[Demonstration 1]

[Buggy Method]
@Test
public void itGivesABlankBody() throws IOException {
    body = new String(responseBody, UTF);
    assertEquals("The body has been constructed.", body);
}

[Buggy Hunk]
assertEquals("The body has been constructed.", body);

[Patch]
assertEquals(NEW_LINE, body);

[Demonstration 2]

[Buggy Method]
@Test
public void jwtShouldRejectNonValidRequests() throws Exception {
    given().header(new Header("Authorization", "Bearer " + VALID_TOKEN_ADMIN_FALSE)).when().put(SPECIFIC_DOMAIN).then().statusCode(401);
    assertThat(guiceJamesServer.serverProbe().listDomains()).doesNotContain(DOMAIN);
}

[Buggy Hunk]
.header(new Header("Authorization", "Bearer " + VALID_TOKEN_ADMIN_FALSE))

[Patch]
.header(new Header("Authorization", "Bearer invalid"))

[Demonstration 3]

[Buggy Method]
@Override
protected void configure(HttpSecurity http) throws Exception {
    http.authorizeRequests().antMatchers("/", "/public/**").permitAll().antMatchers("/dashboard", "/manage/**", "/team", "/newevent").access("hasRole('ROLE_ORGANIZER')").anyRequest().permitAll().and().formLogin().loginPage("/signin").usernameParameter("username").passwordParameter("password").failureUrl("/signin?error").defaultSuccessUrl("/dashboard").permitAll().and().logout().logoutSuccessUrl("/").permitAll().and().csrf().disable();
}

[Buggy Hunk]
.antMatchers("/dashboard", "/manage/**", "/team", "/newevent").access("hasRole('ROLE_ORGANIZER')")

[Patch]
.antMatchers("/dashboard", "/manage/**", "/team", "/newevent", "/savedetails").access("hasRole('ROLE_ORGANIZER')")