public String spnegoPromptNtlm;

    /** Enable or disable SPNEGO localhost authentication. */
    @Size(max = 10)
    public String spnegoAllowLocalhost;

    /** Enable or disable SPNEGO credential delegation. */
    @Size(max = 10)
    public String spnegoAllowDelegation;

    /** SPNEGO directories to exclude from authentication. */
    @Size(max = 1000)
    public String spnegoExcludeDirs;

    @Test
    public void test_maskSensitiveValue_withCredential() {
        assertEquals("********", SystemUtil.maskSensitiveValue("GOOGLE_CREDENTIALS", "{}"));
        assertEquals("********", SystemUtil.maskSensitiveValue("credential", "user:pass"));
    }

    @Test
    public void test_maskSensitiveValue_withAuth() {
        assertEquals("********", SystemUtil.maskSensitiveValue("BASIC_AUTH", "dXNlcjpwYXNz"));

        return request.getRequestURL().toString();
    }

    @Override
    public void resolveCredential(final LoginCredentialResolver resolver) {
        resolver.resolve(EntraIdCredential.class, credential -> OptionalEntity.of(credential.getUser()));
    }

    /**
     * Sets the token acquisition timeout.
     * @param acquisitionTimeout The timeout in milliseconds.
     */

# Regex pattern for sensitive values to mask in debug logs (case-insensitive match against property/env keys).
app.log.sensitive.property.pattern=.*password.*|.*secret.*|.*key.*|.*token.*|.*credential.*|.*auth.*|.*private.*

# Extension names for application customization.
app.extension.names=

# Audit log format.
app.audit.log.format=

# Script audit log settings.
script.audit.log.enabled=true

    String APP_ENCRYPT_PROPERTY_PATTERN = "app.encrypt.property.pattern";

    /** The key of the configuration. e.g. .*password.*|.*secret.*|.*key.*|.*token.*|.*credential.*|.*auth.*|.*private.* */
    String APP_LOG_SENSITIVE_PROPERTY_PATTERN = "app.log.sensitive.property.pattern";

    /** The key of the configuration. e.g.  */
    String APP_EXTENSION_NAMES = "app.extension.names";