* techinque that NTLMv2 specifically thwarts. A real NTLM Filter would
         * need to do a NETLOGON RPC that JCIFS will likely never implement
         * because it requires a lot of extra crypto not used by CIFS.
         */
        Config.setProperty("jcifs.smb1.smb.lmCompatibility", "0");
        Config.setProperty("jcifs.smb1.smb.client.useExtendedSecurity", "false");

"/tmp/credentials" readOnly: true - name: export mountPath: {{ .Values.mountPath }} {{- if and .Values.persistence.enabled .Values.persistence.subPath }} subPath: "{{ .Values.persistence.subPath }}" {{- end }} {{- if .Values.extraSecret }} - name: extra-secret mountPath: "/tmp/minio-config-env" {{- end }} {{- include "minio.tlsKeysVolumeMount" . | indent 12 }} {{- if .Values.extraVolumeMounts }} {{- toYaml .Values.extraVolumeMounts | nindent 12 }} {{- end }} ports: - name: {{ $scheme }} containerPort:...

        verify(signingDigest, times(1)).verify(testData, offset, length, extraPad, message);
    }

    @ParameterizedTest
    @ValueSource(ints = { 0, 1, 2, 4, 8, 16 })
    @DisplayName("Test verify method with different extra padding values")
    void testVerifyWithDifferentExtraPadding(int extraPad) {
        // Arrange
        int offset = 0;
        int length = testData.length;

        assertTrue(secondBufferFormatIndex > 0, "Second buffer format byte not found");
        assertEquals((byte) 0x04, dst[secondBufferFormatIndex]);
        assertEquals((byte) 0x00, dst[secondBufferFormatIndex + 1]); // Extra null byte for Unicode alignment
    }

    /**
     * Test writeBytesWireFormat with empty file names
     */
    @Test
    @DisplayName("Test writeBytesWireFormat with empty file names")

        byte[] fileNameBytes = fileName.getBytes(StandardCharsets.UTF_16LE);
        int totalSize = 12 + fileNameBytes.length + 50; // Extra space for safety
        byte[] buffer = new byte[totalSize];

        // Write next entry offset (4 bytes)
        SMBUtil.writeInt4(nextOffset, buffer, 0);

        // Write action (4 bytes)

        SecurityBlob longer = new SecurityBlob(new byte[] { 1, 2, 9 });

        // Act & Assert
        // Due to implementation, iteration uses this.b.length and ignores extra bytes in argument
        assertTrue(shorter.equals(longer), "Shorter equals longer when prefix matches (implementation behavior)");

        // In the opposite direction, an out-of-bounds occurs internally and is caught as false

Existe um capítulo inteiro da nossa documentação sobre isso, você pode ler em [Retornos Adicionais no OpenAPI](additional-responses.md){.internal-link target=_blank}.

## Extras do OpenAPI { #openapi-extra }

Quando você declara uma *operação de rota* na sua aplicação, o **FastAPI** irá gerar os metadados relevantes da *operação de rota* automaticamente para serem incluídos no esquema do OpenAPI.

/// note | Detalhes Técnicos

<img src="/img/tutorial/security/image03.png">

We are not verifying the validity of the token yet, but that's a start already.

## Recap { #recap }

pkg crypto/tls, type QUICConfig struct, EnableSessionEvents bool #63691
pkg crypto/tls, type QUICEvent struct, SessionState *SessionState #63691
pkg crypto/tls, type QUICSessionTicketOptions struct, Extra [][]uint8 #63691
pkg crypto/x509, func ParseOID(string) (OID, error) #66249
pkg crypto/x509, method (*OID) UnmarshalBinary([]uint8) error #66249
pkg crypto/x509, method (*OID) UnmarshalText([]uint8) error #66249

        assertEquals(4, impl.getBuffer().length);
    }

    // Capacity behavior: when full, additional releases are dropped; only cached buffers are returned
    @Test
    @DisplayName("Cache capacity respected: extra releases dropped; retrieval order by first free slot")
    void cacheCapacityAndRetrievalOrder() {
        BufferCacheImpl impl = new BufferCacheImpl(2, 3);
        byte[] a = new byte[1];
        byte[] c = new byte[2];