For this simple example, we are going to just be completely insecure and return the same `username` as the token.

/// tip

In the next chapter, you will see a real secure implementation, with password hashing and <abbr title="JSON Web Tokens">JWT</abbr> tokens.

But for now, let's focus on the specific details we need.

///

        assertEquals(customPath, firstCall);
        assertEquals(firstCall, secondCall);
        assertEquals(secondCall, thirdCall);
    }

    // Test with changing query string (though typically wouldn't change in real scenario)
    @Test
    public void test_getServletPath_withChangingQueryString() {
        final String originalPath = "/original/path";
        final String customPath = "/api/v1/dynamic";

        void doEnum_withEmptyHost_throwsUnsupportedWithoutNetwork() throws Exception {
            // Arrange: mock parent + locator so no real network is used
            SmbFile parent = mock(SmbFile.class, RETURNS_DEEP_STUBS);
            SmbResourceLocator locator = mock(SmbResourceLocator.class);
            when(parent.getLocator()).thenReturn(locator);

        p.setProperty("jcifs.netbios.cachePolicy", "1200");
        /*
         * The Filter can only work with NTLMv1 as it uses a man-in-the-middle
         * technique that NTLMv2 specifically thwarts. A real NTLM Filter would
         * need to do a NETLOGON RPC that JCIFS will likely never implement
         * because it requires a lot of extra crypto not used by CIFS.
         */

        return getPath("WEB-INF/", "env/" + envName, names);
    }

    /**
     * Gets the path by trying multiple locations in order of preference.
     * First tries to get the real path from servlet context, then checks various
     * fallback locations including source and target directories.
     *
     * @param root the root directory (e.g., "WEB-INF/")

   * <p>In certain cases, such as outputting debugging information or constructing a message to be
   * used for another unchecked exception, an exception during string formatting would serve little
   * purpose except to supplant the real information you were trying to provide. These are the cases
   * this method is made for; it instead generates a best-effort string with all supplied argument

        when(address.getHostAddress()).thenReturn("127.0.0.1");
        when(address.getHostName()).thenReturn("localhost");

        // Create the transport with safe defaults (no real sockets)
        transport = new SmbTransportImpl(ctx, address, 445, null, 0, false);

        // Reset MID to a known starting point for deterministic behavior
        setField(transport, "mid", new AtomicLong());
    }

            ComponentUtil.setFessConfig(null);
        }
    }

    @Test
    public void test_isTarget_withMultipleConditions() {
        // Test isTarget with multiple MIME type patterns (simulating real config)
        generator = new TestThumbnailGenerator();

        FessConfig mockConfig = new FessConfig.SimpleImpl() {
            @Override
            public String getIndexFieldThumbnail() {

      }
    }

    /*
     * TODO(cpovirk): `return (V) removedValue` once our checker permits that.
     *
     * (We promoted a class of warnings into errors because sometimes they indicate real problems.
     * But now we need to "undo" some instance of spurious errors, as discussed in
     * https://github.com/jspecify/checker-framework/issues/8.)
     */
    return removedValue == null ? null : (V) removedValue;

    @Mock
    private Configuration mockConfig;

    private NetShareEnumResponse response;

    @BeforeEach
    void setUp() throws Exception {
        MockitoAnnotations.openMocks(this);
        // Use real configuration for most tests
        mockConfig = new BaseConfiguration(false);
        response = new NetShareEnumResponse(mockConfig);
    }

    @Test
    @DisplayName("Test constructor with configuration")