verify(filterChain).doFilter(any(NtlmHttpServletRequest.class), eq(response));
        verify(response, never()).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }

    @Test
    void testDoFilter_basicAuthInsecureNotAllowed() throws Exception {
        // Initialize filter with insecure basic auth disabled
        Map<String, String> initParams = new HashMap<>();
        initParams.put("jcifs.smb.client.domain", "TEST_DOMAIN");