// Verify security settings are properly configured with appropriate defaults
        Map<String, Object> defaultSettings = createDefaultSettings();

        // Verify strict mode is enabled by default (good security practice)
        assertEquals("true", defaultSettings.get("onelogin.saml2.strict"));

        // Verify debug is disabled by default (good security practice)

    ExecutorService service = mock(ExecutorService.class);
    application.addDelayedShutdownHook(service, 2, SECONDS);
    verify(service, never()).shutdown();
    application.shutdown();
    InOrder shutdownFirst = inOrder(service);
    shutdownFirst.verify(service).shutdown();
    shutdownFirst.verify(service).awaitTermination(2, SECONDS);
  }

    out.write(b);

    verify(hashFunction).newHasher();
    verify(hasher).putByte((byte) b);
    verifyNoMoreInteractions(hashFunction, hasher);
  }

  public void testWrite_putByteArray() throws Exception {
    byte[] buf = new byte[] {'y', 'a', 'm', 's'};
    HashingOutputStream out = new HashingOutputStream(hashFunction, buffer);
    out.write(buf);

    verify(hashFunction).newHasher();

        // Execute
        final SsoMessageException exception = new SsoMessageException(messageCode, message, cause);

        // Verify
        assertNotNull(exception);
        assertEquals(message, exception.getMessage());
        assertEquals(cause, exception.getCause());
        assertEquals(messageCode, exception.getMessageCode());
    }

    }

    @Test
    public void test_authenticatorInstantiation() {
        // Verify authenticator can be instantiated without errors
        SpnegoAuthenticator authenticator = new SpnegoAuthenticator();
        assertNotNull(authenticator);
    }

    @Test
    public void test_spnegoConfigClass() {
        // Verify the inner class is named correctly: SpnegoConfig (not SpengoConfig)

        // When
        outputStream = new SmbFileOutputStream(mockFile);

        // Then
        assertNotNull(outputStream);

        // Verify the AutoCloseable resources were closed
        verify(autoCloseableMockTreeHandle).close();
        verify(autoCloseableMockFileHandle).close();
    }

    @Test
    void testConstructorWithAppendFlag() throws IOException, CIFSException {
        // Given

        int bytesWritten = netServerEnum2.writeParametersWireFormat(dst, dstIndex);

        // Verify bytes written
        assertTrue(bytesWritten > 0);

        // Verify subcommand
        assertEquals(SmbComTransaction.NET_SERVER_ENUM2, dst[0]);
        assertEquals(0, dst[1]);

        // Verify descriptor (WrLehDO\0B16BBDz\0 in ASCII)
        String expectedDescr = "WrLehDO\u0000B16BBDz\u0000";

        Smb2LeaseKey result = directoryLeaseManager.requestDirectoryLease(directoryPath, requestedState, scope);

        assertEquals(expectedKey, result);
        verify(baseLeaseManager).requestLease(directoryPath, requestedState);

        // Verify cache entry was created
        DirectoryCacheEntry cacheEntry = directoryLeaseManager.getCacheEntry(directoryPath);
        assertNotNull(cacheEntry);

            // Then
            assertNotNull(retrievedTransport);
            assertFalse(hasActiveTransports);
            verify(transportPool).getSmbTransport(context, TEST_HOST, DEFAULT_PORT, false, false);
            verify(transportPool).removeTransport(transport);
            verify(transportPool).close();
        }

        @Test
        @DisplayName("Should handle authentication workflow")

        when(fileHandle.getTree()).thenReturn(tree);

        // When handle is valid, expect close()
        target.ensureOpen();
        target.close();
        verify(fileHandle, times(1)).close();
        verify(fileHandle, never()).release();
        verify(tree, atLeastOnce()).release();

        // Re-prepare state for second branch: not open but handle set
        when(fileHandle.isValid()).thenReturn(false);