""".trimIndent(),
      )
    assertThat(verifier.verify("foo.com", session)).isFalse()
    assertThat(verifier.verify("a.foo.com", session)).isFalse()
    assertThat(verifier.verify("bar.com", session)).isFalse()
    assertThat(verifier.verify("a.bar.com", session)).isFalse()
    assertThat(verifier.verify("\u82b1\u5b50.co.jp", session)).isFalse()
    assertThat(verifier.verify("a.\u82b1\u5b50.co.jp", session)).isFalse()
  }

 * whenever there is a chance the check may fail "in real life". Example:
 *
 * {@snippet :
 * Bill bill = remoteService.getLastUnpaidBill();
 *
 * // In case bug 12345 happens again we'd rather just die
 * Verify.verify(bill.status() == Status.UNPAID,
 *     "Unexpected bill status: %s", bill.status());
 * }
 *
 * <h3>Comparison to alternatives</h3>
 *

     * This constructor used to instance a SigningDigest object for
     * signing/verifying SMB using kerberos session key.
     * The MAC Key = concat(Session Key, Digest of Challenge);
     * Because of Kerberos Authentication don't have challenge,
     * The MAC Key = Session Key
     *
     * @param macSigningKey
     *            The MAC key used to sign or verify SMB.
     */
    public SMB1SigningDigest(final byte[] macSigningKey) {

        verify(mockNdrBuffer).enc_ndr_long(5); // current_uses
        verify(mockNdrBuffer).enc_ndr_referent("C:\\test", 1);
        verify(mockNdrBuffer).enc_ndr_referent("password", 1);
        verify(mockNdrBuffer).enc_ndr_referent(shareInfo502.security_descriptor, 1);

        // Verify string encodings
        verify(mockDeferredBuffer, times(4)).enc_ndr_string(anyString());

        // Verify security descriptor encoding

        verify(mockDelegate).getConfig();
    }

    @Test
    void testGetDfs() {
        // Test getDfs() method
        DfsResolver mockDfsResolver = mock(DfsResolver.class);
        when(mockDelegate.getDfs()).thenReturn(mockDfsResolver);
        assertEquals(mockDfsResolver, cifsContextWrapper.getDfs());
        verify(mockDelegate).getDfs();
    }

    @Test

            verify(mockNdrBuffer).derive(anyInt());
            // Verify each node byte is encoded
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xAA);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xBB);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xCC);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xDD);
            verify(mockNdrBuffer).enc_ndr_small((byte) 0xEE);

        java.io.IOException ex = assertThrows(java.io.IOException.class, () -> transport.ensureConnected());
        assertTrue(ex.getMessage().contains("connect"));
        verify(transport).ensureConnected();
    }

    // Happy path: getDfsReferrals returns referral, verify arguments captured
    @Test
    @DisplayName("getDfsReferrals returns data and receives correct args")
    void getDfsReferrals_happy() throws Exception {

            inOrder.verify(mockCtx).isPreferredMech(any());
            inOrder.verify(mockCtx).getFlags();
            inOrder.verify(mockCtx).getSupportedMechs();
            inOrder.verify(mockCtx).supportsIntegrity();
            inOrder.verify(mockCtx).calculateMIC(any(byte[].class));
            inOrder.verify(mockCtx).verifyMIC(any(byte[].class), any(byte[].class));
            inOrder.verify(mockCtx).isMICAvailable();

            byte[] result = hmac.engineDigest();

            assertArrayEquals(finalDigest, result);
            verify(mockMd5, times(1)).digest(); // First call for inner digest
            verify(mockMd5, times(2)).update(any(byte[].class)); // Once in constructor with ipad, once in engineDigest with opad
            verify(mockMd5, times(1)).digest(innerDigest); // Second call for final digest
        }
    }

    @Test

            NdrShort ndrShort2 = new NdrShort(0);
            ndrShort2.decode(decodeBuffer);

            // Then: Values should match
            verify(encodeBuffer).enc_ndr_short(originalValue);
            verify(decodeBuffer).dec_ndr_short();
            assertEquals(ndrShort1.value, ndrShort2.value);
        }

        @Test