byte[] data = new byte[] { 1, 2, 3 };
        t.setMechanismToken(data);
        assertArrayEquals(data, t.getMechanismToken(), "mechanismToken should round-trip");

        // Document current behavior: no defensive copy (reference exposed)
        data[0] = 9;
        assertEquals(9, t.getMechanismToken()[0], "no defensive copy; reflects external mutation");
    }

    @Test

    private byte[] mechanismListMIC;

    /**
     * Gets the inner mechanism token wrapped in this SPNEGO token
     * @return the mechanism token bytes
     */
    public byte[] getMechanismToken() {
        return this.mechanismToken;
    }

    /**
     * Sets the inner mechanism token to be wrapped in this SPNEGO token
     * @param mechanismToken the mechanism token bytes
     */

            final ASN1ObjectIdentifier mech = getMechanism();
            if (mech != null) {
                fields.add(new DERTaggedObject(true, 1, mech));
            }
            final byte[] mechanismToken = getMechanismToken();
            if (mechanismToken != null) {
                fields.add(new DERTaggedObject(true, 2, new DEROctetString(mechanismToken)));
            }
            final byte[] mechanismListMIC = getMechanismListMIC();

        assertEquals(mech, roundTrip.getMechanism(), "mechanism should roundtrip");
        assertArrayEquals(tokenArray, roundTrip.getMechanismToken(), "mechanism token should roundtrip");
        assertArrayEquals(mic, roundTrip.getMechanismListMIC(), "mic should roundtrip");
    }

    @Test
    @DisplayName("default constructor – unspecified result")