* it is supplied by the user at runtime.
     *
     * @return the password
     * @deprecated Use getPasswordAsCharArray() for better security
     */
    @Deprecated
    public String getPassword() {
        checkNotClosed();
        log.warn("getPassword() is deprecated and insecure. Use getPasswordAsCharArray() instead.");
        return this.password != null ? new String(this.password) : null;
    }

    /**

        // Spy to override getPasswordAsCharArray() to return null
        JAASAuthenticator spyAuth = spy(new JAASAuthenticator("DOM", "user", null));
        when(spyAuth.getPasswordAsCharArray()).thenReturn(null);

        PasswordCallback pc = new PasswordCallback("pass:", false);
        spyAuth.handle(new Callback[] { pc });

        // Since getPasswordAsCharArray() returned null, handler should not set a password

        assertNotNull(auth1.getPasswordAsCharArray());
        assertEquals(0, auth1.getPasswordAsCharArray().length);

        // Test with empty char[] password
        NtlmPasswordAuthenticator auth2 = new NtlmPasswordAuthenticator("testuser", new char[0]);
        assertEquals("", auth2.getPassword());
        assertNotNull(auth2.getPasswordAsCharArray());

        char[] password = authenticator.getPasswordAsCharArray();
        assertNotNull(password, "Password char array should not be null");
        assertArrayEquals(testPassword.toCharArray(), password, "Password should match");

        // Verify it returns a clone, not the original
        password[0] = 'X';
        char[] password2 = authenticator.getPasswordAsCharArray();

        String passwordString = null;
        if (this.auth.isGuest()) {
            passwordString = this.transportContext.getConfig().getGuestPassword();
        } else {
            char[] passwordChars = this.auth.getPasswordAsCharArray();
            if (passwordChars != null) {
                passwordString = new String(passwordChars);
                // Securely wipe the char array immediately after use

                    nc.setName(this.getUsername() + "@" + userDomain);
                }
            } else if (cb instanceof PasswordCallback pc) {
                char[] passwordChars = this.getPasswordAsCharArray();
                if (passwordChars != null) {
                    pc.setPassword(passwordChars);
                }
            }
        }
    }