// prepare a dummy request/response using a real SMB block type
        ServerMessageBlock req = new SmbComOpenAndX("test.txt", 0, 0, null);
        ServerMessageBlock resp = new SmbComOpenAndX("test.txt", 0, 0, null);
        resp.received = true;

        session.transport(); // initialise transport

        // Mock the sessionSetup behavior to avoid actual network calls

     */
    private static void setResults(Smb2QueryDirectoryResponse resp, FileEntry[] results) throws Exception {
        Field f = Smb2QueryDirectoryResponse.class.getDeclaredField("results");
        f.setAccessible(true);
        f.set(resp, results);
    }

    /**
     * Reflectively set the 'status' on a SMB2 response to drive control flow.
     */

     */
    @Override
    public SmbComNTCreateAndXResponse initResponse(final CIFSContext tc) {
        final SmbComNTCreateAndXResponse resp = new SmbComNTCreateAndXResponse(tc.getConfig());
        setResponse(resp);
        return resp;
    }

    /**
     * Adds flags to the flags0 field.
     *
     * @param fl
     *            the flags0 to set
     */

     */
    void setupRequest(CommonServerMessageBlock request);

    /**
     * Sets up the given response with negotiated parameters.
     *
     * @param resp the response to configure
     */
    void setupResponse(Response resp);

    /**
     * Checks whether SMB message signing has been successfully negotiated.
     *
     * @return whether signing has been negotiated
     */

		return d, err
	}
	clnt := http.Client{
		Transport: http.DefaultTransport,
	}
	resp, err := clnt.Do(req)
	if err != nil {
		return d, err
	}
	defer resp.Body.Close()
	if resp.StatusCode != http.StatusOK {
		return d, fmt.Errorf("unexpected error returned by %s : status(%s)", ustr, resp.Status)
	}
	dec := json.NewDecoder(resp.Body)
	if err = dec.Decode(&d); err != nil {
		return d, err
	}
	return d, nil
}

```JSON
{
    "X-Token values": [
        "bar",
        "foo"
    ]
}
```

## Zusammenfassung { #recap }

Deklarieren Sie Header mit `Header`, wobei Sie dasselbe gängige Muster wie bei `Query`, `Path` und `Cookie` verwenden.

        // Act
        byte[] resp = NtlmUtil.getLMv2Response(domain, user, password, challenge, clientChallenge);

        // Assert
        assertEquals(24, resp.length, "LMv2 response length must be 24");
        assertArrayEquals(clientChallenge, Arrays.copyOfRange(resp, 16, 24), "Client challenge must be copied to last 8 bytes");
        assertFalse(Arrays.equals(new byte[24], resp), "Response must not be all zeros");
    }

Esto no es una limitación de **FastAPI**, es parte del protocolo HTTP.

///

## Recapitulación { #recap }

Password: `secret2`

And try to use the operation `GET` with the path `/users/me`.

You will get an "Inactive user" error, like:

```JSON
{
  "detail": "Inactive user"
}
```

## Recap { #recap }

You now have the tools to implement a complete security system based on `username` and `password` for your API.

			StatusCode: http.StatusInternalServerError,
		}
	}
	if resp == nil {
		return content, AdminError{
			Code:       AdminUpdateUnexpectedFailure,
			Message:    fmt.Sprintf("No response from server to download URL %s", u),
			StatusCode: http.StatusInternalServerError,
		}
	}
	defer xhttp.DrainBody(resp.Body)

	if resp.StatusCode != http.StatusOK {
		return content, AdminError{