assertEquals(SessionServicePacket.SESSION_REQUEST, readPacket.type);
        assertTrue(bytesRead > 0);
    }

    @Test
    @DisplayName("Empty InputStream should cause IOException")
    void testReadTrailerWireFormatEmptyStream() {
        ByteArrayInputStream emptyStream = new ByteArrayInputStream(new byte[0]);
        SessionRequestPacket packet = new SessionRequestPacket(mockConfig);

import static org.junit.jupiter.api.Assertions.assertTrue;

import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;

import jcifs.smb.SmbException;

/**
 * Test cases for ServerResponseValidator
 */
public class ServerResponseValidatorTest {

    private ServerResponseValidator validator;

    @BeforeEach
    public void setUp() {

        }
    }

    /**
     * Test that try-with-resources handles null InputStream correctly.
     * Verifies that null InputStream doesn't cause NullPointerException during close.
     */
    @Test
    public void testTryWithResources_nullInputStreamSafety() {
        // This test demonstrates that try-with-resources handles null safely

     */
    public void test_TextExtractor_includesEncodingInErrorMessage() {
        final TextExtractor extractor = container.getComponent("textExtractor");
        // Create a stream that will cause an encoding error
        final InputStream errorStream = new InputStream() {
            @Override
            public int read() throws IOException {
                throw new IOException("Simulated read error");

import java.util.concurrent.Executors;
import java.util.concurrent.TimeUnit;

import org.junit.jupiter.api.BeforeEach;
import org.junit.jupiter.api.Test;

/**
 * Security-focused test cases for NtlmPasswordAuthenticator to verify timing attack resistance.
 */
public class NtlmPasswordAuthenticatorTimingAttackTest {

    private static final int TIMING_ITERATIONS = 1000;

        byte[] buf = buildBuffer(oidDer(), name.getBytes(StandardCharsets.US_ASCII));

        // Act
        MIEName parsed = new MIEName(buf);

        // Assert
        // equals should match case-insensitively for name and equal OID
        MIEName expected = new MIEName(testOid(), name);
        assertEquals(expected, parsed, "Parsed object should equal expected");

minio server /mnt/data
```

### Using WebIdentiy API

On another terminal run `web-identity.go` a sample client application which obtains JWT id_tokens from an identity provider, in our case its Keycloak. Uses the returned id_token response to get new temporary credentials from the MinIO server using the STS API call `AssumeRoleWithWebIdentity`.

```

	ps.Publish(val)

	msg1 := <-ch1
	msg2 := <-ch2
	if msg1 != val && msg2 != val {
		t.Fatalf("expected both subscribers to have%s , found %s and  %s", val, msg1, msg2)
	}

	select {
	case msg := <-ch3:
		t.Fatalf("unexpected msg, f got %s", msg)
	default:
	}

                if (e.getMessage().indexOf("bomb") >= 0) {
                    throw new ExtractException("Zip bomb detected.", e);
                }
                final Throwable cause = e.getCause();
                if (cause instanceof SAXException) {
                    final Extractor xmlExtractor = crawlerContainer.getComponent("xmlExtractor");
                    if (xmlExtractor != null) {

        switch (form.crudMode) {
        case CrudMode.CREATE:
            final Map<String, Object> entity = new HashMap<>();
            entity.put(fessConfig.getIndexFieldDocId(), systemHelper.generateDocId(entity));
            return OptionalEntity.of(entity);
        case CrudMode.EDIT:
            final String docId;
            if (form.doc != null) {