}

    @Test
    void testIsTrustedDomain_NoUserDomain() throws CIFSException {
        when(mockConfig.isDfsDisabled()).thenReturn(false);
        when(mockContext.getCredentials()).thenReturn(mockCredentials);
        when(mockCredentials.getUserDomain()).thenReturn(null);
        assertFalse(dfsResolver.isTrustedDomain(mockContext, "anyDomain"));
    }

    @Test

    /**
     * @param tf
     * @param tdom
     * @param thost
     * @return
     */
    protected boolean matches(CIFSContext tf, String thost, String tdom) {
        return Objects.equals(this.getCredentials(), tf.getCredentials()) && Objects.equals(this.targetHost, thost)
                && Objects.equals(this.targetDomain, tdom);
    }

    }

    @Override
    public DfsResolver getDfs() {
        return this.delegate.getDfs();
    }

    @Override
    public Credentials getCredentials() {
        return this.delegate.getCredentials();
    }

    @Override
    public URLStreamHandler getUrlHandler() {
        if (this.wrappedHandler == null) {
            this.wrappedHandler = new Handler(this);
        }

    private WebConfig webConfig;

    public Authentication getAuthentication() {
        return new AuthenticationImpl(getAuthScope(), getCredentials(), getAuthScheme());
    }

    private AuthScheme getAuthScheme() {
        final String scheme = getProtocolScheme();
        if (Constants.BASIC.equals(scheme)) {
            return new BasicScheme();
        }

    /**
     * Retrieves the credentials associated with the current authentication.
     *
     * @return the credentials object containing authentication details.
     */
    Credentials getCredentials();

    /**
     * Retrieves the authentication scheme to be used for HTTP requests.
     *
     * @return the authentication scheme
     */
    /**

                formSchemeList.add(new Pair<>((FormScheme) authScheme, authentication.getCredentials()));
            } else {
                final AuthScope authScope = authentication.getAuthScope();
                credentialsProvider.setCredentials(authScope, authentication.getCredentials());
                if (authScope.getHost() != null && authScheme != null) {

                    builder.setHost(endpoint);
                    builder.setCredentials(NoCredentials.getInstance());
                } else if (StringUtil.isNotBlank(credentialsFile)) {
                    // Use credentials file if specified
                    try (InputStream is = new FileInputStream(credentialsFile)) {
                        builder.setCredentials(ServiceAccountCredentials.fromStream(is));
                    }

            builder.setProjectId(projectId);
        }

        if (StringUtil.isNotBlank(endpoint)) {
            // For fake-gcs-server or custom endpoint
            builder.setHost(endpoint);
            builder.setCredentials(NoCredentials.getInstance());
            if (logger.isDebugEnabled()) {
                logger.debug("Using custom GCS endpoint: {}", endpoint);
            }
        } else {

    }

    private Map<String, Map<String, CacheEntry<DfsReferralDataInternal>>> getTrustedDomains(final CIFSContext tf) throws SmbAuthException {
        if (tf.getConfig().isDfsDisabled() || tf.getCredentials().getUserDomain() == null
                || tf.getCredentials().getUserDomain().isEmpty()) {
            return null;
        }

        if (this._domains != null && System.currentTimeMillis() > this._domains.expiration) {

            }
            // Exercise interaction with dependency for verification purposes
            // These methods do not throw and allow interaction checks.
            tc.getConfig();
            tc.getCredentials();

            // Minimal behavior: return a mock SSPContext with lenient stubbing
            SSPContext ctx = mock(SSPContext.class);
            lenient().when(ctx.isEstablished()).thenReturn(false);