}

        byte[] content;
        try (ASN1InputStream stream = new ASN1InputStream(token)) {
            content = ASN1Util.readUnparsedTagged(0, 0x8000, stream);
        } catch (IOException e) {
            throw new PACDecodingException("Malformed kerberos token", e);
        }

        try (ASN1InputStream stream = new ASN1InputStream(content)) {

     */
    public KerberosRelevantAuthData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        ASN1Sequence authSequence;
        try {
            try (ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token))) {
                authSequence = ASN1Util.as(ASN1Sequence.class, stream);
            }
        } catch (IOException e) {

    }

    // --- as(Class, ASN1InputStream) ---

    @Test
    void testAs_ASN1InputStream_Success() throws IOException, PACDecodingException {
        // Test successful reading and casting from ASN1InputStream
        ASN1Integer original = new ASN1Integer(456);
        ByteArrayInputStream bais = new ByteArrayInputStream(original.getEncoded());
        ASN1InputStream ais = new ASN1InputStream(bais);

        if (token.length <= 0) {
            throw new PACDecodingException("Empty kerberos ApReq");
        }

        ASN1Sequence sequence;
        try {
            try (ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token))) {
                sequence = ASN1Util.as(ASN1Sequence.class, stream);
            }
        } catch (IOException e) {

        if (token.length <= 0) {
            throw new PACDecodingException("Empty kerberos ticket");
        }

        ASN1Sequence sequence;
        try {
            try (ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token))) {
                sequence = ASN1Util.as(ASN1Sequence.class, stream);
            }
        } catch (IOException e) {

 */
package jcifs.pac;

import java.io.EOFException;
import java.io.IOException;
import java.io.InputStream;
import java.util.Enumeration;

import org.bouncycastle.asn1.ASN1InputStream;
import org.bouncycastle.asn1.ASN1Primitive;
import org.bouncycastle.asn1.ASN1Sequence;
import org.bouncycastle.asn1.ASN1TaggedObject;
import org.bouncycastle.asn1.DLSequence;

/**

            throw new IllegalStateException(ex.getMessage());
        }
    }

    @Override
    protected void parse(final byte[] token) throws IOException {
        try (ASN1InputStream der = new ASN1InputStream(token)) {
            ASN1TaggedObject tagged = (ASN1TaggedObject) der.readObject();
            final ASN1Sequence sequence = ASN1Sequence.getInstance(tagged, true);

    void testConstructor_EmptyToken() {
        // 1. GIVEN
        byte[] emptyToken = new byte[0];
        Map<Integer, KerberosKey> keys = new HashMap<>();

        // 2. WHEN & 3. THEN
        // When ASN1InputStream.readObject() returns null due to empty input,
        // ASN1Util.as() throws NullPointerException (not wrapped)
        Exception exception = assertThrows(Exception.class, () -> {