authenticator = new NtlmPasswordAuthenticator("DOMAIN", "username", "originalPassword");
        NtlmPasswordAuthenticator cloned = authenticator.clone();

        // Get password fields using reflection
        Field passwordField = NtlmPasswordAuthenticator.class.getDeclaredField("password");
        passwordField.setAccessible(true);

        char[] originalPassword = (char[]) passwordField.get(authenticator);

The `HeroUpdate` *data model* is somewhat special, it has **all the same fields** that would be needed to create a new hero, but all the fields are **optional** (they all have a default value). This way, when you update a hero, you can send just the fields that you want to update.

Because all the **fields actually change** (the type now includes `None` and they now have a default value of `None`), we need to **re-declare** them.

            final ASN1EncodableVector fields = new ASN1EncodableVector();
            final int res = getResult();
            if (res != UNSPECIFIED_RESULT) {
                fields.add(new DERTaggedObject(true, 0, new ASN1Enumerated(res)));
            }
            final ASN1ObjectIdentifier mech = getMechanism();
            if (mech != null) {
                fields.add(new DERTaggedObject(true, 1, mech));
            }

import jakarta.validation.constraints.Size;

/**
 * Form class for editing duplicate host configurations in the admin interface.
 * This form extends CreateForm to include fields necessary for updating existing duplicate host entries,
 * including tracking information for optimistic locking and audit trails.

func (z *BaseOptions) DecodeMsg(dc *msgp.Reader) (err error) {
	var field []byte
	_ = field
	var zb0001 uint32
	zb0001, err = dc.ReadMapHeader()
	if err != nil {
		err = msgp.WrapError(err)
		return
	}
	for zb0001 > 0 {
		zb0001--
		field, err = dc.ReadMapKeyPtr()
		if err != nil {
			err = msgp.WrapError(err)
			return
		}
		switch msgp.UnsafeString(field) {
		default:
			err = dc.Skip()
			if err != nil {

        assertTrue(ex.getMessage().contains("Invalid field in kerberos ticket"));
    }

    @Test
    @DisplayName("seq ctor: tag 3 with wrong tag class is rejected")
    void sequenceConstructor_ticketTag_wrongClass_throws() {
        // Arrange: minimal valid fields + tag 3 as CONTEXT-SPECIFIC instead of APPLICATION
        ASN1EncodableVector v = new ASN1EncodableVector();

            }
            ASN1Sequence sequence = ASN1Sequence.getInstance(tagged, true);
            final Enumeration<ASN1Object> fields = sequence.getObjects();
            while (fields.hasMoreElements()) {
                tagged = (ASN1TaggedObject) fields.nextElement();
                switch (tagged.getTagNo()) {
                case 0:
                    sequence = ASN1Sequence.getInstance(tagged, true);

OAuth2 specifies that when using the "password flow" (that we are using) the client/user must send a `username` and `password` fields as form data.

And the spec says that the fields have to be named like that. So `user-name` or `email` wouldn't work.

But don't worry, you can show it as you wish to your final users in the frontend.

			// incorrectly believed that the old GNU format had a prefix field.
			// This is wrong and leads to an output file that mangles the
			// atime and ctime fields, which are often left unused.
			//
			// In order to continue reading tar files created by former, buggy
			// versions of Go, we skeptically parse the atime and ctime fields.
			// If we are unable to parse them and the prefix field looks like

a pointer type or type parameter. The unqualified type name acts as the field name.
</p>

<pre>
// A struct with four embedded fields of types T1, *T2, P.T3 and *P.T4
struct {
	T1        // field name is T1
	*T2       // field name is T2
	P.T3      // field name is T3
	*P.T4     // field name is T4
	x, y int  // field names are x and y
}
</pre>

<p>