## Our Responsibilities

Project maintainers are responsible for clarifying the standards of acceptable behavior and are expected to take appropriate and fair corrective action in response to any instances of unacceptable behavior.

            }
        };

        // Test with timeout set
        client.setAccessTimeout(10);
        try {
            ResponseData result = client.doGet("s3://test/file.txt");
            assertNotNull("Response should not be null", result);
            assertEquals(200, result.getHttpStatusCode());
        } catch (Exception e) {
            fail("Should not throw exception: " + e.getMessage());
        }

Create a variable `ALGORITHM` with the algorithm used to sign the JWT token and set it to `"HS256"`.

Create a variable for the expiration of the token.

Define a Pydantic Model that will be used in the token endpoint for the response.

Create a utility function to generate a new access token.

{* ../../docs_src/security/tutorial004_an_py310.py hl[4,7,13:15,29:31,79:87] *}

## Update the dependencies { #update-the-dependencies }

    $ unzip target/releases/fess-*.zip
    $ ./fess-*/bin/fess &

Wait for Fess to be ready (this may take up to 60 seconds):

    $ curl -s "http://localhost:8080/api/v1/health"

You should see a JSON response when Fess is ready.

#### 3. Clone Test Data

Required for SearchApiTests:

    $ git clone https://github.com/codelibs/fess-testdata.git /tmp/fess-testdata

#### 4. Run Integration Tests

        this.compressionAlgorithms = compressionAlgorithms != null ? compressionAlgorithms.clone() : new int[0];
        this.flags = flags;
    }

    /**
     * Default constructor for response parsing.
     */
    public CompressionNegotiateContext() {
        this.compressionAlgorithms = new int[0];
        this.flags = 0;
    }

    @Override
    public int getContextType() {

    assertThat(cacheControl.onlyIfCached).isTrue()
    assertThat(cacheControl.noTransform).isTrue()
    assertThat(cacheControl.immutable).isTrue()

    // These members are accessible to response headers only.
    assertThat(cacheControl.sMaxAgeSeconds).isEqualTo(-1)
    assertThat(cacheControl.isPrivate).isFalse()
    assertThat(cacheControl.isPublic).isFalse()
    assertThat(cacheControl.mustRevalidate).isFalse()

<img src="/img/deployment/https/https05.drawio.svg">

### HTTP‑ответ { #http-response }

Приложение обработает запрос и отправит **обычный (незашифрованный) HTTP‑ответ** прокси‑серверу TLS-терминации.

<img src="/img/deployment/https/https06.drawio.svg">

### HTTPS‑ответ { #https-response }

     */
    @Override
    public ResultData transform(final ResponseData responseData) {
        if (responseData == null || !responseData.hasResponseBody()) {
            throw new CrawlingAccessException("No response body.");
        }

        try (final InputStream is = responseData.getResponseBody()) {
            final DocumentBuilderFactory factory = DocumentBuilderFactory.newInstance();

            } catch (final IOException ioe) {}
        }
    }

    /**
     * Handles file download requests for SMB files.
     * @param req the HTTP servlet request
     * @param resp the HTTP servlet response
     * @param file the SMB file to download
     * @throws IOException if an I/O error occurs
     */

```

### Using WebIdentiy API

On another terminal run `web-identity.go` a sample client application which obtains JWT id_tokens from an identity provider, in our case its Keycloak. Uses the returned id_token response to get new temporary credentials from the MinIO server using the STS API call `AssumeRoleWithWebIdentity`.

```