* a one-arg constructor accepting its inner generator as an argument. This requirement enables it
 * to generate source code (since GWT cannot use reflection to generate the suites).
 *
 * @author Chris Povirk
 */
@GwtCompatible
public interface DerivedGenerator {
  TestSubjectGenerator<?> getInnerGenerator();

 * a one-arg constructor accepting its inner generator as an argument. This requirement enables it
 * to generate source code (since GWT cannot use reflection to generate the suites).
 *
 * @author Chris Povirk
 */
@GwtCompatible
public interface DerivedGenerator {
  TestSubjectGenerator<?> getInnerGenerator();

    }

    /**
     * Test that the constant-time comparison method is actually used internally.
     */
    @Test
    public void testConstantTimeMethodExists() throws Exception {
        // Use reflection to verify the constant-time method exists
        Method constantTimeMethod = NtlmPasswordAuthenticator.class.getDeclaredMethod("constantTimeEquals", char[].class, char[].class);

    Throwable thrownReflectionFailure = null;
    try {
      helper = new SafeAtomicHelper();
    } catch (Throwable reflectionFailure) { // sneaky checked exception
      // Some Android 5.0.x Samsung devices have bugs in JDK reflection APIs that cause
      // getDeclaredField to throw a NoSuchFieldException when the field is definitely there.
      // For these users fallback to a suboptimal implementation, based on synchronized. This will

    private void setupMocksForAuth() throws Exception {
        // This is a simplified way to get a transport context into the servlet.
        // A more robust solution might involve reflection or modifying the servlet for testability.
        try {
            java.lang.reflect.Field transportContextField = NtlmServlet.class.getDeclaredField("transportContext");
            transportContextField.setAccessible(true);

    }

    /**
     * Helper method to get private field value using reflection.
     * Searches the class hierarchy to find the field.
     */
    private Object getField(Object obj, String fieldName) throws Exception {
        Class<?> clazz = obj.getClass();
        while (clazz != null) {
            try {
                java.lang.reflect.Field field = clazz.getDeclaredField(fieldName);

    }

    private void injectProxy(ProxySelector selector, List<ArtifactRepository> repositories) {
        if (repositories != null && selector != null) {
            for (ArtifactRepository repository : repositories) {
                repository.setProxy(getProxy(selector, repository));
            }
        }
    }

    private org.apache.maven.repository.Proxy getProxy(ProxySelector selector, ArtifactRepository repository) {

        // Absent key -> CIFSException
        CIFSException noKey = assertThrows(CIFSException.class, session::getSessionKey);
        assertTrue(noKey.getMessage().contains("No session key"));

        // Set a key via reflection and verify retrieval
        byte[] key = new byte[] { 1, 2, 3, 4 };
        setField(session, "sessionKey", key);
        assertArrayEquals(key, session.getSessionKey());
    }

    @Test

        buffer.putShort((short) 0); // AceCount
        buffer.putShort((short) 0); // Padding

        return buffer.array();
    }

    /**
     * Helper method to set error code using reflection
     */
    private void setErrorCode(NtTransQuerySecurityDescResponse response, int errorCode) throws Exception {
        // Navigate through the inheritance hierarchy to find the errorCode field

        // The super constructor is called with (domainHandle, 0, acct_flags, null, 0)
        // We can't directly assert these values on the superclass fields without reflection or a testable superclass.
        // For 100% coverage, we'd need to ensure the superclass constructor is indeed called with these values.