-wide/16 v1, 0x1388
|
|
|
|
invoke-interface {v7, v1, v2, p0}, Ljava/util/concurrent/locks/Condition;->await(JLjava/util/concurrent/TimeUnit;)Z
|
|
:try_end_0
|
|
.catchall {:try_start_0 .. :try_end_0} :catchall_0
|
|
|
|
invoke-interface {v0}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
iget-object p0, v8, Lkotlin/jvm/internal/Ref$ObjectRef;->element:Ljava/lang/Object;
|
|
|
|
.line 51
|
|
check-cast p0, Ljava/lang/String;
|
|
|
|
return-object p0
|
|
|
|
:catchall_0
|
|
move-exception p0
|
|
|
|
.line 50
|
|
invoke-interface {v0}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
throw p0
|
|
.end method
|
|
|
|
.method private static final getRawKeyFromEndPoint$lambda-1(Ljava/net/URL;Lkotlin/jvm/internal/Ref$ObjectRef;Ljava/lang/String;Ljava/util/concurrent/locks/ReentrantLock;Ljava/util/concurrent/locks/Condition;)V
|
|
.locals 3
|
|
|
|
const-string v0, "$openIdKeyUrl"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "$result"
|
|
|
|
invoke-static {p1, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "$kid"
|
|
|
|
invoke-static {p2, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "$lock"
|
|
|
|
invoke-static {p3, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
.line 37
|
|
invoke-virtual {p0}, Ljava/net/URL;->openConnection()Ljava/net/URLConnection;
|
|
|
|
move-result-object p0
|
|
|
|
invoke-static {p0}, Lcom/google/firebase/perf/network/FirebasePerfUrlConnection;->instrument(Ljava/lang/Object;)Ljava/lang/Object;
|
|
|
|
move-result-object p0
|
|
|
|
check-cast p0, Ljava/net/URLConnection;
|
|
|
|
if-eqz p0, :cond_1
|
|
|
|
check-cast p0, Ljava/net/HttpURLConnection;
|
|
|
|
.line 39
|
|
:try_start_0
|
|
invoke-virtual {p0}, Ljava/net/URLConnection;->getInputStream()Ljava/io/InputStream;
|
|
|
|
move-result-object v0
|
|
|
|
const-string v1, "connection.inputStream"
|
|
|
|
invoke-static {v0, v1}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
sget-object v1, Lkotlin/text/Charsets;->UTF_8:Ljava/nio/charset/Charset;
|
|
|
|
new-instance v2, Ljava/io/InputStreamReader;
|
|
|
|
invoke-direct {v2, v0, v1}, Ljava/io/InputStreamReader;-><init>(Ljava/io/InputStream;Ljava/nio/charset/Charset;)V
|
|
|
|
instance-of v0, v2, Ljava/io/BufferedReader;
|
|
|
|
if-eqz v0, :cond_0
|
|
|
|
check-cast v2, Ljava/io/BufferedReader;
|
|
|
|
goto :goto_0
|
|
|
|
:catchall_0
|
|
move-exception p1
|
|
|
|
goto :goto_4
|
|
|
|
:catch_0
|
|
move-exception p1
|
|
|
|
goto :goto_2
|
|
|
|
:cond_0
|
|
new-instance v0, Ljava/io/BufferedReader;
|
|
|
|
const/16 v1, 0x2000
|
|
|
|
invoke-direct {v0, v2, v1}, Ljava/io/BufferedReader;-><init>(Ljava/io/Reader;I)V
|
|
|
|
move-object v2, v0
|
|
|
|
:goto_0
|
|
invoke-static {v2}, Lkotlin/io/TextStreamsKt;->readText(Ljava/io/Reader;)Ljava/lang/String;
|
|
|
|
move-result-object v0
|
|
|
|
.line 40
|
|
invoke-virtual {p0}, Ljava/net/URLConnection;->getInputStream()Ljava/io/InputStream;
|
|
|
|
move-result-object v1
|
|
|
|
invoke-virtual {v1}, Ljava/io/InputStream;->close()V
|
|
|
|
.line 41
|
|
new-instance v1, Lorg/json/JSONObject;
|
|
|
|
invoke-direct {v1, v0}, Lorg/json/JSONObject;-><init>(Ljava/lang/String;)V
|
|
|
|
invoke-virtual {v1, p2}, Lorg/json/JSONObject;->optString(Ljava/lang/String;)Ljava/lang/String;
|
|
|
|
move-result-object p2
|
|
|
|
iput-object p2, p1, Lkotlin/jvm/internal/Ref$ObjectRef;->element:Ljava/lang/Object;
|
|
:try_end_0
|
|
.catch Ljava/lang/Exception; {:try_start_0 .. :try_end_0} :catch_0
|
|
.catchall {:try_start_0 .. :try_end_0} :catchall_0
|
|
|
|
.line 46
|
|
invoke-virtual {p0}, Ljava/net/HttpURLConnection;->disconnect()V
|
|
|
|
.line 47
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->lock()V
|
|
|
|
:try_start_1
|
|
invoke-interface {p4}, Ljava/util/concurrent/locks/Condition;->signal()V
|
|
|
|
sget-object p0, Lkotlin/Unit;->INSTANCE:Lkotlin/Unit;
|
|
:try_end_1
|
|
.catchall {:try_start_1 .. :try_end_1} :catchall_1
|
|
|
|
:goto_1
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
goto :goto_3
|
|
|
|
:catchall_1
|
|
move-exception p0
|
|
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
throw p0
|
|
|
|
:goto_2
|
|
:try_start_2
|
|
sget-object p2, Lcom/facebook/internal/security/OidcSecurityUtil;->INSTANCE:Lcom/facebook/internal/security/OidcSecurityUtil;
|
|
|
|
.line 44
|
|
invoke-virtual {p2}, Ljava/lang/Object;->getClass()Ljava/lang/Class;
|
|
|
|
invoke-virtual {p1}, Ljava/lang/Throwable;->getMessage()Ljava/lang/String;
|
|
:try_end_2
|
|
.catchall {:try_start_2 .. :try_end_2} :catchall_0
|
|
|
|
.line 46
|
|
invoke-virtual {p0}, Ljava/net/HttpURLConnection;->disconnect()V
|
|
|
|
.line 47
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->lock()V
|
|
|
|
:try_start_3
|
|
invoke-interface {p4}, Ljava/util/concurrent/locks/Condition;->signal()V
|
|
|
|
sget-object p0, Lkotlin/Unit;->INSTANCE:Lkotlin/Unit;
|
|
:try_end_3
|
|
.catchall {:try_start_3 .. :try_end_3} :catchall_2
|
|
|
|
goto :goto_1
|
|
|
|
:goto_3
|
|
return-void
|
|
|
|
:catchall_2
|
|
move-exception p0
|
|
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
throw p0
|
|
|
|
.line 46
|
|
:goto_4
|
|
invoke-virtual {p0}, Ljava/net/HttpURLConnection;->disconnect()V
|
|
|
|
.line 47
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->lock()V
|
|
|
|
:try_start_4
|
|
invoke-interface {p4}, Ljava/util/concurrent/locks/Condition;->signal()V
|
|
|
|
sget-object p0, Lkotlin/Unit;->INSTANCE:Lkotlin/Unit;
|
|
:try_end_4
|
|
.catchall {:try_start_4 .. :try_end_4} :catchall_3
|
|
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
throw p1
|
|
|
|
:catchall_3
|
|
move-exception p0
|
|
|
|
invoke-interface {p3}, Ljava/util/concurrent/locks/Lock;->unlock()V
|
|
|
|
throw p0
|
|
|
|
.line 37
|
|
:cond_1
|
|
new-instance p0, Ljava/lang/NullPointerException;
|
|
|
|
const-string p1, "null cannot be cast to non-null type java.net.HttpURLConnection"
|
|
|
|
invoke-direct {p0, p1}, Ljava/lang/NullPointerException;-><init>(Ljava/lang/String;)V
|
|
|
|
throw p0
|
|
.end method
|
|
|
|
.method public static final verify(Ljava/security/PublicKey;Ljava/lang/String;Ljava/lang/String;)Z
|
|
.locals 1
|
|
|
|
const-string v0, "publicKey"
|
|
|
|
invoke-static {p0, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "data"
|
|
|
|
invoke-static {p1, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
const-string v0, "signature"
|
|
|
|
invoke-static {p2, v0}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullParameter(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
:try_start_0
|
|
const-string v0, "SHA256withRSA"
|
|
|
|
.line 84
|
|
invoke-static {v0}, Ljava/security/Signature;->getInstance(Ljava/lang/String;)Ljava/security/Signature;
|
|
|
|
move-result-object v0
|
|
|
|
.line 85
|
|
invoke-virtual {v0, p0}, Ljava/security/Signature;->initVerify(Ljava/security/PublicKey;)V
|
|
|
|
.line 86
|
|
sget-object p0, Lkotlin/text/Charsets;->UTF_8:Ljava/nio/charset/Charset;
|
|
|
|
invoke-virtual {p1, p0}, Ljava/lang/String;->getBytes(Ljava/nio/charset/Charset;)[B
|
|
|
|
move-result-object p0
|
|
|
|
const-string p1, "(this as java.lang.String).getBytes(charset)"
|
|
|
|
invoke-static {p0, p1}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
invoke-virtual {v0, p0}, Ljava/security/Signature;->update([B)V
|
|
|
|
const/16 p0, 0x8
|
|
|
|
.line 87
|
|
invoke-static {p2, p0}, Landroid/util/Base64;->decode(Ljava/lang/String;I)[B
|
|
|
|
move-result-object p0
|
|
|
|
const-string p1, "decode(signature, Base64.URL_SAFE)"
|
|
|
|
invoke-static {p0, p1}, Lkotlin/jvm/internal/Intrinsics;->checkNotNullExpressionValue(Ljava/lang/Object;Ljava/lang/String;)V
|
|
|
|
.line 88
|
|
invoke-virtual {v0, p0}, Ljava/security/Signature;->verify([B)Z
|
|
|
|
move-result p0
|
|
:try_end_0
|
|
.catch Ljava/lang/Exception; {:try_start_0 .. :try_end_0} :catch_0
|
|
|
|
return p0
|
|
|
|
:catch_0
|
|
const/4 p0, 0x0
|
|
|
|
return p0
|
|
.end method
|
|
|
|
|
|
# virtual methods
|
|
.method public final getOPENID_KEYS_PATH()Ljava/lang/String;
|
|
.locals 1
|
|
|
|
sget-object v0, Lcom/facebook/internal/security/OidcSecurityUtil;->OPENID_KEYS_PATH:Ljava/lang/String;
|
|
|
|
return-object v0
|
|
.end method
|