}

    @Test
    @DisplayName("seq ctor: valid minimal sequence sets apOptions and leaves ticket null")
    void sequenceConstructor_minimal_valid_setsApOptions_noTicket() throws Exception {
        // Arrange
        byte ap = (byte) 0x7A;
        ASN1Sequence seq = buildMinimalApReqSeq(ap);

        // Act
        KerberosApRequest req = new KerberosApRequest(seq, null);

        // Assert

     *
     * @param seq the ASN.1 sequence containing the AP-REQ
     * @param keys the Kerberos keys for decryption
     * @throws PACDecodingException if the sequence cannot be decoded
     */
    public KerberosApRequest(ASN1Sequence seq, KerberosKey[] keys) throws PACDecodingException {
        Enumeration<?> fields = seq.getObjects();
        while (fields.hasMoreElements()) {

                return -1;
            } else if (t1.posInc < t2.posInc) {
                return 1;
            }

            if (t1.seq < t2.seq) {
                return -1;
            } else if (t1.seq > t2.seq) {
                return 1;
            }

            return -1;
        }
    }

        if (expectSeq != seq) {
            throw new CIFSException(String.format("Invalid MIC sequence, expect %d have %d", expectSeq, seq));
        }

        final byte[] verify = new byte[8];
        System.arraycopy(mic, 4, verify, 0, 8);
        if (!MessageDigest.isEqual(trunc, verify)) {
            if (log.isDebugEnabled()) {

            ASN1Sequence seq = (ASN1Sequence) top.getBaseObject();
            assertEquals(2, seq.size(), "Sequence should contain OID and [0] NegTokenInit");
            assertTrue(seq.getObjectAt(0) instanceof ASN1ObjectIdentifier, "First element should be OID");
            ASN1ObjectIdentifier oid = (ASN1ObjectIdentifier) seq.getObjectAt(0);

        v.add(new DERTaggedObject(true, 3, new DERSequence(principalVector)));

        // Wrap in APPLICATION tag as expected by KerberosEncData
        DERSequence seq = new DERSequence(v);
        return new DERTaggedObject(false, BERTags.APPLICATION, 3, seq).getEncoded();
    }

    @Test
    void testConstructorWithEmptyToken() {
        // Test that PACDecodingException is thrown for an empty token

            when(mockNdrBuffer.dec_ndr_short()).thenReturn((int) (short) 0x9ABC, (int) (short) 0xDEF0);
            when(mockNdrBuffer.dec_ndr_small()).thenReturn((int) (byte) 0x11, (int) (byte) 0x22, // clock seq bytes
                    (int) (byte) 0xAA, (int) (byte) 0xBB, (int) (byte) 0xCC, (int) (byte) 0xDD, (int) (byte) 0xEE, (int) (byte) 0xFF // node bytes
            );

        MockRegistration registration = registrations.get(registrationId);
        if (registration != null) {
            log.debug("Mock processed heartbeat for: {} seq: {}", registrationId, sequenceNumber);
            return true;
        }
        return false;
    }

            final CommonServerMessageBlock response) {
        if (log.isTraceEnabled()) {
            log.trace("Signing with seq " + this.signSequence);
        }

        ((ServerMessageBlock) request).setSignSeq(this.signSequence);
        if (response != null) {
            ((ServerMessageBlock) response).setSignSeq(this.signSequence + 1);