// We can directly test getCredentials() to ensure it returns the initial credentials.
        assertEquals(mockCredentials, wrapper.getCredentials(), "Initial credentials should be set by constructor");
    }

    @Test
    @DisplayName("Should return the credentials provided in the constructor")
    void testGetCredentials() {

    }

    private Map<String, Map<String, CacheEntry<DfsReferralDataInternal>>> getTrustedDomains(final CIFSContext tf) throws SmbAuthException {
        if (tf.getConfig().isDfsDisabled() || tf.getCredentials().getUserDomain() == null
                || tf.getCredentials().getUserDomain().isEmpty()) {
            return null;
        }

        if (this._domains != null && System.currentTimeMillis() > this._domains.expiration) {

            builder.setProjectId(projectId);
        }

        if (StringUtil.isNotBlank(endpoint)) {
            // For fake-gcs-server or custom endpoint
            builder.setHost(endpoint);
            builder.setCredentials(NoCredentials.getInstance());
            if (logger.isDebugEnabled()) {
                logger.debug("Using custom GCS endpoint: {}", endpoint);
            }
        } else {

        if (StringUtil.isNotBlank(endpoint)) {
            // For fake-gcs-server or custom endpoint
            builder.setHost(endpoint);
            builder.setCredentials(NoCredentials.getInstance());
            if (logger.isDebugEnabled()) {
                logger.debug("Using custom GCS endpoint: {}", endpoint);
            }
        } else {

                    message.setFlag(NtlmFlags.NTLMSSP_REQUEST_TARGET, true);
                }
            } else if (this.transportContext.getCredentials() instanceof NtlmPasswordAuthentication) {
                final NtlmPasswordAuthentication npa = (NtlmPasswordAuthentication) this.transportContext.getCredentials();
                String domain = npa.getUserDomain();
                String user = !npa.isAnonymous() ? npa.getUsername() : null;

            return null; // not used
        }
    };

    @BeforeEach
    void setup() {
        when(ctx.getConfig()).thenReturn(config);
        when(ctx.getCredentials()).thenReturn(creds);
        when(ctx.getNameServiceClient()).thenReturn(nsc);
    }

    private static URL smbUrl(String spec) {
        try {
            return new URL(null, spec, SMB_HANDLER);

        when(config.getMaxRequestRetries()).thenReturn(2);
        when(config.isTraceResourceUsage()).thenReturn(false);
        // Mock credentials to avoid NullPointerException
        when(ctx.getCredentials()).thenReturn(credentials);
        when(credentials.getUserDomain()).thenReturn("DOMAIN");
        // Mock DFS resolver
        when(ctx.getDfs()).thenReturn(dfsResolver);
    }

        mockConfig = Mockito.mock(Configuration.class);
        mockCredentials = Mockito.mock(Credentials.class);

        Mockito.when(mockContext.getConfig()).thenReturn(mockConfig);
        Mockito.when(mockContext.getCredentials()).thenReturn(mockCredentials);

        // Mock CredentialsInternal for session tests
        jcifs.smb.CredentialsInternal mockCredentialsInternal = Mockito.mock(jcifs.smb.CredentialsInternal.class);

        NtlmPasswordAuthentication creds = new NtlmPasswordAuthentication(
                new BaseContext(new PropertyConfiguration(System.getProperties())), "domain", "user", "password");
        when(mockCifsContext.getCredentials()).thenReturn(creds);
        when(mockCifsContext.getConfig()).thenReturn(new PropertyConfiguration(System.getProperties()));
        when(mockCifsContext.getNameServiceClient()).thenReturn(mockNameServiceClient);

        // Base context configuration - always needed
        when(cifsContext.getConfig()).thenReturn(configuration);

        // Context and credentials wiring - used by most tests
        when(cifsContext.getCredentials()).thenReturn(credentials);
        when(credentials.unwrap(CredentialsInternal.class)).thenReturn(credentialsInternal);
        when(credentialsInternal.clone()).thenReturn(credentialsInternal);