initParams.put("jcifs.http.enableBasic", "true");
        initParams.put("jcifs.http.insecureBasic", "true");
        initParams.put("jcifs.http.basicRealm", "TestRealm");

        when(filterConfig.getInitParameterNames()).thenReturn(Collections.enumeration(initParams.keySet()));

        initParams.put("jcifs.http.enableBasic", "true");
        initParams.put("jcifs.http.insecureBasic", "true");
        initParams.put("jcifs.http.basicRealm", "TestRealm");

        lenient().when(servletConfig.getInitParameterNames()).thenReturn(Collections.enumeration(initParams.keySet()));

	testConfig := providerCfg{
		DiscoveryDoc: DiscoveryDoc{
			TokenEndpoint: "http://keycloak.test/token/endpoint",
		},
	}
	testKvs := config.KVS{}
	testKvs.Set(Vendor, "keycloak")
	testKvs.Set(KeyCloakRealm, "TestRealm")
	testKvs.Set(KeyCloakAdminURL, "http://keycloak.test/auth/admin")
	cfgGet := func(param string) string {
		return testKvs.Get(param)
	}

	if testConfig.provider != nil {

        initializeNetworkExplorer(true, "TestRealm");

        // Test with no auth - should request Basic
        when(request.getHeader("Authorization")).thenReturn(null);

        networkExplorer.doGet(request, response);

        // NetworkExplorer uses addHeader for Basic auth
        verify(response).addHeader("WWW-Authenticate", "Basic realm=\"TestRealm\"");