The correct place is:

* In the key `content`, that has as value another JSON object (`dict`) that contains:
    * A key with the media type, e.g. `application/json`, that contains as value another JSON object, that contains:
        * A key `schema`, that has as the value the JSON Schema from the model, here's the correct place.

        assertTrue(resp instanceof ServerMessageBlock2);
        assertTrue(resp instanceof TreeConnectResponse);
    }

    @Test
    @DisplayName("Should return correct share type constants")
    void testShareTypeConstants() {
        // Then
        assertEquals((byte) 0x1, Smb2TreeConnectResponse.SMB2_SHARE_TYPE_DISK);

    }

    @Test
    void testConstructorAndGetValue() {
        // Test that the constructor correctly initializes the value
        long expectedValue = 123456789012345L;
        NdrHyper ndrHyper = new NdrHyper(expectedValue);
        assertEquals(expectedValue, ndrHyper.value, "Constructor should set the correct value.");
    }

    @Test
    void testEncode() throws NdrException {
        // Test the encode method

    List<String> expectedEvents = new ArrayList<>();
    expectedEvents.add(EVENT);
    expectedEvents.add(EVENT);

    assertEquals("Two correct events should be delivered.", expectedEvents, catcher1.getEvents());

    assertEquals(
        "One correct event should be delivered.", Lists.newArrayList(EVENT), catcher2.getEvents());

    bus.unregister(catcher1);
    bus.post(EVENT);

    assertEquals(

    private String testPipeName = "\\PIPE\\testpipe";

    @BeforeEach
    void setUp() {
        MockitoAnnotations.openMocks(this);
    }

    @Test
    @DisplayName("Constructor should initialize with correct values")
    void testConstructor() {
        // Act
        transWaitNamedPipe = new TransWaitNamedPipe(mockConfig, testPipeName);

        // Assert
        assertNotNull(transWaitNamedPipe);

        int expectedBytes = 12 + (fileName.length() * 2); // Unicode is 2 bytes per char
        assertEquals(expectedBytes, bytesRead);
    }

    @Test
    @DisplayName("Test getAction returns correct value")
    void testGetAction() throws SMBProtocolDecodingException {
        int expectedAction = FileNotifyInformation.FILE_ACTION_RENAMED_NEW_NAME;

        }
    }

    public void test_name() {
        // Test name() method returns correct string representation
        assertEquals("METADATA", SsoResponseType.METADATA.name());
        assertEquals("LOGOUT", SsoResponseType.LOGOUT.name());
    }

    public void test_ordinal() {
        // Test ordinal() method returns correct position
        assertEquals(0, SsoResponseType.METADATA.ordinal());

    class FlagConstantsTests {

        @Test
        @DisplayName("Should have correct shared lock flag value")
        void testSharedLockFlag() {
            assertEquals(0x1, Smb2Lock.SMB2_LOCKFLAG_SHARED_LOCK);
        }

        @Test
        @DisplayName("Should have correct exclusive lock flag value")
        void testExclusiveLockFlag() {

        assertEquals(32, derived1.length, "Derived key should have correct length");
        assertEquals(32, derived2.length, "Derived key should have correct length");
        assertEquals(32, derived3.length, "Derived key should have correct length");

        assertFalse(Arrays.equals(derived1, derived2), "Different labels should produce different keys");

Of course, the attackers would not try all this by hand, they would write a program to do it, possibly with thousands or millions of tests per second. And they would get just one extra correct letter at a time.

But doing that, in some minutes or hours the attackers would have guessed the correct username and password, with the "help" of our application, just using the time taken to answer.

#### Fix it with `secrets.compare_digest()` { #fix-it-with-secrets-compare-digest }