assert response.headers["WWW-Authenticate"] == "Basic"


def test_security_http_basic_invalid_password(client: TestClient):
    response = client.get("/users/me", auth=("stanleyjobson", "wrongpassword"))
    assert response.status_code == 401, response.text
    assert response.json() == {"detail": "Incorrect username or password"}
    assert response.headers["WWW-Authenticate"] == "Basic"

        final char[] wrongPassword = "concurrenttestpassworX".toCharArray(); // Different at end

        final NtlmPasswordAuthenticator correctAuth = new NtlmPasswordAuthenticator("domain", "user", new String(password));
        final NtlmPasswordAuthenticator wrongAuth = new NtlmPasswordAuthenticator("domain", "user", new String(wrongPassword));

        final int threadCount = 10;

	testCases := []struct {
		AccessKey string
		SecretKey string
		ErrCode   APIErrorCode
	}{
		{"", "", ErrInvalidAccessKeyID},
		{"admin", "", ErrSignatureDoesNotMatch},
		{"admin", "wrongpassword", ErrSignatureDoesNotMatch},
		{"wronguser", "mypassword", ErrInvalidAccessKeyID},
		{"", "mypassword", ErrInvalidAccessKeyID},
		{"admin", "mypassword", ErrNone},
	}

	for i, testCase := range testCases {

        // Given
        Type2Message type2 = createMockType2Message();
        String longPassword = createTestString(256); // Very long password

        // When/Then
        assertDoesNotThrow(() -> {
            Type3Message type3 = new Type3Message(createMockContext(), type2, null, longPassword, "DOMAIN", "user", "WORKSTATION", 0);
            assertNotNull(type3.getNTResponse());
        });
    }