new KerberosPacAuthData(emptyToken, keys);
        });
        assertTrue(e.getMessage().contains("PAC"));
    }

    // Test exception for short PAC
    @Test
    void testConstructorShortPac() {
        byte[] shortToken = new byte[7];
        PACDecodingException e = assertThrows(PACDecodingException.class, () -> {

    void testGetFileInformationLevel() {
        assertEquals(FileInformation.FILE_RENAME_INFO, fileRenameInfo.getFileInformationLevel());
    }

    @Test
    @DisplayName("Test size calculation with short filename")
    void testSizeWithShortFilename() {
        FileRenameInformation2 info = new FileRenameInformation2("test.txt", false);
        // 20 bytes fixed + 2 * 8 chars = 20 + 16 = 36
        assertEquals(36, info.size());

#### Fix it with `secrets.compare_digest()` { #fix-it-with-secrets-compare-digest }

But in our code we are actually using `secrets.compare_digest()`.

In short, it will take the same time to compare `stanleyjobsox` to `stanleyjobson` than it takes to compare `johndoe` to `stanleyjobson`. And the same for the password.

  @Override
  Hasher putBytes(byte[] bytes, int off, int len);

  @CanIgnoreReturnValue
  @Override
  Hasher putBytes(ByteBuffer bytes);

  @CanIgnoreReturnValue
  @Override
  Hasher putShort(short s);

  @CanIgnoreReturnValue
  @Override
  Hasher putInt(int i);

  @CanIgnoreReturnValue
  @Override
  Hasher putLong(long l);

  /** Equivalent to {@code putInt(Float.floatToRawIntBits(f))}. */

        helper.delayByRules();
        end = System.currentTimeMillis();
        assertTrue(end - start < 50); // Should return quickly

        // Test with rule that has delay (we'll use a very short delay for testing)
        helper.ruleList.clear();
        helper.addIntervalRule("12:00", "13:00", "*", 10);
        start = System.currentTimeMillis();
        helper.delayByRules();

   * value. Otherwise, a call that passes one {@code loader} may return the result of another call
   * with a differently behaving {@code loader}. For example, a call that requests a short timeout
   * for an RPC may wait for a similar call that requests a long timeout, or a call by an
   * unprivileged user may return a resource accessible only to a privileged user making a similar

			}
			opts.claims[k] = v
		}
	} else {
		// We still need to ensure that the target user is a valid LDAP user.
		//
		// The target user may be supplied as a (short) username or a DN.
		// However, for now, we only support using the short username.

		isDN := globalIAMSys.LDAPConfig.ParsesAsDN(targetUser)
		opts.claims[ldapUserN] = targetUser // simple username
		var lookupResult *xldap.DNSearchResult

    -> TYPE_VALID

    TYPE_DISALLOWED -> TYPE_DISALLOWED

    else -> error("unexpected type: $type")
  }

internal infix fun Byte.and(mask: Int): Int = toInt() and mask

internal infix fun Short.and(mask: Int): Int = toInt() and mask

    @Test
    @DisplayName("Test automatic cleanup of old resources")
    @Timeout(value = 5, unit = TimeUnit.SECONDS)
    void testAutomaticCleanup() throws InterruptedException {
        // Configure with very short max age for testing
        resourceManager.configure(100, 50, true, true);

        TestResource resource = new TestResource("old");
        resourceManager.registerResource(resource);

            assertArrayEquals("Hello".getBytes(), java.util.Arrays.copyOfRange(buffer, 0, 5));
        }

        @Test
        @DisplayName("readn should throw IOException when buffer too short")
        void shouldThrowWhenBufferTooShort() {
            InputStream is = new ByteArrayInputStream("test".getBytes());
            assertThrows(IOException.class, () -> Transport.readn(is, new byte[5], 0, 10));
        }