- name: Checkout minio-iam-testing
        uses: actions/checkout@v4
        with:
          repository: minio/minio-iam-testing
          path: minio-iam-testing
      - name: Test import of IAM artifacts when in fresh cluster there are missing groups etc
        run: |
          make test-iam-import-with-missing-entities
  iam-import-with-openid:
    name: Test IAM import in new cluster with opendid configurations

            // Create fresh authentication
            NtlmPasswordAuthentication auth = new NtlmPasswordAuthentication(baseContext, WORKGROUP, USERNAME, PASSWORD);
            CIFSContext result = baseContext.withCredentials(auth);

            // Add a unique identifier to help with debugging
            log.debug("Created fresh context for test isolation: {}", System.currentTimeMillis());

        .onlyIfCached()
        .noTransform()
        .immutable()
        .build()
    assertThat(cacheControl.toString()).isEqualTo(
      "no-cache, no-store, max-age=1, max-stale=2, min-fresh=3, only-if-cached, " +
        "no-transform, immutable",
    )
    assertThat(cacheControl.noCache).isTrue()
    assertThat(cacheControl.noStore).isTrue()
    assertThat(cacheControl.maxAgeSeconds).isEqualTo(1)

        if (mustRevalidate) append("must-revalidate, ")
        if (maxStaleSeconds != -1) append("max-stale=").append(maxStaleSeconds).append(", ")
        if (minFreshSeconds != -1) append("min-fresh=").append(minFreshSeconds).append(", ")
        if (onlyIfCached) append("only-if-cached, ")
        if (noTransform) append("no-transform, ")
        if (immutable) append("immutable, ")
        if (isEmpty()) return ""

			name:           "Correct-Decom-Pool-Removed",
			expectedErr:    false,
			expectedUpdate: true,
		},
		{
			meta:           poolMeta{}, // no-pool info available fresh setup.
			pools:          pools,
			name:           "Correct-Fresh-Setup",
			expectedErr:    false,
			expectedUpdate: true,
		},
		{
			meta:           nmeta2,
			pools:          orderChangePools,

        // MockitoExtension handles this automatically for @Mock fields, but good to be aware.
    }

    @Test
    void testIsReceived() {
        // Test initial state (should be false by default for a fresh mock)
        assertFalse(mockResponse.isReceived());

        // Simulate received status
        when(mockResponse.isReceived()).thenReturn(true);
        assertTrue(mockResponse.isReceived());

      assertThat(ioe.cause!!).isInstanceOf<EOFException>()
    }
  }

  // TODO GET preferred order - with tests to confirm this
  // 1. successful fresh cached GET response
  // 2. unsuccessful (404, 500) fresh cached GET response
  // 3. successful network response
  // 4. successful stale cached GET response
  // 5. unsuccessful response
  @Test
  fun usesCache() {

        /**
         * Verifies that isStale returns false for a fresh handle.
         */
        @Test
        public void testIsStale_ReturnsFalseWhenNotStale() {
            when(smbPipeHandle.isStale()).thenReturn(false);
            assertFalse(smbPipeHandle.isStale(), "isStale() should return false for a fresh handle.");
        }

        /**

    assertThat(client.connectionPool.connectionCount()).isEqualTo(2)
    val c0e0 = server.takeRequest()
    assertThat(c0e0.connectionIndex).isEqualTo(0) // Fresh connection.
    val c1e0 = server.takeRequest()
    assertThat(c1e0.connectionIndex).isEqualTo(1) // Fresh connection.
  }

  /**
   * Check we would use an existing connection to a later DNS result instead of connecting to the
   * first DNS result for the first time.

      Security.insertProviderAt(Conscrypt.newProviderBuilder().build(), 1)

      val request = Request.Builder().url("https://facebook.com/robots.txt").build()

      var socketClass: String? = null

      // Need fresh client to reset sslSocketFactoryOrNull
      client =
        OkHttpClient
          .Builder()
          .eventListenerFactory(
            clientTestRule.wrap(
              object : EventListener() {