HttpSession session = req.getSession(false);
                if (session != null && session.getAttribute("npa-workgroup") != null) {
                    throw new IOException("Test error");
                } else {
                    resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                    resp.setHeader("WWW-Authenticate", "NTLM");
                    resp.flushBuffer();

Update `get_current_user` to receive the same token as before, but this time, using JWT tokens.

Decode the received token, verify it, and return the current user.

If the token is invalid, return an HTTP error right away.

{* ../../docs_src/security/tutorial004_an_py310.py hl[90:107] *}

## Update the `/token` *path operation* { #update-the-token-path-operation }

Create a `timedelta` with the expiration time of the token.

- `DecryptKey`: Takes a key ID and an encrypted data key and returns the plain data key - the decryption of the encrypted data key using the master key referenced by the key ID - on success or an error otherwise.

More details about supported KMS implementations and configuration can be found at the [KMS guide](https://github.com/minio/minio/blob/master/docs/kms/README.md).

    val groovyVersion = when (bundleGroovyMajor) {
        4 -> "4.0.29"
        // This is expected to contain Groovy 5 soon, once it's released or we need to test it.
        else -> error("Unsupported Groovy major version: $bundleGroovyMajor")
    }

    val configurationCacheReportVersion = "1.30"
    val gradleIdeStarterVersion = "0.8.2"
    val kotlinVersion = "2.3.0"

* sensible a mayúsculas/minúsculas
* insensible a mayúsculas/minúsculas

* servir la aplicación
* servir la página

* la app
* la aplicación

* la request
* la response
* la response de error

* la path operation
* el decorador de path operation
* la path operation function

* el body
* el request body
* el response body
* el body JSON
* el body del formulario
* el body de archivo

     * the configuration type and delegates to the appropriate service.
     *
     * @param configId the configuration ID to retrieve
     * @return the CrawlingConfig object or null if not found or on error
     */
    public CrawlingConfig getCrawlingConfig(final String configId) {
        try {
            return crawlingConfigCache.get(configId, () -> {

* and from it, import the function `get_token_header`.

That would refer to some package above `app/`, with its own file `__init__.py`, etc. But we don't have that. So, that would throw an error in our example. 🚨

But now you know how it works, so you can use relative imports in your own apps no matter how complex they are. 🤓

            // Securely wipe the old key copy
            secureWipe(currentKey);
            secureWipe(newKey);

            return newVersion;

        } catch (Exception e) {
            log.error("Failed to rotate key for session: {}", sessionId, e);
            throw new GeneralSecurityException("Key rotation failed", e);
        }
    }

    /**

     *
     * @param doc The XML document.
     * @param xpath The XPath expression.
     * @return A list of XPath nodes.
     * @throws XPathExpressionException if an XPath expression error occurs.
     */
    protected XPathNodes getNodeList(final Document doc, final String xpath) throws XPathExpressionException {
        final XPath xPathApi = getXPathAPI().createXPath(f -> {});

  private static AssertionError sanityError(
      Class<?> cls, List<String> explicitTestNames, String description, Throwable e) {
    String message =
        String.format(
            Locale.ROOT,
            "Error in automated %s of %s\n"
                + "If the class is better tested explicitly, you can add %s() to %sTest",
            description,
            cls,
            explicitTestNames.get(0),