}
            ASN1TaggedObject tagged = (ASN1TaggedObject) vec.getObjectAt(1);
            if (tagged.getTagNo() != 0) {
                throw new IOException("Malformed SPNEGO token: tag " + tagged.getTagNo() + " " + tagged);
            }
            ASN1Sequence sequence = ASN1Sequence.getInstance(tagged, true);
            final Enumeration<ASN1Object> fields = sequence.getObjects();

            ASN1TaggedObject tagged = ASN1Util.as(ASN1TaggedObject.class, fields);

            switch (tagged.getTagNo()) {
            case 0: // Ticket Flags
                break;
            case 1: // Key
                break;
            case 2: // Realm
                DERGeneralString derRealm = ASN1Util.as(DERGeneralString.class, tagged);
                this.userRealm = derRealm.getString();

            ASN1TaggedObject tagged = (ASN1TaggedObject) der.readObject();
            final ASN1Sequence sequence = ASN1Sequence.getInstance(tagged, true);
            final Enumeration<?> fields = sequence.getObjects();
            while (fields.hasMoreElements()) {
                tagged = (ASN1TaggedObject) fields.nextElement();
                switch (tagged.getTagNo()) {
                case 0:

        Enumeration<?> fields = sequence.getObjects();
        while (fields.hasMoreElements()) {
            ASN1TaggedObject tagged = ASN1Util.as(ASN1TaggedObject.class, fields);
            switch (tagged.getTagNo()) {
            case 0:// Kerberos version
                ASN1Integer tktvno = ASN1Util.as(ASN1Integer.class, tagged);
                if (!tktvno.getValue().equals(new BigInteger(KerberosConstants.KERBEROS_VERSION))) {

        return as(type, stream.readObject());
    }

    /**
     * Extracts the base object from an ASN.1 tagged object and casts it to the specified type
     * @param <T> the target ASN.1 primitive type
     * @param type the target class type
     * @param tagged the ASN.1 tagged object
     * @return tagged object contents cast to type
     * @throws PACDecodingException if types are incompatible
     */

        Enumeration<?> fields = seq.getObjects();
        while (fields.hasMoreElements()) {
            ASN1TaggedObject tagged = ASN1Util.as(ASN1TaggedObject.class, fields.nextElement());
            switch (tagged.getTagNo()) {
            case 0:
                ASN1Integer pvno = ASN1Util.as(ASN1Integer.class, tagged);
                if (!pvno.getValue().equals(new BigInteger(KerberosConstants.KERBEROS_VERSION))) {

        // Test successful casting from tagged object
        ASN1Integer content = new ASN1Integer(789);
        ASN1TaggedObject tagged = new DERTaggedObject(true, 1, content);
        ASN1Integer result = ASN1Util.as(ASN1Integer.class, tagged);
        assertSame(content, result);
    }

    @Test
    void testAs_ASN1TaggedObject_Failure() {
        // Test failed casting from tagged object

        innerContent.write(kerberosOid.getEncoded());
        innerContent.write(0x01); // magic byte 1
        innerContent.write(0x00); // magic byte 2

        // Add a sequence instead of APPLICATION tagged object
        DERSequence wrongTag = new DERSequence(new ASN1Encodable[] { new ASN1Integer(5) });
        innerContent.write(wrongTag.getEncoded());

        byte[] content = innerContent.toByteArray();

        v.add(new DERTaggedObject(true, 2, new DERBitString(new byte[] { 0x02 })));
        // Tag 3 should be passed as ASN1TaggedObject which will be checked for APPLICATION tag class
        // Create a context-specific tagged object (wrong tag class)
        v.add(new DERTaggedObject(true, 3, new DERTaggedObject(true, 0, new DERSequence(new ASN1EncodableVector()))));
        ASN1Sequence seq = new DERSequence(v);

        // Act + Assert

      - name: Upload pip wheel to PyPI
        if: github.event_name == 'schedule' || (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v2')) # only if it is a scheduled nightly or tagged
        shell: bash