}

    @Test
    @DisplayName("byte[] ctor: empty token throws PACDecodingException with clear message")
    void byteArrayConstructor_emptyToken_throws() {
        // Arrange
        byte[] empty = new byte[0];

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(empty, new KerberosKey[0]));

    }

    @Test
    void testConstructorWithEmptyToken() {
        // Test that PACDecodingException is thrown for an empty token
        byte[] emptyToken = new byte[0];
        PACDecodingException e = assertThrows(PACDecodingException.class, () -> new KerberosTicket(emptyToken, (byte) 0, keys));
        assertEquals("Empty kerberos ticket", e.getMessage());
    }

    @Test

     *
     * @param token the encrypted Kerberos token
     * @param keys map of encryption keys indexed by key type
     * @throws PACDecodingException if decoding fails
     */
    public KerberosEncData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token));
        ASN1TaggedObject derToken;
        try {

    }

    @Test
    @DisplayName("Test parsing with invalid data size")
    void testInvalidDataSize() {
        byte[] tooSmall = new byte[10];

        PACDecodingException exception = assertThrows(PACDecodingException.class, () -> new PacLogonInfo(tooSmall));

        assertEquals("Malformed PAC", exception.getMessage());
    }

    @Test
    @DisplayName("Test getters return expected values using mocks")

    /**
     * Constructs a PAC logon information object from raw PAC data.
     * @param data the raw PAC logon info buffer data
     * @throws PACDecodingException if the data is malformed or invalid
     */
    public PacLogonInfo(final byte[] data) throws PACDecodingException {
        try {
            final PacDataInputStream pacStream = new PacDataInputStream(new DataInputStream(new ByteArrayInputStream(data)));