## REST API call to plugin

To verify the custom token presented in the `AssumeRoleWithCustomToken` API, MinIO makes a POST request to the configured identity management plugin endpoint and expects a response with some details as shown below:

{* ../../docs_src/security/tutorial005_an_py310.py hl[106,108:116] *}

## Проверка `username` и формата данных { #verify-the-username-and-data-shape }

Мы проверяем, что получили `username`, и извлекаем scopes.

    ByteSource source = out.asByteSource();

    out.write(data);
    assertThat(source.read()).isEqualTo(data);

    out.close();
    assertThrows(IOException.class, () -> out.write(42));

    // Verify that write had no effect
    assertThat(source.read()).isEqualTo(data);
    out.reset();
  }

  public void testReset() throws Exception {
    byte[] data = newPreFilledByteArray(100);

    }

    @Test
    void testSetLength() throws SmbException {
        long newLength = 2048L;
        smbRandomAccessFile.setLength(newLength);
        // Verify length was set (actual behavior depends on implementation)
    }

    @Test
    void testSkipBytes() throws SmbException {
        int skipAmount = 100;

			}
			// Compare the full checksum structs
			if !chksm.Equal(gotChksm) {
				t.Errorf("Checksum mismatch for %s: expected %+v, got %+v", tt.name, chksm, gotChksm)
			}
			// Verify the checksum type
			expectedType := chksm.Type
			if gotChksm.Type != expectedType {
				t.Errorf("Type mismatch for %s: expected %s, got %s", tt.name, expectedType.StringFull(), gotChksm.Type.StringFull())
			}
		})

      return false
    }
    if (signingCert.basicConstraints < minIntermediates) {
      return false // The signer can't have this many intermediates beneath it.
    }
    return try {
      toVerify.verify(signingCert.publicKey)
      true
    } catch (verifyFailed: GeneralSecurityException) {
      false
    }
  }

  override fun hashCode(): Int = trustRootIndex.hashCode()

        assertTrue(str.startsWith("SmbComNTCreateAndX["), "toString should start with class name");
        assertTrue(str.contains("name=test.txt"), "The file name should appear");
        // securityFlags are set to 0x03 – verify hex sequence
        assertTrue(str.contains("securityFlags=0x03"), "securityFlags should be present");
    }

    /**
     * Fetch a private field value via reflection.  This helper keeps the

Being able to use asynchronous functions in your tests could be useful, for example, when you're querying your database asynchronously. Imagine you want to test sending requests to your FastAPI application and then verify that your backend successfully wrote the correct data in the database, while using an async database library.

Let's look at how we can make that work.

## pytest.mark.anyio { #pytest-mark-anyio }

                new String[] { "en" }, SuggestItem.Kind.QUERY);

        Map<String, Object> source = SuggestItemSerializer.toSource(item);

        // Verify all expected fields are present
        assertTrue(source.containsKey(FieldNames.TEXT));
        assertTrue(source.containsKey(FieldNames.FIELDS));
        assertTrue(source.containsKey(FieldNames.TAGS));

{* ../../docs_src/security/tutorial005_an_py310.py hl[106,108:116] *}

## Перевірте `username` і структуру даних { #verify-the-username-and-data-shape }

Ми перевіряємо, що отримали `username`, і видобуваємо scopes.