}

        // Should have some state
        AuthenticationRateLimiter.RateLimiterStats stats = rateLimiter.getStats();
        assertTrue(stats.getActiveAccounts() > 0);

        // Reset
        rateLimiter.reset();

        // State should be cleared
        stats = rateLimiter.getStats();
        assertEquals(0, stats.getTotalBlocked());
        assertEquals(0, stats.getAccountsLocked());

        // Verify
        assertNull(result, "Authentication result should be null");
        verify(mockResponse).setHeader("WWW-Authenticate", "NTLM");
        verify(mockResponse).setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        verify(mockResponse).setContentLength(0);
        verify(mockResponse).flushBuffer();
    }

    /**

        setStatus(response, NtStatus.NT_STATUS_NOTIFY_ENUM_DIR);
        assertFalse(response.isErrorResponseStatus());

        // Test with success status
        setStatus(response, NtStatus.NT_STATUS_SUCCESS);
        assertFalse(response.isErrorResponseStatus());

        // Test with error status
        setStatus(response, NtStatus.NT_STATUS_ACCESS_DENIED);

                // Mark response as received and set status = NT_STATUS_NO_SUCH_FILE
                setStatus(qr, NtStatus.NT_STATUS_NO_SUCH_FILE);
                qr.received();
                q.setResponse(qr);
                // Now emulate error thrown by transport for create chain

        });
    }

    @Test
    public void testStatistics() throws Exception {
        // Reset stats
        validator.resetStats();

        ServerResponseValidator.ValidationStats stats = validator.getStats();
        assertEquals(0, stats.getTotalValidations());
        assertEquals(0, stats.getFailedValidations());

        // Perform some validations
        try {

                    response.addHeader("WWW-Authenticate", "Basic realm=\"" + this.realm + "\"");
                }
                response.setHeader("Connection", "close");
                response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                response.flushBuffer();
                return;
            }
            final HttpSession ssn = request.getSession();

                    response.addHeader("WWW-Authenticate", "Basic realm=\"" + realm + "\"");
                }
                response.setHeader("Connection", "close");
                response.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                response.flushBuffer();
                return;
            }
            final HttpSession ssn = request.getSession();

            }
        } else {
            resp.setHeader("WWW-Authenticate", "NTLM");
        }
        resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
        resp.setContentLength(0);
        resp.flushBuffer();
        return null;
    }

                resp.setHeader("WWW-Authenticate", "NTLM");
                if (offerBasic) {
                    resp.addHeader("WWW-Authenticate", "Basic realm=\"" + realm + "\"");
                }
                resp.setStatus(HttpServletResponse.SC_UNAUTHORIZED);
                resp.setContentLength(0); /* Marcel Feb-15-2005 */
                resp.flushBuffer();
                return null;
            }

                if (OPTIONS.equals(httpRequest.getMethod())) {
                    final HttpServletResponse httpResponse = (HttpServletResponse) response;
                    httpResponse.setStatus(HttpServletResponse.SC_ACCEPTED);
                    return;
                }
            } else if (logger.isDebugEnabled()) {
                logger.debug("No CorsHandler for {}", origin);
            }
        }