* auth param in the challenge at key null. Invalid headers and challenges are ignored.
   * No semantic validation is done, for example that `Basic` auth must have a `realm`
   * auth param, this is up to the caller that interprets these challenges.
   */
  fun challenges(): List<Challenge> {
    return headers.parseChallenges(
      when (code) {

labels.authRealm=Realm
labels.available=Status
labels.createdBy=Gemaakt door
labels.createdTime=Aanmaakdatum
labels.depth=Diepte
labels.excludedPaths=Pad(en) om uit te sluiten van crawlen
labels.excludedUrls=URL(s) om uit te sluiten van crawlen
labels.excludedDocPaths=Pad(en) om uit te sluiten van zoeken
labels.excludedDocUrls=URL(s) om uit te sluiten van zoeken
labels.hostname=Hostnaam
labels.id=ID
labels.includedPaths=Pad(en) om op te nemen in crawlen

labels.authRealm=Realm
labels.available=Status
labels.createdBy=Erstellt von
labels.createdTime=Erstellungszeit
labels.depth=Tiefe
labels.excludedPaths=Ausgeschlossene Pfade für das Crawling
labels.excludedUrls=Ausgeschlossene URLs für das Crawling
labels.excludedDocPaths=Ausgeschlossene Pfade für die Suche
labels.excludedDocUrls=Ausgeschlossene URLs für die Suche
labels.hostname=Hostname
labels.id=ID

labels.authRealm=Realm
labels.available=Status
labels.createdBy=Dibuat Oleh
labels.createdTime=Waktu Dibuat
labels.depth=Kedalaman
labels.excludedPaths=Jalur yang Dikecualikan untuk Perayapan
labels.excludedUrls=URL yang Dikecualikan untuk Perayapan
labels.excludedDocPaths=Jalur yang Dikecualikan untuk Pencarian
labels.excludedDocUrls=URL yang Dikecualikan untuk Pencarian
labels.hostname=Nama Host
labels.id=ID

labels.authRealm=Realm
labels.available=Status
labels.createdBy=Created By
labels.createdTime=Created Time
labels.depth=Depth
labels.excludedPaths=Excluded Paths for Crawling
labels.excludedUrls=Excluded URLs for Crawling
labels.excludedDocPaths=Excluded Paths for Searching
labels.excludedDocUrls=Excluded URLs for Searching
labels.hostname=Hostname
labels.id=ID
labels.includedPaths=Included Paths for Crawling

At the very least in the short term the resource needs to know how to look up the component that is required to perform the work. This needs to be made simple, for the time being we can write and test plugins working in the same realm until we get complete isolation working.

h3. Plugins need a specific metadata model

    server.useHttps(handshakeCertificates.sslSocketFactory())
    server.enqueue(
      MockResponse
        .Builder()
        .code(407)
        .headers(headersOf("Proxy-Authenticate", "Basic realm=\"localhost\""))
        .inTunnel()
        .build(),
    )
    server.enqueue(
      MockResponse
        .Builder()
        .inTunnel()
        .build(),
    )
    server.enqueue(

labels.authRealm=Realm
labels.available=Stato
labels.createdBy=Creato da
labels.createdTime=Data di creazione
labels.depth=Profondità
labels.excludedPaths=Percorsi da escludere dalla scansione
labels.excludedUrls=URL da escludere dalla scansione
labels.excludedDocPaths=Percorsi da escludere dalla ricerca
labels.excludedDocUrls=URL da escludere dalla ricerca
labels.hostname=Nome host
labels.id=ID
labels.includedPaths=Percorsi da includere nella scansione

import org.apache.maven.plugin.descriptor.Parameter;
import org.apache.maven.plugin.descriptor.PluginDescriptor;
import org.apache.maven.project.MavenProject;
import org.codehaus.plexus.classworlds.realm.ClassRealm;
import org.eclipse.aether.repository.RemoteRepository;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import static org.apache.maven.api.Lifecycle.AFTER;

  }

  @Test
  fun authenticate() {
    server.enqueue(
      MockResponse(
        code = HttpURLConnection.HTTP_UNAUTHORIZED,
        headers = headersOf("www-authenticate", "Basic realm=\"protected area\""),
        body = "Please authenticate.",
      ),
    )
    server.enqueue(
      MockResponse(body = "Successful auth!"),
    )
    val credential = basic("username", "password")