You will see the automatic API docs for the sub-application, including only its own _path operations_, all under the correct sub-path prefix `/subapi`:

<img src="/img/tutorial/sub-applications/image02.png">

If you try interacting with any of the two user interfaces, they will work correctly, because the browser will be able to talk to each specific app or sub-app.

### Technical Details: `root_path` { #technical-details-root-path }

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {
            // Given - prepare buffer with typical file system values
            ByteBuffer buffer = ByteBuffer.allocate(24);
            buffer.order(ByteOrder.LITTLE_ENDIAN);

    @Nested
    @DisplayName("Decode Method Tests")
    class DecodeMethodTests {

        @Test
        @DisplayName("Should decode buffer with typical values correctly")
        void shouldDecodeBufferWithTypicalValues() throws SMBProtocolDecodingException {
            // Given - prepare buffer with typical file system values
            ByteBuffer buffer = ByteBuffer.allocate(32);
            buffer.order(ByteOrder.LITTLE_ENDIAN);

            int tid = response.getTid();

            // Then
            assertEquals(54321, tid, "getTid should return tree ID");
        }

        @Test
        @DisplayName("Should validate tree ID correctly")
        void testIsValidTid() {
            // Test valid TID
            response.setTreeId(100);
            assertTrue(response.isValidTid(), "Positive tree ID should be valid");

<img src="/img/tutorial/security/image12.png">

## Verifique o usuário

Aqui está um exemplo mais completo.

Utilize uma dependência para verificar se o usuário e a senha estão corretos.

Para isso, utilize o módulo padrão do Python <a href="https://docs.python.org/3/library/secrets.html" class="external-link" target="_blank">`secrets`</a> para verificar o usuário e senha.

        }
    }

    @Nested
    @DisplayName("Flag Operations Tests")
    class FlagOperationsTests {

        @Test
        @DisplayName("Should add flags correctly")
        void testAddFlags() {
            assertEquals(0, testMessage.getFlags());
            testMessage.addFlags(ServerMessageBlock2.SMB2_FLAGS_SIGNED);

        }

        request = new Smb2FlushRequest(mockConfig, testFileId);
    }

    @Test
    @DisplayName("Constructor should initialize with correct command and file ID")
    void testConstructor() throws Exception {
        // Verify command is set correctly (SMB2_FLUSH = 0x0007)
        Field commandField = ServerMessageBlock2.class.getDeclaredField("command");
        commandField.setAccessible(true);

        Properties props = new Properties();
        config = new PropertyConfiguration(props);
    }

    @Test
    void testConstructor() {
        // Test constructor initializes all fields correctly
        trans2FindNext2 = new Trans2FindNext2(config, TEST_SID, TEST_RESUME_KEY, TEST_FILENAME, TEST_BATCH_COUNT, TEST_BATCH_SIZE);

        assertNotNull(trans2FindNext2);

        // Change name
        generator.setName("new-name");
        assertEquals("new-name", generator.getName());
    }

    public void test_generate() {
        // Test generate method is called correctly
        generator = new TestThumbnailGenerator();
        File outputFile = new File("test.jpg");

        assertFalse(generator.isGenerateCalled());
        assertTrue(generator.generate("id123", outputFile));

 */
class NtlmChallengeTest {

    @Nested
    @DisplayName("Constructor and Field Tests")
    class ConstructorTests {

        @Test
        @DisplayName("Constructor sets fields correctly")
        void testConstructorSetsFields() {
            byte[] challenge = new byte[] { 1, 2, 3 };
            UniAddress dc = mock(UniAddress.class);

            NtlmChallenge nc = new NtlmChallenge(challenge, dc);