assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {
        String username = "resetuser";
        String ip = "192.168.1.5";

        // Two failures
        assertTrue(rateLimiter.checkAttempt(username, ip));
        rateLimiter.recordFailure(username, ip);

    private TestFessUser testUser;

    @Override
    public void setUp() throws Exception {
        super.setUp();
        testUser = new TestFessUser();
        fessUserBean = new FessUserBean(testUser);
    }

    public void test_getUserId() {
        // Test with normal user
        testUser.setName("testuser");
        assertEquals("testuser", fessUserBean.getUserId());

public class FessUserTest extends UnitFessTestCase {

    public void test_getName() {
        // Test with normal user name
        FessUser user = new TestFessUser("testuser", new String[] { "role1" }, new String[] { "group1" }, new String[] { "perm1" });
        assertEquals("testuser", user.getName());

        // Test with empty name
        user = new TestFessUser("", new String[] {}, new String[] {}, new String[] {});

                        result = result.replace("${" + key + "}", String.valueOf(value));
                    } else if (value instanceof TestUser) {
                        // Handle TestUser object
                        TestUser user = (TestUser) value;
                        result = result.replace("${" + key + ".name}", user.name);

        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // User accessors
        assertNull(auth.getUser());
        auth.setUser(null);
        assertNull(auth.getUser());
        auth.setUser("");
        assertEquals("", auth.getUser());

        // Realm accessors
        assertNull(auth.getRealm());
        auth.setRealm("EXAMPLE.COM");

    @BeforeEach
    void setUp() throws CIFSException {
        Properties props = new Properties();
        // Set some default test properties
        props.setProperty("jcifs.smb.client.username", "testuser");
        props.setProperty("jcifs.smb.client.password", "testpass");
        props.setProperty("jcifs.smb.client.domain", "testdomain");
        props.setProperty("jcifs.netbios.hostname", "testhost");

    public void test_insert_noChains() {
        User user = createTestUser("testuser");
        authenticationManager.insert(user);
        // Should not throw exception even with no chains
    }

    // Test insert with single chain
    public void test_insert_singleChain() {
        User user = createTestUser("testuser");
        TestAuthenticationChain chain = new TestAuthenticationChain();

        testFessConfig.ldapAdminSyncPassword = false;

        boolean result = ldapChain.changePassword("testuser", "newpassword");

        assertFalse(result); // returns !changed || syncPassword = !true || false = false
        assertEquals("testuser", testLdapManager.changePasswordUsername);
        assertEquals("newpassword", testLdapManager.changePasswordPassword);

    public void test_constructor_withValidUsername() {
        // Test with a normal username
        String username = "testuser";
        FessUserNotFoundException exception = new FessUserNotFoundException(username);

        assertNotNull(exception);
        assertEquals("User is not found: testuser", exception.getMessage());
        assertNull(exception.getCause());
    }

    public void test_constructor_withEmptyUsername() {

    }

    @Test
    @DisplayName("Test log authentication success")
    void testLogAuthentication() {
        logger.logAuthentication(true, "testuser", "DOMAIN", "192.168.1.1");

        Map<EventType, Long> stats = logger.getStatistics();
        assertEquals(Long.valueOf(1), stats.get(EventType.AUTHENTICATION_SUCCESS), "Should have 1 authentication event");
    }