NtlmPasswordAuthenticator cloned = original.clone();

        // Verify cloned values
        assertEquals(original.getUserDomain(), cloned.getUserDomain());
        assertEquals(original.getUsername(), cloned.getUsername());
        assertEquals(original.getPassword(), cloned.getPassword());

        // Verify password arrays are independent
        original.secureWipePassword();
        assertNull(original.getPassword());

    }

    /**
     * Returns the username.
     * @return The username.
     */
    public String getUsername() {
        return username;
    }

    /**
     * Sets the username.
     * @param username The username.
     */
    public void setUsername(final String username) {
        this.username = username;
    }

    /**
     * Returns the password.

        // Clone and verify basic fields copied
        JAASAuthenticator copy = (JAASAuthenticator) orig.clone();
        assertEquals(orig.getUsername(), copy.getUsername());
        assertEquals(orig.getUserDomain(), copy.getUserDomain());
        assertEquals(orig.getPassword(), copy.getPassword());

        // Test the cloning behavior with both null and non-null cached subjects

            String domB = this.getUserDomain() != null ? this.getUserDomain().toUpperCase() : null;
            return ntlm.type == this.type && Objects.equals(domA, domB) && ntlm.getUsername().equalsIgnoreCase(this.getUsername())
                    && constantTimeEquals(getPasswordAsCharArray(), ntlm.getPasswordAsCharArray());
        }
        return false;
    }

    /**

            }

            if (cb instanceof NameCallback nc) {
                String userDomain = this.getSpecifiedUserDomain();
                if (this.getUsername() != null && userDomain != null) {
                    nc.setName(this.getUsername() + "@" + userDomain);
                }
            } else if (cb instanceof PasswordCallback pc) {
                char[] passwordChars = this.getPasswordAsCharArray();

            this.timestamp = System.currentTimeMillis();
            this.clientAddress = clientAddress;
            this.serverAddress = serverAddress;
        }

        public String getUsername() {
            return username;
        }

        public String getDomain() {
            return domain;
        }

        public AuthType getAuthType() {
            return authType;

        if (this.auth instanceof NtlmNtHashAuthenticator) {
            return new Type3Message(this.transportContext, msg2, this.targetName, this.auth.getNTHash(), this.auth.getUserDomain(),
                    this.auth.getUsername(), this.workstation, this.ntlmsspFlags);
        }

        // Use secure password handling
        String passwordString = null;
        if (this.auth.isGuest()) {

        verify(session).setAttribute(eq("NtlmHttpAuth"), authCaptor.capture());

        NtlmPasswordAuthentication capturedAuth = authCaptor.getValue();
        assertEquals("user", capturedAuth.getUsername());
        assertEquals("TEST_DOMAIN", capturedAuth.getUserDomain());

        verify(response, never()).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
    }

    /**

        // Verify
        assertNotNull(result, "Authentication result should not be null");
        assertEquals("DOMAIN", result.getUserDomain());
        assertEquals("user", result.getUsername());
        // Cannot verify challenge and responses as they are not exposed in the API

        // Verify that the response is not modified for a successful authentication

        return new NtlmPasswordAuthenticator(smbAuthentication.getDomain() == null ? "" : smbAuthentication.getDomain(),
                smbAuthentication.getUsername(), smbAuthentication.getPassword());
    }

    /**
     * Retrieves response data for the given URI.
     *
     * @param uri the URI to retrieve data from