Subject presetSubject = new Subject();
        orig.setSubject(presetSubject);

        // Try to get a Subject, but handle the case where JAAS may not be configured
        Subject first = orig.getSubject();
        // In test environments, getSubject() may return null if JAAS is not configured
        // This is acceptable behavior - the test should focus on the cloning logic

        // Clone and verify basic fields copied

            }
            lc.login();

            Subject s = lc.getSubject();
            if (log.isDebugEnabled()) {
                log.debug("Got subject: " + s.getPrincipals());
            }
            if (log.isTraceEnabled()) {
                log.trace("Got subject " + s);
            }

            this.cachedSubject = s;
            return this.cachedSubject;

        // When - Multiple threads accessing trees concurrently
        for (int t = 0; t < threadCount; t++) {
            final int threadId = t;
            executor.submit(() -> {
                try {
                    startLatch.await(); // Wait for all threads to be ready

                    for (int i = 0; i < opsPerThread; i++) {

            AtomicInteger successCount = new AtomicInteger(0);
            ExecutorService executor = Executors.newFixedThreadPool(5);

            // Submit 5 concurrent tasks when max is 2
            for (int i = 0; i < 5; i++) {
                executor.submit(() -> {
                    try {
                        startLatch.await();

        Mockito.when(mockAddress.getHostAddress()).thenReturn("127.0.0.1");

        // Start timing
        long overallStart = System.nanoTime();

        for (int t = 0; t < threadCount; t++) {
            executor.submit(() -> {
                try {
                    startLatch.await();

                    long threadStart = System.nanoTime();
                    for (int i = 0; i < operationsPerThread; i++) {

            }

            // Submit task to wipe key
            executor.submit(() -> {
                try {
                    startLatch.await();
                    Thread.sleep(10);
                    digest.secureWipeKey();
                } catch (Exception e) {
                    // Ignore
                }
            });

            // Submit more tasks that try to verify data

Create a real JWT access token and return it.

{* ../../docs_src/security/tutorial004_an_py310.py hl[118:133] *}

### Technical details about the JWT "subject" `sub` { #technical-details-about-the-jwt-subject-sub }

The JWT specification says that there's a key `sub`, with the subject of the token.

It's optional to use it, but that's where you would put the user's identification, so we are using it here.

            }
        }
    }

    private static byte[] createToken(final SSPContext ctx, final byte[] token, Subject s) throws CIFSException {
        if (s != null) {
            try {
                return Subject.doAs(s,
                        (PrivilegedExceptionAction<byte[]>) () -> ctx.initSecContext(token, 0, token == null ? 0 : token.length));

Erstellen Sie einen echten JWT-Zugriffstoken und geben Sie ihn zurück.

{* ../../docs_src/security/tutorial004_an_py310.py hl[117:132] *}

### Technische Details zum JWT-„Subjekt“ `sub`

Die JWT-Spezifikation besagt, dass es einen Schlüssel `sub` mit dem Subjekt des Tokens gibt.

Die Verwendung ist optional, aber dort würden Sie die Identifikation des Benutzers speichern, daher verwenden wir das hier.

        for (int i = 0; i < testData.length; i++) {
            testData[i] = (byte) i;
        }

        // Run concurrent updates
        for (int i = 0; i < threadCount; i++) {
            executor.submit(() -> {
                try {
                    startLatch.await();
                    Method updateMethod = findMethod(transport.getClass(), "updatePreauthHash", byte[].class);