}

        @Test
        @DisplayName("Constructor with invalid signature should throw IOException")
        void testConstructor_ByteArray_InvalidSignature() {
            // Given
            byte[] invalidSignature = new byte[100];
            Arrays.fill(invalidSignature, (byte) 0xFF); // Fill with non-NTLMSSP signature

            // When & Then

    public static final int SMB2_FLAGS_REPLAY_OPERATION = 0x20000000;

    private int command;
    private int flags;
    private int length, headerStart, wordCount, byteCount;

    private final byte[] signature = new byte[16];
    private Smb2SigningDigest digest = null;

    private final Configuration config;

    private int creditCharge;
    private int status;
    private int credit;

	suite.TearDownSuite(c)
}

func TestServerSuite(t *testing.T) {
	testCases := []*TestSuiteCommon{
		// Init and run test on ErasureSD backend with signature v4.
		{serverType: "ErasureSD", signer: signerV4},
		// Init and run test on ErasureSD backend with signature v2.
		{serverType: "ErasureSD", signer: signerV2},
		// Init and run test on ErasureSD backend, with tls enabled.

        }
    }

    @Nested
    @DisplayName("Resource Unwrapping Tests")
    class ResourceUnwrappingTest {

        @Test
        @DisplayName("Should provide unwrap method with correct signature")
        void shouldProvideUnwrapMethod() {
            assertDoesNotThrow(() -> {
                java.lang.reflect.Method unwrapMethod = SmbSession.class.getMethod("unwrap", Class.class);

            @Override
            public boolean isLdapIgnoreNetbiosName() {
                return false;
            }
        });
        sambaHelper.init();

        // Verify method signature exists for SMB1 SID - actual test would require real SMB1 SID instance
        assertNotNull(sambaHelper);
    }

    @Test
    public void test_createSearchRole_lowercase() {

2. The id_token self-contains the authorization information in a manner that can be verified. For example, by encoding authorization information along with a signature into the token.

WSO2 generates tokens in first style by default, but if to be used with MinIO we should configure WSO2 to provide JWT tokens instead.

### 3. Generate Self-contained Access Tokens

        // Reserved/Async ID
        SMBUtil.writeInt8(0, buffer, bufferIndex + 32);
        // Session ID
        SMBUtil.writeInt8(0, buffer, bufferIndex + 40);
        // Signature
        System.arraycopy(new byte[16], 0, buffer, bufferIndex + 48, 16);

        // Body starts at bufferIndex + 64
        // Structure size = 2
        SMBUtil.writeInt2(2, buffer, bufferIndex + 64);

    }

    @Test
    public void test_stackTracePopulated() {
        // Test that stack trace is properly populated
        InvalidAccessTokenException exception = new InvalidAccessTokenException("JWT", "Invalid signature");

        StackTraceElement[] stackTrace = exception.getStackTrace();
        assertTrue(stackTrace.length > 0);

        // First element should be from this test method

                }
            }

            /* Verification fails (w/ W2K3 server at least) if status is not 0. This
             * suggests MS doesn't compute the signature (correctly) for error responses
             * (perhaps for DOS reasons).
             */
            if (digest != null && resp.errorCode == 0) {
                digest.verify(BUF, 4, resp);
            }

        assertEquals("fess.search_engine.http_address", Constants.FESS_SEARCH_ENGINE_HTTP_ADDRESS);
    }

    @Test
    public void test_static_method_signature() {
        // Verify method signature is correct
        try {
            java.lang.reflect.Method method = SystemUtil.class.getMethod("getSearchEngineHttpAddress");

            // Check return type