You will see the automatic API docs for the sub-application, including only its own _path operations_, all under the correct sub-path prefix `/subapi`:

<img src="/img/tutorial/sub-applications/image02.png">

If you try interacting with any of the two user interfaces, they will work correctly, because the browser will be able to talk to each specific app or sub-app.

### Technical Details: `root_path` { #technical-details-root-path }

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {
            // Given - prepare buffer with typical file system values
            ByteBuffer buffer = ByteBuffer.allocate(24);
            buffer.order(ByteOrder.LITTLE_ENDIAN);

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {
            // Given - prepare buffer with typical file system values
            ByteBuffer buffer = ByteBuffer.allocate(32);
            buffer.order(ByteOrder.LITTLE_ENDIAN);

        assertEquals("shared", file.getShare(), "Share should be extracted correctly");
        assertNotNull(file.getParent(), "Parent should not be null");
        assertTrue(file.getParent().endsWith("/shared/path/"), "Parent path should be correct");
    }

    @Test
    void testUNCPath() throws Exception {
        SmbFile file = new SmbFile(baseUrl + "shared/unc.txt", context);

<img src="/img/tutorial/security/image12.png">

## Verifique o usuário

Aqui está um exemplo mais completo.

Utilize uma dependência para verificar se o usuário e a senha estão corretos.

Para isso, utilize o módulo padrão do Python <a href="https://docs.python.org/3/library/secrets.html" class="external-link" target="_blank">`secrets`</a> para verificar o usuário e senha.

            int tid = response.getTid();

            // Then
            assertEquals(54321, tid, "getTid should return tree ID");
        }

        @Test
        @DisplayName("Should validate tree ID correctly")
        void testIsValidTid() {
            // Test valid TID
            response.setTreeId(100);
            assertTrue(response.isValidTid(), "Positive tree ID should be valid");

        // Change name
        generator.setName("new-name");
        assertEquals("new-name", generator.getName());
    }

    public void test_generate() {
        // Test generate method is called correctly
        generator = new TestThumbnailGenerator();
        File outputFile = new File("test.jpg");

        assertFalse(generator.isGenerateCalled());
        assertTrue(generator.generate("id123", outputFile));

 */
class NtlmChallengeTest {

    @Nested
    @DisplayName("Constructor and Field Tests")
    class ConstructorTests {

        @Test
        @DisplayName("Constructor sets fields correctly")
        void testConstructorSetsFields() {
            byte[] challenge = new byte[] { 1, 2, 3 };
            UniAddress dc = mock(UniAddress.class);

            NtlmChallenge nc = new NtlmChallenge(challenge, dc);

                "flags should be DCERPC_FIRST_FRAG | DCERPC_LAST_FRAG");
        // Verify that the super constructor was called with the correct handle.
        // This is implicitly tested by the object being created without error and
        // the fields set by the constructor being correct.
    }

        }
    }

    @Nested
    @DisplayName("Flag Operations Tests")
    class FlagOperationsTests {

        @Test
        @DisplayName("Should add flags correctly")
        void testAddFlags() {
            assertEquals(0, testMessage.getFlags());
            testMessage.addFlags(ServerMessageBlock2.SMB2_FLAGS_SIGNED);