final long elapsed = System.currentTimeMillis() - startTime;

            assertNotNull(results);
            // Verify it doesn't take too long (parallel execution should help)
            assertTrue("Search took too long: " + elapsed + "ms", elapsed < 5000);
        }
    }

    /**

                tmpTestFiles.keys
            )
            cleanUp(tmpTestFiles.keys)
            projectPathToLeftoverFiles[projectPath] = tmpTestFiles
        }

        // Third run: verify and throw exceptions
        val exceptions = mutableListOf<Exception>()
        projectStates
            .filter { projectPathToLeftoverFiles.containsKey(it.key) }

		if err != nil {
			writeCustomErrorResponseJSON(ctx, w, errorCodes.ToAPIErr(ErrInternalError), err.Error(), r.URL)
			return
		}
		writeSuccessResponseJSON(w, resp)
		return
	}

	// 2. Verify that we can indeed decrypt the (encrypted) key
	decryptedKey, err := GlobalKMS.Decrypt(ctx, &kms.DecryptRequest{
		Name:           key.KeyID,
		Ciphertext:     key.Ciphertext,
		AssociatedData: kmsContext,
	})

Output decrypted to inspect.ad2b43d8.zip
```

    public void testGzipSetsCompressionToGzip() {
        CurlRequest request = new CurlRequest(Method.GET, "https://example.com");

        // Call gzip() and verify it sets compression
        request.gzip();

        // We can't directly access compression field, but we can verify the method returns this
        assertSame(request, request.gzip());
    }

    @Test
    public void testMultipleCompressionCalls() {

        // Make a copy of the buffer
        byte[] bufferCopy = buffer.clone();

        // Call readBytesWireFormat
        response.readBytesWireFormat(buffer, bufferIndex);

        // Verify buffer wasn't modified
        assertArrayEquals(bufferCopy, buffer, "Buffer content should not be modified");
    }

    @Test
    @DisplayName("Test multiple calls to readBytesWireFormat")

            long duration = endTime - startTime;
            assertTrue(duration < 1000, "UpgradeResult creation should complete within 1 second for 1000 POMs");

            // Verify correctness
            assertTrue(result.success(), "Result should be successful");
            assertEquals(largePomSet.size(), result.processedCount(), "Should have correct processed count");
        }
    }

            try {
                thread.join();
            } catch (InterruptedException e) {
                fail("Thread interrupted");
            }
        }

        // Verify all stores were counted
        assertEquals(1000L, callback.getDocumentSize());

        // Test commit after concurrent operations
        callback.commit();
    }

    @Test

        HMACT64 hmac = new HMACT64(key);
        hmac.engineUpdate(data, 0, data.length);
        byte[] result = hmac.engineDigest();

        // Verify it produces a valid MD5 hash (16 bytes)
        assertNotNull(result);
        assertEquals(16, result.length);

        // Calculate the same using manual HMACT64 algorithm

* The **output model** should not have a password.
* The **database model** would probably need to have a hashed password.

/// danger

Never store user's plaintext passwords. Always store a "secure hash" that you can then verify.

If you don't know, you will learn what a "password hash" is in the [security chapters](security/simple-oauth2.md#password-hashing).

///

## Multiple models { #multiple-models }