protected static final String ENTRAID_DEFAULT_GROUPS = "entraid.default.groups";

    /** Configuration key for Entra ID default roles. */
    protected static final String ENTRAID_DEFAULT_ROLES = "entraid.default.roles";

    // Legacy configuration keys for backward compatibility (Azure AD)
    /** Legacy configuration key for Azure AD state time-to-live. */

            this.groups = groups;
        }

        /**
         * Sets the user's role assignments.
         * @param roles Array of role names.
         */
        public synchronized void setRoles(final String[] roles) {
            this.roles = roles;
        }

        /**
         * Resets permissions to force recalculation on next getPermissions() call.

    public void setRoles_Equal(String roles) {
        setRoles_Term(roles, null);
    }

    public void setRoles_Equal(String roles, ConditionOptionCall<TermQueryBuilder> opLambda) {
        setRoles_Term(roles, opLambda);
    }

    public void setRoles_Term(String roles) {
        setRoles_Term(roles, null);
    }

    public void setRoles_Term(String roles, ConditionOptionCall<TermQueryBuilder> opLambda) {

     * @param roles array of roles to filter results
     * @param fields array of fields to search in
     * @param excludes array of words to exclude from results
     * @return list of popular words matching the criteria
     */
    public List<String> getWordList(final SearchRequestType searchRequestType, final String seed, final String[] tags, final String[] roles,

        return getUserBean().map(this::redirectByUser).orElse(asHtml(virtualHost(path_Login_IndexJsp)));
    }

    /**
     * Redirects an authenticated user to the appropriate admin interface based on their roles.
     * Users with admin roles are redirected to the dashboard, while other users are redirected
     * to their designated admin action class or to the root if no specific action is available.
     *

 *
 * <p>Usage example:</p>
 * <pre>
 * {@code
 * DefaultContentsParser parser = new DefaultContentsParser();
 * SuggestItem item = parser.parseSearchWords(words, readings, fields, tags, roles, score, readingConverter, normalizer, analyzer, langs);
 * }
 * </pre>
 *
 * @see ContentsParser
 * @see SuggestItem
 * @see ReadingConverter
 * @see Normalizer
 * @see SuggestAnalyzer
 */

        // Create a new list to avoid modifying the original roles list
        final List<String> rolesWithDefault = new ArrayList<>(roles.size() + 1);
        rolesWithDefault.addAll(roles);
        if (!rolesWithDefault.contains(SuggestConstants.DEFAULT_ROLE)) {
            rolesWithDefault.add(SuggestConstants.DEFAULT_ROLE);
        }
        filterList.add(buildFilterQuery(FieldNames.ROLES, rolesWithDefault));

        if (!fields.isEmpty()) {

        // Test tags
        String[] tags = { "tag1", "tag2" };
        item.setTags(tags);
        assertArrayEquals(tags, item.getTags());

        // Test roles
        String[] roles = { "admin", "user" };
        item.setRoles(roles);
        assertArrayEquals(roles, item.getRoles());

        // Test languages
        String[] languages = { "en", "fr" };
        item.setLanguages(languages);

            queryBuilder.must(QueryBuilders.termsQuery(FieldNames.TAGS, tags));
        }
        if (!roles.isEmpty()) {
            queryBuilder.must(QueryBuilders.termsQuery(FieldNames.ROLES, roles));
        } else {
            queryBuilder.must(QueryBuilders.termQuery(FieldNames.ROLES, SuggestConstants.DEFAULT_ROLE));
        }
        if (!fields.isEmpty()) {

    /** The timestamp field. */
    public static final String TIMESTAMP = "@timestamp";
    /** The tags field. */
    public static final String TAGS = "tags";
    /** The roles field. */
    public static final String ROLES = "roles";
    /** The fields field. */
    public static final String FIELDS = "fields";
    /** The languages field. */
    public static final String LANGUAGES = "languages";