private final AtomicBoolean lockedOut = new AtomicBoolean(false);

        void recordFailure() {
            failedAttempts.incrementAndGet();
            lastAttempt = Instant.now();
        }

        void reset() {
            failedAttempts.set(0);
            lockedOut.set(false);
            lockoutExpiry = null;
        }

        void lockOut(Duration duration) {

        } catch (SmbException e) {
            // Expected
        }

        // Wait for lockout to expire
        Thread.sleep(2100); // Lockout is 2 seconds in test setup

        // Should be allowed again
        assertTrue(rateLimiter.checkAttempt(username, ip), "Should be allowed after lockout expiry");
    }

    @Test
    public void testSuccessResetsCounter() throws Exception {

        getFirstAddress();
        for (;;) {
            try {
                doConnect();
                return;
            } catch (final SmbAuthException sae) {
                throw sae; // Prevents account lockout on servers with multiple IPs
            } catch (final SmbException se) {
                if (getNextAddress() == null) {
                    throw se;
                }
                if (LogStream.level >= 3) {

        @DisplayName("Should calculate size for various lock counts")
        @ValueSource(ints = { 0, 1, 2, 5, 10, 20, 50, 100 })
        void testSizeWithVariousLockCounts(int lockCount) {
            Smb2Lock[] locks = new Smb2Lock[lockCount];
            for (int i = 0; i < lockCount; i++) {
                locks[i] = new Smb2Lock(i * 100L, 100L, Smb2Lock.SMB2_LOCKFLAG_EXCLUSIVE_LOCK);
            }

        // Mock the stream directly
        SmbPipeOutputStream mockOut = mock(SmbPipeOutputStream.class);

        // Create spy and override getOutput
        SmbPipeHandleImpl spyHandle = spy(handle);
        doReturn(mockOut).when(spyHandle).getOutput();

        byte[] b = new byte[10];
        spyHandle.send(b, 2, 4);
        verify(mockOut).writeDirect(eq(b), eq(2), eq(4), eq(1));
    }

    @Test

        assertNull(result);
    }

    // Test logout method
    public void test_logout_withValidUser() {
        // Setup
        FessUserBean user = FessUserBean.empty();
        String expectedUrl = "https://example.com/logout?user=testuser123";
        authenticator.setLogoutUrl(expectedUrl);

        // Execute
        String result = authenticator.logout(user);

        // Verify

        assertNotNull(response);
        assertEquals(expectedResponse, response);
    }

    // Test logout() method
    public void test_logout_whenNotAvailable() {
        currentSsoType = Constants.NONE;
        FessUserBean user = FessUserBean.empty();
        assertNull(ssoManager.logout(user));
    }

    public void test_logout_whenAvailableButNoAuthenticator() {
        currentSsoType = "invalid";

        assertEquals("LOGOUT", SsoResponseType.LOGOUT.toString());
    }

    public void test_equals() {
        // Test equals method for enum constants
        assertTrue(SsoResponseType.METADATA.equals(SsoResponseType.METADATA));
        assertTrue(SsoResponseType.LOGOUT.equals(SsoResponseType.LOGOUT));
        assertFalse(SsoResponseType.METADATA.equals(SsoResponseType.LOGOUT));

    /**
     * Handles user logout and redirects to the login page.
     *
     * @return the HTML response after logout
     */
    @Execute
    public HtmlResponse index() {
        final OptionalThing<FessUserBean> userBean = getUserBean();
        activityHelper.logout(userBean);
        final String redirectUrl = userBean.map(user -> ComponentUtil.getSsoManager().logout(user)).orElse(null);
        fessLoginAssist.logout();

 * such as metadata requests and logout actions.
 */
public enum SsoResponseType {
    /**
     * Indicates a request for SSO metadata, which is typically used for
     * configuration and discovery in protocols like SAML.
     */
    METADATA,

    /**
     * Indicates a request to perform a logout operation, terminating the
     * user's SSO session.
     */
    LOGOUT;