}

            final String nonce = (String) claimsSet.getClaim("nonce");
            if (logger.isDebugEnabled()) {
                logger.debug("nonce={}", nonce);
            }
            if (StringUtils.isEmpty(nonce) || !nonce.equals(stateData.getNonce())) {
                throw new SsoLoginException("could not validate nonce");
            }

        writeElastisearchJsonApi(zos, id, "nodes", "stats");
        writeElastisearchJsonApi(zos, id, "nodes", "_all");
        writeElastisearchJsonApi(zos, id, "nodes", "usage");
        writeElastisearchJsonApi(zos, id, "remote", "info");
        writeElastisearchJsonApi(zos, id, "tasks", "");
        writeElastisearchJsonApi(zos, id, "nodes", "hot_threads");
    }

    /**

            }
        }
        return false;
    }

    /**
     * Extracts text content from multiple nodes using XPath expression.
     *
     * @param document the parsed HTML document
     * @param xpath the XPath expression to evaluate
     * @return the concatenated text content from all matching nodes
     */
    protected String getMultipleNodeValue(final Document document, final String xpath) {

                    + ", hotThread=" + hotThread + "]";
        }

    }

    /**
     * Initializes OpenSearch monitoring probes.
     * Forces the loading of process, OS, and JVM monitoring probes
     * to ensure they are available for system monitoring during crawling.
     */
    static void initializeProbes() {
        // Force probes to be loaded

- Use behavior classes to access OpenSearch

### Helpers
- Cross-cutting utilities in `helper.*`
- Stateless, injected via DI
- Access via `ComponentUtil.getFooHelper()`

## Development Notes

- **Code Style**: Enforced by `mvn formatter:format`
- **License Headers**: Required (Apache 2.0) - use `mvn license:format`
- **Logging**: Log4j2 - `src/main/resources/log4j2.xml`

    }

    /**
     * Retrieves the current thread's {@link UrlQueue} instance.
     *
     * @return the {@link UrlQueue} instance associated with the current thread, or {@code null} if none is set.
     */
    public static UrlQueue<?> getUrlQueue() {
        return URL_QUEUE_THREAD_LOCAL.get();
    }

    /**
     * Sets the URL queue for the current thread. If the provided URL queue is null,

     */
    @Deprecated
    public String decryptoText(final String text) {
        return decryptText(text);
    }

    /**
     * Polls an encryption cipher from the queue, creating a new one if none are available.
     *
     * @return an encryption cipher
     */
    protected Cipher pollEncryptoCipher() {
        Cipher cipher = encryptoQueue.poll();
        if (cipher == null) {
            try {

            return OptionalThing.empty();
        }
        return OptionalThing.of(pipeline);
    }

    /**
     * Refreshes the crawling configuration cache by invalidating all cached entries.
     * This forces the next access to reload configurations from the underlying services.
     */
    public void refresh() {
        crawlingConfigCache.invalidateAll();
    }

    /**

```java
suggester.suggest()
    .setQuery("search")
    .execute()
    .done(response -> { /* handle success */ })
    .error(throwable -> { /* handle error */ });
```

---

## Important Notes

### Thread Safety
- **Suggester**: Thread-safe for queries
- **SuggestIndexer**: Thread-safe for indexing
- **SuggestSettings**: NOT thread-safe for modifications

### Performance

)

REM set to headless, just in case
set FESS_JAVA_OPTS=%FESS_JAVA_OPTS% -Djava.awt.headless=true

REM maximum # keep-alive connections to maintain at once
set FESS_JAVA_OPTS=%FESS_JAVA_OPTS% -Dhttp.maxConnections=20

REM Force the JVM to use IPv4 stack
if NOT "%FESS_USE_IPV4%" == "" (
set FESS_JAVA_OPTS=%FESS_JAVA_OPTS% -Djava.net.preferIPv4Stack=true
)

REM proxy