objectClass: inetOrgPerson
cn: Alice Smith
sn: Smith
uid: alice1
mail: ******@****.***
userPassword: {SSHA}Yeh2/IV/q/HjG2yzN3YdE9CAF3EJFCLu

dn: uid=bobfisher,ou=people,ou=hwengg,dc=min,dc=io
objectClass: inetOrgPerson
cn: Robert Fisher
sn: Fisher
uid: bobfisher
mail: ******@****.***
userPassword: {SSHA}LktfbhK5oXSdDWCNzauJ9JA+Poxinl3y

dn: uid=cody3,ou=people,ou=hwengg,dc=min,dc=io
objectClass: inetOrgPerson

    @DisplayName("Secret Masking Tests")
    class SecretMaskingTests {

        @ParameterizedTest
        @DisplayName("maskSecretValue should mask SMB URLs containing credentials")
        @CsvSource({ "'smb://user:password@server/share', 'smb://user:******@server/share'",
                "'smb://domain\\user:secret@host/path', 'smb://domain\\user:******@host/path'",

    }

    // Test constructor with user info string
    @Test
    void testConstructorWithUserInfo() {
        NtlmPasswordAuthentication auth = new NtlmPasswordAuthentication("DOMAIN;user:password");
        assertEquals("DOMAIN", auth.getDomain());
        assertEquals("user", auth.getUsername());
        assertEquals("password", auth.getPassword());
    }

     */
    @Test
    void testService_BasicAuth_Success() throws Exception {
        ntlmServlet.init(servletConfig);
        setupMocksForAuth();

        // Base64 encoding of "TEST_DOMAIN\\user:password"
        when(request.getHeader("Authorization")).thenReturn("Basic VEVTVF9ET01BSU5cdXNlcjpwYXNzd29yZA==");
        lenient().when(request.isSecure()).thenReturn(true);
        when(request.getSession()).thenReturn(session);

            final List<SearchResult> result) {
        final List<ModificationItem> modifyList = new ArrayList<>();
        if (user.getOriginalPassword() != null) {
            modifyReplaceEntry(modifyList, "userPassword", user.getOriginalPassword());
        }

        final String attrSurname = fessConfig.getLdapAttrSurname();
        OptionalUtil.ofNullable(user.getSurname())
                .filter(StringUtil::isNotBlank)

    // IPv6 colons don't interfere with port numbers or passwords.
    assertThat(parse("http://[::1]:8080/").port).isEqualTo(8080)
    assertThat(parse("http://user:password@[::1]/").password).isEqualTo("password")
    assertThat(parse("http://user:password@[::1]:8080/").host).isEqualTo("::1")

    // Permit the contents of IPv6 addresses to be percent-encoded...
    assertThat(parse("http://[%3A%3A%31]/").host).isEqualTo("::1")

pkg net/url, func ParseRequestURI(string) (*URL, error)
pkg net/url, func QueryEscape(string) string
pkg net/url, func QueryUnescape(string) (string, error)
pkg net/url, func User(string) *Userinfo
pkg net/url, func UserPassword(string, string) *Userinfo
pkg net/url, method (*Error) Error() string
pkg net/url, method (*URL) IsAbs() bool
pkg net/url, method (*URL) Parse(string) (*URL, error)
pkg net/url, method (*URL) Query() Values