import jakarta.servlet.FilterConfig;
import jakarta.servlet.ServletContext;
import jakarta.servlet.http.HttpServletResponse;

/**
 * SPNEGO (Security Provider Negotiation Protocol) authenticator implementation.
 *
 * This class provides Single Sign-On (SSO) authentication using the SPNEGO protocol,
 * which is commonly used for Kerberos-based authentication in Windows environments.

    }

    /**
     * Default provider is BouncyCastleProvider.
     * For registering custom provider
     * @see jcifs.util.Crypto#initProvider(Provider)
     * @return Provider
     */
    public static Provider getProvider() {
        if (provider != null) {
            return provider;
        }
        provider = new BouncyCastleProvider();
        return provider;
    }

    /**

        // Execute multiple times
        OptionalThing<Locale> result1 = provider.findBusinessLocale(null, mockRequestManager);
        OptionalThing<Locale> result2 = provider.findBusinessLocale(null, mockRequestManager);
        OptionalThing<Locale> result3 = provider.findBusinessLocale(null, mockRequestManager);

        // Verify all return same result
        assertTrue(result1.isPresent());

- The Kubelet's `--cloud-provider` and `--cloud-config` options are now marked as deprecated. ([#90408](https://github.com/kubernetes/kubernetes/pull/90408), [@knabben](https://github.com/knabben)) [SIG Cloud Provider and Node]

        // test that it consistently returns null for any input
        assertNull(invokeMethod(provider, "findOnMainSchema", "TestClassification"));
        assertNull(invokeMethod(provider, "findOnMainSchema", ""));
        assertNull(invokeMethod(provider, "findOnMainSchema", "Some.Classification"));
        assertNull(invokeMethod(provider, "findOnMainSchema", "Project.TestClassification"));
    }

        // This should always return at least the TCP fallback provider
        RdmaProvider provider = RdmaProviderFactory.selectBestProvider();
        assertNotNull(provider, "Should always select an RDMA provider (at minimum TCP fallback)");
        assertNotNull(provider.getProviderName(), "Provider name should not be null");
        assertNotNull(provider.getSupportedCapabilities(), "Supported capabilities should not be null");

        }
    }

    // Test provider as CookieResourceProvider interface
    public void test_asInterface() {
        CookieResourceProvider provider = cookieResourceProvider;
        assertNotNull(provider);

        String path = provider.provideDefaultPath();
        assertEquals("/test/path", path);

        Integer expire = provider.provideDefaultExpire();

- Fix: ignore the case when updating Azure tags (#104686, @nilo19) [SIG Cloud Provider]
- Revert PR #102925 which introduced unexpected scheduling behavior based on balanced resource allocation (#105238, @damemi) [SIG Scheduling]
- Updates golang.org/x/text to v0.3.6 to fix CVE-2020-28852 (#102601, @jonesbr17) [SIG API Machinery, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Node and Storage]

 *
 * Requires org.bouncycastle:bctls-jdk15on on the classpath.
 */
class BouncyCastlePlatform private constructor() : Platform() {
  private val provider: Provider = BouncyCastleJsseProvider()

  override fun newSSLContext(): SSLContext = SSLContext.getInstance("TLS", provider)

  override fun platformTrustManager(): X509TrustManager {
    val factory =
      TrustManagerFactory.getInstance(
        "PKIX",

}

data class TlsInstance(
  val provider: Provider,
  val protocol: Protocol,
  val tlsVersion: TlsVersion,
  val socketMode: SocketMode,
  val tlsExtensionMode: TlsExtensionMode,
) : SocketMode() {
  override fun toString(): String = "$provider/$protocol/$tlsVersion/$socketMode/$tlsExtensionMode"
}

enum class Provider {
  JSSE,
  CONSCRYPT,
}

enum class TlsExtensionMode {