SmbTransportImpl transport = mock(SmbTransportImpl.class);

        when(tree.isConnected()).thenReturn(true);
        when(tree.getSession()).thenReturn(session);
        when(tree.acquire(false)).thenReturn(tree);
        when(session.getTransport()).thenReturn(transport);
        when(transport.isDisconnected()).thenReturn(false);
        when(transport.getRemoteHostName()).thenReturn("host");

            if (isConnected()) {
                try (SmbTransportImpl transport = session.getTransport()) {
                    if (transport.isDisconnected() || transport.getRemoteHostName() == null) {
                        /*
                         * Tree/session thinks it is connected but transport disconnected
                         * under it, reset tree to reflect the truth.
                         */

}

// Option is a function type that accepts a pointer Target
type Option func(*KeycloakProvider)

// WithTransport provide custom transport
func WithTransport(transport http.RoundTripper) Option {
	return func(p *KeycloakProvider) {
		p.client = http.Client{
			Transport: transport,
		}
	}
}

// WithOpenIDConfig provide OpenID Endpoint configuration discovery document

	}

	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
	if accessToken != "" {
		req.Header.Set("Authorization", "Bearer "+accessToken)
	}

	client := &http.Client{
		Transport: transport,
	}

	resp, err := client.Do(req)
	if err != nil {
		return nil, err
	}

	defer xhttp.DrainBody(resp.Body)
	if resp.StatusCode != http.StatusOK {

		},
		config.HelpKV{
			Key:         browserHSTSSeconds,
			Description: `set Strict-Transport-Security 'max-age' amount of seconds value` + defaultHelpPostfix(browserHSTSSeconds),
			Optional:    true,
			Type:        "number",
		},
		config.HelpKV{
			Key:         browserHSTSIncludeSubdomains,
			Description: `turn 'on' to set Strict-Transport-Security 'includeSubDomains' directive` + defaultHelpPostfix(browserHSTSIncludeSubdomains),

    
    return transports.computeIfAbsent(key, k -> {
        try {
            SmbTransport transport = new SmbTransport(
                context,
                remoteIf.getAddress(),
                remoteIf.getPort(),
                localIf.getAddress()
            );
            
            transport.connect();
            return transport;
            

    SmbSessionImpl(CIFSContext tf, String targetHost, String targetDomain, SmbTransportImpl transport) {
        this.transportContext = tf;
        this.targetDomain = targetDomain;
        this.targetHost = targetHost;
        this.transport = transport.acquire();
        this.trees = new CopyOnWriteArrayList<>();

        this.macSigningKey = macSigningKey;
        this.signSequence = initialSequence;
    }

    /**
     * Constructs a signing digest from transport and authentication information
     *
     * @param transport
     *            The SMB transport containing server encryption key
     * @param auth
     *            The NTLM password authenticator containing user credentials
     * @throws SmbException

    }

    /**
     * Constructs a new signing digest using transport and authentication credentials.
     *
     * @param transport the SMB transport for this signing context
     * @param auth the NTLM password authentication credentials
     * @throws SmbException if MD5 algorithm is not available or key generation fails
     */
    public SigningDigest(final SmbTransport transport, final NtlmPasswordAuthentication auth) throws SmbException {

}

// LookupConfig lookup jwks from config, override with any ENVs.
func LookupConfig(s config.Config, transport http.RoundTripper, closeRespFn func(io.ReadCloser), serverRegion string) (c Config, err error) {
	openIDClientTransport := http.DefaultTransport
	if transport != nil {
		openIDClientTransport = transport
	}
	c = Config{
		Enabled:            false,
		arnProviderCfgsMap: map[arn.ARN]*providerCfg{},