assertTrue(result, "Filter should accept any provided name");
        verifyNoInteractions(mockDir);
    }

    /**
     * Happy-path: a filter that rejects any name.
     */
    @ParameterizedTest
    @DisplayName("rejects every provided name")
    @ValueSource(strings = { "file.txt", "data.DAT", "a", "", "   " })
    void rejectsAnyNameReturnsFalse(String input) throws Exception {

        verify(treeHandle, times(1)).release();
    }

    @Test
    @DisplayName("Iterator should handle filter that rejects all entries")
    void testIterator_FilterRejectsAll() throws Exception {
        // Given: A filter that rejects everything
        when(locator.getType()).thenReturn(SmbConstants.TYPE_WORKGROUP);
        when(locator.getURL()).thenReturn(createSmbURL("smb://"));

        assertFalse(itr.hasNext());
    }

    @Test
    @DisplayName("Filter rejects first, accepts second; interactions verified")
    void filterRejectsThenAccepts_nextYieldsAccepted() throws Exception {
        // Arrange: two entries; filter rejects first, accepts second
        setupParentForUrlCreation();
        StubFileEntry skip = new StubFileEntry("SKIPME", SmbConstants.TYPE_SERVER);

        @Test
        @DisplayName("createEncryptionContext rejects when SMB2/3 not negotiated")
        void createEncryptionContext_rejects_noNegotiation() {
            assertThrows(SmbUnsupportedOperationException.class, () -> transport.createEncryptionContext(new byte[] { 1 }, null));
        }

        @Test
        @DisplayName("createEncryptionContext rejects pre-SMB3 dialect")

            assertEquals(SmbPipeResource.PIPE_TYPE_RDWR, pipe.getPipeType(), "Pipe type should match constructor");
        }

        @ParameterizedTest
        @DisplayName("Rejects non-IPC$ URLs")
        @ValueSource(strings = { "smb://server/C$/foo", "smb://server/public/foo", "smb://server/share/path" })
        void rejectsNonIpcShare(String url) {
            // Arrange & Act & Assert

        // negative size -> reject
        when(smbFile.length()).thenReturn(-1L);
        assertFalse(filter.accept(smbFile), "Negative size should be rejected");
        verify(smbFile, times(1)).length();

        // zero size -> reject
        reset(smbFile);
        when(smbFile.length()).thenReturn(0L);
        assertFalse(filter.accept(smbFile), "Zero size should be rejected");
        verify(smbFile, times(1)).length();

        assertNull(request.getUserPrincipal());
        assertEquals("NTLM", request.getAuthType());
    }

    @Test
    @DisplayName("constructor rejects null HttpServletRequest")
    void testConstructorWithNullHttpRequest(@Mock Principal mockPrincipal) {
        // HttpServletRequestWrapper throws IllegalArgumentException for null request

        assertFalse(init.getContextFlag(NegTokenInit.CONFIDENTIALITY));
        assertEquals(NegTokenInit.INTEGRITY, init.getContextFlags());
    }

    @Test
    @DisplayName("Parse rejects wrong SPNEGO OID")
    void testParseRejectsWrongOid() throws Exception {
        byte[] token = buildInitToken(new ASN1ObjectIdentifier[] { OID_KRB }, 0, null, null, false, "1.2.840.113554.1.2.2", // Kerberos OID instead of SPNEGO OID

   *   Throwables.propagateIfInstanceOf(t, SQLException.class);
   *   throw Throwables.propagate(t);
   * }
   * </pre>
   *
   * @deprecated Use {@link #throwIfInstanceOf}, which has the same behavior but rejects {@code
   *     null}.
   */
  @Deprecated
  @J2ktIncompatible
  @GwtIncompatible // throwIfInstanceOf
  public static <X extends Throwable> void propagateIfInstanceOf(

        NegTokenInit tok = new NegTokenInit(mechs, 0, null, null);
        return tok.toByteArray();
    }

    @Test
    @DisplayName("createContext: rejects NetBIOS/short host names")
    void createContext_rejectsShortNetbiosHost() {
        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);