class NegTokenInitTest {

    // Common OIDs used in tests
    private static final ASN1ObjectIdentifier OID_KRB = new ASN1ObjectIdentifier(SpnegoConstants.KERBEROS_MECHANISM);
    private static final ASN1ObjectIdentifier OID_KRB_LEGACY = new ASN1ObjectIdentifier(SpnegoConstants.LEGACY_KERBEROS_MECHANISM);
    private static final ASN1ObjectIdentifier OID_NTLM = new ASN1ObjectIdentifier(SpnegoConstants.NTLMSSP_MECHANISM);

    private boolean firstResponse = true;
    private boolean completed;

    private ASN1ObjectIdentifier[] mechs;
    private ASN1ObjectIdentifier selectedMech;
    private ASN1ObjectIdentifier[] remoteMechs;

    private final boolean disableMic;
    private boolean requireMic;

    /**
     * Instance a <code>SpnegoContext</code> object by wrapping a {@link SSPContext}

            // Arrange
            ASN1ObjectIdentifier mech1 = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2"); // Kerberos V5
            ASN1ObjectIdentifier mech2 = new ASN1ObjectIdentifier("1.3.6.1.5.5.2"); // SPNEGO
            DummySSPContext ctx =
                    new DummySSPContext(new byte[] { 1, 2, 3 }, true, "NBHOST", new ASN1ObjectIdentifier[] { mech1, mech2 }, 0xA5, true);

            // Act & Assert

    private static final ASN1ObjectIdentifier KRB5_MECH_OID;
    private static final ASN1ObjectIdentifier KRB5_MS_MECH_OID;
    static final ASN1ObjectIdentifier[] SUPPORTED_MECHS;
    private static final Oid JGSS_KRB5_NAME_OID;
    private static final Oid JGSS_KRB5_MECH_OID;

    static {
        KRB5_MECH_OID = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2");

    /**
     * Context flag for integrity (signing) capability
     */
    public static final int INTEGRITY = 0x02;

    private static final ASN1ObjectIdentifier SPNEGO_OID = new ASN1ObjectIdentifier(SpnegoConstants.SPNEGO_MECHANISM);

    private ASN1ObjectIdentifier[] mechanisms;

    private int contextFlags;

    /**
     * Default constructor for NegTokenInit
     */
    public NegTokenInit() {
    }

        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // Build a token with an arbitrary non-kerberos mechanism OID
        ASN1ObjectIdentifier unsupported = new ASN1ObjectIdentifier("1.2.3.4.5");
        byte[] init = spnegoInitWithMechs(unsupported);

        // Host is a FQDN to pass the short-name check
        SmbUnsupportedOperationException ex =

    private boolean canFallback = false;
    /** Flag to force fallback authentication */
    private boolean forceFallback;

    static {
        PREFERRED_MECHS.add(new ASN1ObjectIdentifier("1.2.840.113554.1.2.2"));
        PREFERRED_MECHS.add(new ASN1ObjectIdentifier("1.2.840.48018.1.2.2"));
    }

    /**
     * Construct a <code>Kerb5Authenticator</code> object with <code>Subject</code>

     * @see jcifs.smb.SSPContext#isSupported(org.bouncycastle.asn1.ASN1ObjectIdentifier)
     */
    @Override
    public boolean isSupported(final ASN1ObjectIdentifier mechanism) {
        return NTLMSSP_OID.equals(mechanism);
    }

    /**
     * {@inheritDoc}
     *
     * @see jcifs.smb.SSPContext#isPreferredMech(org.bouncycastle.asn1.ASN1ObjectIdentifier)
     */
    @Override

        f.setAccessible(true);
        f.set(target, value);
    }

    static ASN1ObjectIdentifier[] supportedMechs() {
        return Kerb5Context.SUPPORTED_MECHS;
    }

    @ParameterizedTest
    @MethodSource("supportedMechs")
    @DisplayName("isSupported returns true for supported OIDs")
    void isSupported_supportedOids(ASN1ObjectIdentifier oid) {
        assertTrue(ctx.isSupported(oid));

import java.util.Arrays;
import java.util.HashSet;
import java.util.Map;
import java.util.Objects;
import java.util.Set;

import javax.security.auth.Subject;

import org.bouncycastle.asn1.ASN1ObjectIdentifier;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jcifs.CIFSContext;
import jcifs.CIFSException;
import jcifs.Credentials;
import jcifs.RuntimeCIFSException;