// Return roles with duplicates
                String[] roles = new String[] { "role1", "role2", "role1", "Uuser", "role2" };
                callback.accept(roles);
                return roles;
            }

            @Override
            public String normalizePermissionName(String name) {

        assertTrue(roleSet.contains("role1"));

        encrypted = false;
        value = "role1,role2";
        roleSet = decodedRoleList(roleQueryHelperImpl, value, encrypted);
        assertEquals(2, roleSet.size());
        assertTrue(roleSet.contains("role1"));
        assertTrue(roleSet.contains("role2"));

        encrypted = false;
        value = "role1,role2,role3";

        assertTrue(result.contains("role1"));
        assertTrue(result.contains("field1"));
        assertTrue(result.contains("exclude1"));
    }

    @Test
    public void test_getCacheKey_sorting() {
        String seed = "test_seed";
        String[] tags = { "zzz", "aaa", "mmm" };
        String[] roles = { "role3", "role1", "role2" };
        String[] fields = { "field3", "field1", "field2" };

        Secured secured = method.getAnnotation(Secured.class);
        assertNotNull(secured);
        String[] roles = secured.value();
        assertEquals(3, roles.length);
        assertEquals("ROLE_USER", roles[0]);
        assertEquals("ROLE_ADMIN", roles[1]);
        assertEquals("ROLE_GUEST", roles[2]);
    }

    // Test non-annotated method
    @Test

        testUser.setRoleNames(new String[] { "admin", "user", "manager" });
        roles = fessUserBean.getRoles();
        assertEquals(3, roles.length);
        assertEquals("admin", roles[0]);
        assertEquals("user", roles[1]);
        assertEquals("manager", roles[2]);
    }

    @Test
    public void test_getGroups() {
        // Test with empty groups
        testUser.setGroupNames(new String[] {});

                logger.warn("Failed to access groups/roles: {}", contentMap);
            }
        } catch (final IOException e) {
            logger.warn("Failed to access groups/roles in Entra ID.", e);
        }
    }

    /**
     * Adds a group or role name to the specified list.
     * @param list The list to add the group or role name to.
     * @param value The group or role name value.

authentication.admin.users=admin
# Admin role names for authentication.
authentication.admin.roles=admin

# Default permissions for search roles.
role.search.default.permissions=
# Default display permissions for search roles.
role.search.default.display.permissions={role}guest
# Guest permissions for search roles.
role.search.guest.permissions={role}guest

# Prefix for user roles in search.

        BoolQueryBuilder boolQuery = QueryBuilders.boolQuery();
        Set<String> roles = Set.of("role1", "role2");

        queryHelper.buildRoleQuery(roles, boolQuery);

        String queryString = boolQuery.toString();
        assertTrue(queryString.contains("role1"));
        assertTrue(queryString.contains("role2"));
        assertTrue(queryString.contains("filter"));
    }

    @Test

labels.oic_base_url=Base URL
labels.oic_default_groups=Default Groups
labels.oic_default_roles=Default Roles
labels.general_menu_saml=SAML
labels.saml_sp_base_url=SP Base URL
labels.saml_attribute_group_name=Group Attribute Name
labels.saml_attribute_role_name=Role Attribute Name
labels.saml_default_groups=Default Groups
labels.saml_default_roles=Default Roles
labels.general_menu_spnego=SPNEGO
labels.spnego_krb5_conf=Krb5 Config

## Architecture Patterns

### Action (Controller)
- Hierarchy: `TypicalAction` → `FessBaseAction` → `FessAdminAction`/`FessSearchAction`
- `@Execute` marks web endpoints
- `@Resource` for DI
- `@Secured({ "role", "role-view" })` for authorization
- Return `HtmlResponse` for JSP, `JsonResponse` for APIs

### Service
- Inject behaviors (Bhv) for data access
- Use `OptionalEntity<T>` for nullable returns