},
  {
    "input": "x01234567890123456789012345678901234567890123456789012345678901x.ß",
    "output": "x01234567890123456789012345678901234567890123456789012345678901x.xn--zca"
  },
  {
    "comment": "Domain excluding TLD longer than 253 code points",

        when(mockCalledName.getNameType()).thenReturn(0x20);
        when(mockCalledName.getScope()).thenReturn("DOMAIN.COM");

        when(mockCallingName.getName()).thenReturn("CLIENT");
        when(mockCallingName.getNameType()).thenReturn(0x00);
        when(mockCallingName.getScope()).thenReturn("DOMAIN.COM");

        SessionRequestPacket packet = new SessionRequestPacket(mockConfig, mockCalledName, mockCallingName);

        // Test with username containing special characters
        String username = "user@domain.com";
        FessUserNotFoundException exception = new FessUserNotFoundException(username);

        assertNotNull(exception);
        assertEquals("User is not found: user@domain.com", exception.getMessage());
        assertNull(exception.getCause());
    }

        public boolean verifySignature(byte[] data, int offset, int length) {
            return true; // Default to successful verification
        }

        public void setRetainPayload(boolean retain) {
            this.retainPayload = retain;
        }

        public byte[] getRawPayload() {
            return rawPayload;
        }

        // Expose headerStart for testing
        public int getHeaderStart() {

## Changelog since v1.29.4

## Changes by Kind

### Bug or Regression

- Fixed a bug that a pod may remain unscheduled if any PreFilter plugin returns nodes that do not exist. ([#124559](https://github.com/kubernetes/kubernetes/pull/124559), [@chengjoey](https://github.com/chengjoey)) [SIG Scheduling and Testing]

# Security - First Steps { #security-first-steps }

Let's imagine that you have your **backend** API in some domain.

And you have a **frontend** in another domain or in a different path of the same domain (or in a mobile application).

And you want to have a way for the frontend to authenticate with the backend, using a **username** and **password**.

We can use **OAuth2** to build that with **FastAPI**.

     * Verifies that the method returns the correct OEM domain name.
     * @throws CIFSException
     */
    @Test
    void testGetOEMDomainName() throws CIFSException {
        when(smbTreeHandle.getOEMDomainName()).thenReturn("TEST_DOMAIN");
        assertEquals("TEST_DOMAIN", smbTreeHandle.getOEMDomainName(), "OEM domain name should be TEST_DOMAIN");
    }

    /**

    check(index < interceptors.size)

    calls++

    if (exchange != null) {
      check(exchange.finder.routePlanner.sameHostAndPort(request.url)) {
        "network interceptor ${interceptors[index - 1]} must retain the same host and port"
      }
      check(calls == 1) {
        "network interceptor ${interceptors[index - 1]} must call proceed() exactly once"
      }
    }

    // Call the next interceptor in the chain.

        // Set server timezone (in minutes) and domain
        nego.getServerData().serverTimeZone = 60; // 60 minutes
        nego.getServerData().oemDomainName = "DOMAIN";

        when(transport.getNegotiateResponse()).thenReturn(nego);

        assertEquals(60L * 1000L * 60L, handle.getServerTimeZoneOffset());
        assertEquals("DOMAIN", handle.getOEMDomainName());
        verify(session, times(2)).close();

    ```

 * **`CertificatePinner` now supports wildcard hostnames.** As always with
   certificate pinning, you must be very careful to avoid [bricking][brick]
   your app. You'll need to pin both the top-level domain and the `*.` domain
   for full coverage.

    ```java
     client.setCertificatePinner(new CertificatePinner.Builder()
         .add("publicobject.com",   "sha1/DmxUShsZuNiqPQsX2Oi9uv2sCnw=")