*/
    @Test
    public void testSecureNegotiateRequired() throws CIFSException {
        BaseConfiguration config = new BaseConfiguration(true);

        // Verify secure negotiate is required for SMB3
        assertTrue("Secure negotiate should be required for SMB3", config.isRequireSecureNegotiate());
    }

        SMBUtil.writeInt2(128, buffer, offset + 56); // Offset
        SMBUtil.writeInt2(0, buffer, offset + 58); // Length

        // Negotiate context offset
        SMBUtil.writeInt4(144, buffer, offset + 60); // Point to contexts

        // Add negotiate contexts at offset 144
        int ctxOffset = 144;

        // Preauth integrity context

            this.encryptionKey = encryptionKey.clone();
            this.decryptionKey = decryptionKey.clone();
        }
    }

    /**
     * Get the negotiated cipher identifier
     * @return the negotiated cipher ID
     */
    public int getCipherId() {
        return this.cipherId;
    }

    /**
     * Get the SMB dialect version
     * @return the SMB dialect version

        when(httpSession.getAttribute("NtlmHttpAuth")).thenReturn(null);

        // Create a custom filter that overrides negotiate to test skipAuthentication
        NtlmHttpFilter customFilter = new NtlmHttpFilter() {
            @Override
            protected NtlmPasswordAuthentication negotiate(HttpServletRequest req, HttpServletResponse resp, boolean skipAuthentication)
                    throws IOException, ServletException {

 */
package jcifs.smb;

import jcifs.CIFSException;

/**
 * Exception thrown when an SMB protocol downgrade attack is detected.
 * Indicates that the negotiated protocol version is lower than expected or required.
 *
 * @author mbechler
 *
 */
public class SMBProtocolDowngradeException extends CIFSException {

    /**

 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */
package jcifs.internal;

/**
 * Interface for SMB protocol negotiation request messages.
 * Represents the client's request to negotiate SMB protocol version and capabilities
 * with the server, including security requirements like message signing.
 *
 * @author mbechler
 */
public interface SmbNegotiationRequest {

    /**

        when(negotiationResponse.canReuse(any(CIFSContext.class), anyBoolean())).thenReturn(true);

        // Use reflection to set the negotiated response
        Field negotiatedField = SmbTransportImpl.class.getDeclaredField("negotiated");
        negotiatedField.setAccessible(true);
        negotiatedField.set(initial, negotiationResponse);

        // When: Request connection with signing enforced

        byte[] initialHash = preauthService.getCurrentPreauthHash(sessionId);
        assertNotNull(initialHash);

        // Update with negotiate message
        byte[] negotiateMessage = "SMB2 Negotiate Request".getBytes();
        preauthService.updatePreauthHash(sessionId, negotiateMessage);

        byte[] afterNegotiateHash = preauthService.getCurrentPreauthHash(sessionId);

            ) {
              val sslSocket = connection.socket() as SSLSocket
              println("Requested " + sslSocket.sslParameters.applicationProtocols.joinToString())
              println("Negotiated " + sslSocket.applicationProtocol)
            }
          },
        ).build()

    val request =
      Request
        .Builder()
        .url("https://www.google.com")
        .build()

        when(transport.isSMB2()).thenReturn(false);
        when(transport.getContext()).thenReturn(context);
        when(session.getTargetHost()).thenReturn("localhost");

        // Mock negotiate response for SMB1
        SmbComNegotiateResponse nego = mock(SmbComNegotiateResponse.class);
        ServerData serverData = new ServerData();
        when(nego.getServerData()).thenReturn(serverData);