/**
     * Flag indicating a shared lock that allows concurrent read access.
     */
    public static final int SMB2_LOCKFLAG_SHARED_LOCK = 0x1;

    /**
     * Flag indicating an exclusive lock that prevents any other access.
     */
    public static final int SMB2_LOCKFLAG_EXCLUSIVE_LOCK = 0x2;

    /**
     * Flag indicating an unlock operation to release a previously held lock.
     */

## REST API call to plugin

To verify the custom token presented in the `AssumeRoleWithCustomToken` API, MinIO makes a POST request to the configured identity management plugin endpoint and expects a response with some details as shown below:

### Request `POST` to plugin endpoint

 */
class PacConstantsTest {

    /**
     * Tests that the constant values in the PacConstants interface match their expected values.
     * This prevents accidental modification of these critical constants.
     */
    @Test
    void testConstantValues() {
        // Verify the PAC version
        assertEquals(0, PacConstants.PAC_VERSION, "PAC_VERSION should be 0");

     */
    @ValidateTypeFailure
    public Long updatedTime;

    /**
     * The version number of the role for optimistic locking.
     * This field is required to prevent concurrent modification conflicts
     * by ensuring the role hasn't been modified by another process.
     */
    @Required
    @ValidateTypeFailure
    public Integer versionNo;

     */
    @ValidateTypeFailure
    public Long updatedTime;

    /**
     * The version number of the label type for optimistic locking.
     * This field is required to prevent concurrent modification conflicts
     * by ensuring the label type hasn't been modified by another process.
     */
    @Required
    @ValidateTypeFailure
    public Integer versionNo;

    // yet absolute. This is needed because server certificates do not normally contain absolute
    // names or patterns, but they should be treated as absolute. At the same time, any hostname
    // presented to this method should also be treated as absolute for the purposes of matching
    // to the server certificate.
    //   www.android.com  matches www.android.com
    //   www.android.com  matches www.android.com.

 */
package jcifs.internal.smb2.rdma;

/**
 * RDMA credit management for flow control.
 *
 * Credits are used to control the flow of messages between
 * RDMA peers to prevent buffer overflow.
 */
public class RdmaCredits {

    private int initialCredits;
    private int creditsGranted;

    /**
     * Create new RDMA credits manager
     */
    public RdmaCredits() {

    }

    @Override
    public boolean contains(@Nullable Object target) {
      // Overridden to prevent a ton of boxing
      return (target instanceof Byte) && Bytes.indexOf(array, (Byte) target, start, end) != -1;
    }

    @Override
    public int indexOf(@Nullable Object target) {
      // Overridden to prevent a ton of boxing
      if (target instanceof Byte) {

    }

    @Test
    public void test_escapeLDAPSearchFilter_withAsterisk() {
        LdapManager ldapManager = new LdapManager();
        ldapManager.init();

        // Asterisk should be escaped to \2a (prevents wildcard injection)
        assertEquals("\\2a", ldapManager.escapeLDAPSearchFilter("*"));
        assertEquals("user\\2a", ldapManager.escapeLDAPSearchFilter("user*"));

 * loader and prevent it from being garbage collected. This poses a problem for environments where
 * you want to throw away the class loader. For example, dynamically reloading a web application or
 * unloading an OSGi bundle.
 *
 * <p>{@code com.google.common.base.FinalizableReferenceQueue} loads this class in its own class
 * loader. That way, this class doesn't prevent the main class loader from getting garbage