private final AtomicBoolean lockedOut = new AtomicBoolean(false);

        void recordFailure() {
            failedAttempts.incrementAndGet();
            lastAttempt = Instant.now();
        }

        void reset() {
            failedAttempts.set(0);
            lockedOut.set(false);
            lockoutExpiry = null;
        }

        void lockOut(Duration duration) {

        } catch (SmbException e) {
            // Expected
        }

        // Wait for lockout to expire
        Thread.sleep(2100); // Lockout is 2 seconds in test setup

        // Should be allowed again
        assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {

        getFirstAddress();
        for (;;) {
            try {
                doConnect();
                return;
            } catch (final SmbAuthException sae) {
                throw sae; // Prevents account lockout on servers with multiple IPs
            } catch (final SmbException se) {
                if (getNextAddress() == null) {
                    throw se;
                }
                if (LogStream.level >= 3) {

        @DisplayName("Should calculate size for various lock counts")
        @ValueSource(ints = { 0, 1, 2, 5, 10, 20, 50, 100 })
        void testSizeWithVariousLockCounts(int lockCount) {
            Smb2Lock[] locks = new Smb2Lock[lockCount];
            for (int i = 0; i < lockCount; i++) {
                locks[i] = new Smb2Lock(i * 100L, 100L, Smb2Lock.SMB2_LOCKFLAG_EXCLUSIVE_LOCK);
            }

 * such as metadata requests and logout actions.
 */
public enum SsoResponseType {
    /**
     * Indicates a request for SSO metadata, which is typically used for
     * configuration and discovery in protocols like SAML.
     */
    METADATA,

    /**
     * Indicates a request to perform a logout operation, terminating the
     * user's SSO session.
     */
    LOGOUT;

        // Mock the stream directly
        SmbPipeOutputStream mockOut = mock(SmbPipeOutputStream.class);

        // Create spy and override getOutput
        SmbPipeHandleImpl spyHandle = spy(handle);
        doReturn(mockOut).when(spyHandle).getOutput();

        byte[] b = new byte[10];
        spyHandle.send(b, 2, 4);
        verify(mockOut).writeDirect(eq(b), eq(2), eq(4), eq(1));
    }

    @Test

    /**
     * Handles user logout and redirects to the login page.
     *
     * @return the HTML response after logout
     */
    @Execute
    public HtmlResponse index() {
        final OptionalThing<FessUserBean> userBean = getUserBean();
        activityHelper.logout(userBean);
        final String redirectUrl = userBean.map(user -> ComponentUtil.getSsoManager().logout(user)).orElse(null);
        fessLoginAssist.logout();

     * @return The action response.
     */
    ActionResponse getResponse(SsoResponseType responseType);

    /**
     * Performs logout for the specified user.
     * @param user The user to logout.
     * @return The logout URL or null if not applicable.
     */
    String logout(FessUserBean user);

            }
        }
        return null;
    }

    /**
     * Performs logout operations for the specified user using SSO.
     *
     * @param user The user to logout
     * @return The logout URL from the SSO authenticator, or null if SSO is not available
     */
    public String logout(final FessUserBean user) {
        if (available()) {

											<la:link href="/admin" styleClass="dropdown-item">
												<la:message key="labels.administration" />
											</la:link>
										</c:if>
										<la:link href="/logout/" styleClass="dropdown-item">
											<la:message key="labels.logout" />
										</la:link>
									</div>
								</div>
							</li>
						</c:when>
						<c:when test="${ pageLoginLink }">
							<li class="nav-item"><la:link href="/login"