(byte) 0x99 };

        byte[] output = new byte[12];
        byte[] dk = deriveKeyAES(baseKey, cst); // Checksum key
        try {
            Mac m = Mac.getInstance("HmacSHA1");
            m.init(new SecretKeySpec(dk, HMAC_KEY));
            System.arraycopy(m.doFinal(input), 0, output, 0, 12);
            return output;
        } finally {
            Arrays.fill(dk, 0, dk.length, (byte) 0);

        @Test
        @DisplayName("Should decode output parameters correctly")
        void testDecodeOut() throws NdrException {
            // Given: Close handle message with mocked return value
            samr.SamrCloseHandle message = new samr.SamrCloseHandle(mockPolicyHandle);
            when(mockNdrBuffer.dec_ndr_long()).thenReturn(0);

            // When: Decoding output
            message.decode_out(mockNdrBuffer);

Never store the plain password of a user or send it in a response like this, unless you know all the caveats and you know what you are doing.

///

## Add an output model { #add-an-output-model }

We can instead create an input model with the plaintext password and an output model without it:

{* ../../docs_src/response_model/tutorial003_py310.py hl[9,11,16] *}

@GwtIncompatible
@J2ktIncompatible
final class Serialization {
  private Serialization() {}

  /**
   * Stores the contents of a map in an output stream, as part of serialization. It does not support
   * concurrent maps whose content may change while the method is running.
   *
   * <p>The serialized output consists of the number of entries, first key, first value, second key,
   * second value, and so on.
   */

    protected File workingDirectory = null;

    /** Maximum number of output lines to capture. */
    protected int maxOutputLine = 1000;

    /** Command execution timeout in milliseconds. */
    protected long executionTimeout = 30L * 1000L; // 30sec

    /** Character encoding for command output. */
    protected String commandOutputEncoding = Charset.defaultCharset().displayName();

import java.io.PrintWriter;

import org.apache.commons.io.output.ByteArrayOutputStream;

import jakarta.servlet.http.HttpServletResponse;
import jakarta.servlet.http.HttpServletResponseWrapper;

/**
 * Wrapper for HTTP servlet responses in web API context.
 * This class extends HttpServletResponseWrapper to provide custom response handling
 * for web API responses, including dummy output stream management.
 */

            assertNotNull(os1, "Default output stream should not be null");
            assertNotNull(os2, "Output stream with append should not be null");
            assertNotNull(os3, "Output stream with sharing should not be null");
            assertNotNull(os4, "Output stream with full params should not be null");
            assertSame(mockOutputStream, os1, "Should return expected output stream");

        assertNotNull(request);
        assertEquals(0x0B, request.getCommand());
        verify(mockConfig).getTransactionBufferSize();
    }

    @Test
    @DisplayName("Test constructor with output buffer")
    void testConstructorWithOutputBuffer() {
        // This constructor doesn't use getTransactionBufferSize()

    final DataOutput output;
    final ByteArrayOutputStream byteArrayOutputStream;

    ByteArrayDataOutputStream(ByteArrayOutputStream byteArrayOutputStream) {
      this.byteArrayOutputStream = byteArrayOutputStream;
      output = new DataOutputStream(byteArrayOutputStream);
    }

    @Override
    public void write(int b) {
      try {
        output.write(b);

        @Test
        @DisplayName("Should decode output parameters correctly")
        void testDecodeOut() throws NdrException {
            // Given: Close handle message with mocked return value
            samr.SamrCloseHandle message = new samr.SamrCloseHandle(mockPolicyHandle);
            when(mockNdrBuffer.dec_ndr_long()).thenReturn(0);

            // When: Decoding output
            message.decode_out(mockNdrBuffer);