package kms

import (
	"bytes"
	"sort"
	"unicode/utf8"
)

// Context is a set of key-value pairs that
// are associated with a generate data encryption
// key (DEK).
//
// A KMS implementation may bind the context to the
// generated DEK such that the same context must be
// provided when decrypting an encrypted DEK.
type Context map[string]string

// MarshalText returns a canonical text representation of

        DirectoryLeaseContext context = new DirectoryLeaseContext(key, leaseState, scope);

        assertEquals(key, context.getLeaseKey());
        assertEquals(leaseState, context.getLeaseState());
        assertEquals(scope, context.getCacheScope());
        assertEquals(30000L, context.getMaxCacheAge());
        assertTrue(context.isNotificationEnabled());
        assertEquals(0, context.getNotificationFilter());
    }

        @Test
        @DisplayName("Should handle null context in array")
        void testNullContextInArray() {
            CreateContextRequest[] contexts = new CreateContextRequest[4];
            contexts[0] = new MockCreateContextRequest("FIRST");
            contexts[1] = null; // Null context
            contexts[2] = new MockCreateContextRequest("THIRD");
            contexts[3] = new MockCreateContextRequest("FOURTH");

            byte[] buffer = new byte[300];

            contexts[0] = new TestCreateContextResponse("CONTEXT1".getBytes(StandardCharsets.UTF_8));
            contexts[1] = new TestCreateContextResponse("CONTEXT2".getBytes(StandardCharsets.UTF_8));
            contexts[2] = new TestCreateContextResponse("CONTEXT3".getBytes(StandardCharsets.UTF_8));

            // Decode each context

        FessConfig fessConfig = ComponentUtil.getFessConfig();
        QueryContext context1 = new QueryContext("test", true);
        QueryContext context2 = new QueryContext("test", true);

        // Using template method
        QueryBuilder result1 = queryCommand.convertWithFieldCheck(fessConfig, context1, "title", "test", 1.0f,
                (field, boost) -> QueryBuilders.matchQuery(field, "test").boost(boost),

                testEncryptionKey, testDecryptionKey);

        // When/Then - Multiple closes should be safe
        assertDoesNotThrow(() -> {
            context.close();
            context.close();
            context.close();
        });

        assertTrue(context.isClosed());
    }

# 严格的 Content-Type 检查 { #strict-content-type-checking }

默认情况下，FastAPI 对 JSON 请求体使用严格的 `Content-Type` 头检查。这意味着，JSON 请求必须包含有效的 `Content-Type` 头（例如 `application/json`），其请求体才会被按 JSON 解析。

## CSRF 风险 { #csrf-risk }

此默认行为在一个非常特定的场景下，可防御一类跨站请求伪造（CSRF）攻击。

这类攻击利用了浏览器的一个事实：当请求满足以下条件时，浏览器允许脚本在不进行任何 CORS 预检的情况下直接发送请求：

- 没有 `Content-Type` 头（例如使用 `fetch()` 携带 `Blob` 作为 body）
- 且不发送任何认证凭据。

这种攻击主要在以下情况下相关：

- 应用在本地（如 `localhost`）或内网中运行

        // Then
        NegotiateContextRequest[] contexts = request.getNegotiateContexts();
        assertNotNull(contexts);
        assertEquals(2, contexts.length);

        // Verify preauth context
        assertTrue(contexts[0] instanceof PreauthIntegrityNegotiateContext);
        assertEquals(PreauthIntegrityNegotiateContext.NEGO_CTX_PREAUTH_TYPE, contexts[0].getContextType());

        // Verify encryption context

    }

    /**
     * Set the create contexts for this request
     * @param contexts the create contexts to set
     */
    public void setCreateContexts(CreateContextRequest[] contexts) {
        this.createContexts = contexts;
    }

    /**
     * Add a create context to this request
     * @param context the create context to add
     */

	if *flagCheck {
		// slow, not worth repeating in -check
		t.Skip("skipping with -check set")
	}
	testenv.MustHaveGoBuild(t)
	context := new(build.Context)
	*context = build.Default
	context.Dir = filepath.Join(testenv.GOROOT(t), "src")

	w := NewWalker(context, context.Dir)
	for _, pkg := range w.stdPackages {
		if strings.HasPrefix(pkg, "vendor/") || strings.HasPrefix(pkg, "golang.org/x/") {