@Test public void returnsClientWhenClientPresent() {

  when(httpServletRequest.getLocalPort()).thenReturn(xfccDisallowedPort);
  when(securityContext.getUserPrincipal()).thenReturn(clientPrincipal);
  assertThat(factory.provide(request, httpServletRequest)).isEqualTo(client);
}