return OptionalEntity.empty();
        });
    }

    /**
     * Gets the action response for the specified SSO response type.
     *
     * SPNEGO authentication typically doesn't require special response handling
     * for metadata or logout operations, so this method returns null.
     *
     * @param responseType The type of SSO response requested

    private DelegatingConfiguration delegatingConfig;

    @BeforeEach
    void setUp() {
        delegatingConfig = new DelegatingConfiguration(mockDelegate);
    }

    @Test
    @DisplayName("Constructor should require non-null delegate")
    void testConstructorWithNullDelegate() {
        // When & Then
        assertDoesNotThrow(() -> {
            new DelegatingConfiguration(null);

            }

            if (request instanceof final SmbComTreeConnectAndX tcax) {
                if (netbiosName != null && tcax.path.endsWith("\\IPC$")) {
                    /* Some pipes may require that the hostname in the tree connect
                     * be the netbios name. So if we have the netbios server name
                     * from the NTLMSSP type 2 message, and the share is IPC$, we

For most migration scenarios, we recommend using the modern JSON Search API (`/api/v1/documents`) instead.

### Admin APIs

All admin APIs require authentication (`-u admin:admin` or Bearer token).

**Base Path**: `/api/admin/`

**Available Endpoints**:
- `POST /backup/upload` - Upload backup/import files
- `GET /backup/export` - Export configurations

    /** Minimum SMB dialect version to negotiate */
    protected DialectVersion minVersion;
    /** Maximum SMB dialect version to negotiate */
    protected DialectVersion maxVersion;
    /** Whether to require secure negotiate validation */
    protected boolean requireSecureNegotiate = true;
    /** Whether to send NTLM target name during authentication */
    protected boolean sendNTLMTargetName = true;

    file.createNewFile();
    
    // Monitor for witness notifications
    TestWitnessListener listener = new TestWitnessListener();
    
    // Simulate cluster failover (would require test environment setup)
    // ... trigger server failover ...
    
    // Verify that witness notification was received and handled
    assertTrue(listener.waitForNotification(30000));  // 30 second timeout
    

        // Then - Verify keys are wiped (we can't directly access private fields,
        // but we can verify the context behaves correctly after wiping)
        // After wiping, operations that require keys should fail

        // Attempting to use the context after wiping should handle gracefully
        // Note: The actual implementation might throw an exception or handle differently
    }

    @Test

 * to referencing files and directories, jCIFS can also address servers,
 * and workgroups.
 * <p>
 * <strong><i>Important: all SMB URLs that represent
 * workgroups, servers, shares, or directories require a trailing slash '/'.
 * </i></strong>
 * <p>
 * When using the {@code java.net.URL} class with
 * 'smb1://' URLs it is necessary to first call the static

      <match value="X-Notes-Item:" type="string" offset="0">
        <match value="Message-ID:" type="string" offset="0:8192"/>
      </match>
      <!-- match X- DKIM- ARC- at start of file and then require at least one
           of the usual: from, received, date...but look farther into the file
           because of the X|DKIM|ARC headers-->
      <match value="(X|DKIM|ARC)-" type="regex" offset="0">

$grid-columns) {\n  flex: 0 0 percentage(divide($size, $columns));\n  // Add a `max-width` to ensure content within each column does not blow out\n  // the width of the column. Applies to IE10+ and Firefox. Chrome and Safari\n  // do not appear to require this.\n  max-width: percentage(divide($size, $columns));\n}\n\n@mixin make-col-auto() {\n  flex: 0 0 auto;\n  width: auto;\n  max-width: 100%; // Reset earlier grid tiers\n}\n\n@mixin make-col-offset($size, $columns: $grid-columns) {\n  $num: divide($size,...