class NegTokenInitTest {

    // Common OIDs used in tests
    private static final ASN1ObjectIdentifier OID_KRB = new ASN1ObjectIdentifier(SpnegoConstants.KERBEROS_MECHANISM);
    private static final ASN1ObjectIdentifier OID_KRB_LEGACY = new ASN1ObjectIdentifier(SpnegoConstants.LEGACY_KERBEROS_MECHANISM);
    private static final ASN1ObjectIdentifier OID_NTLM = new ASN1ObjectIdentifier(SpnegoConstants.NTLMSSP_MECHANISM);

    private boolean firstResponse = true;
    private boolean completed;

    private ASN1ObjectIdentifier[] mechs;
    private ASN1ObjectIdentifier selectedMech;
    private ASN1ObjectIdentifier[] remoteMechs;

    private final boolean disableMic;
    private boolean requireMic;

    /**
     * Instance a <code>SpnegoContext</code> object by wrapping a {@link SSPContext}

            // Arrange
            ASN1ObjectIdentifier mech1 = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2"); // Kerberos V5
            ASN1ObjectIdentifier mech2 = new ASN1ObjectIdentifier("1.3.6.1.5.5.2"); // SPNEGO
            DummySSPContext ctx =
                    new DummySSPContext(new byte[] { 1, 2, 3 }, true, "NBHOST", new ASN1ObjectIdentifier[] { mech1, mech2 }, 0xA5, true);

            // Act & Assert

    /**
     * Context flag for integrity (signing) capability
     */
    public static final int INTEGRITY = 0x02;

    private static final ASN1ObjectIdentifier SPNEGO_OID = new ASN1ObjectIdentifier(SpnegoConstants.SPNEGO_MECHANISM);

    private ASN1ObjectIdentifier[] mechanisms;

    private int contextFlags;

    /**
     * Default constructor for NegTokenInit
     */
    public NegTokenInit() {
    }

    private static final ASN1ObjectIdentifier KRB5_MECH_OID;
    private static final ASN1ObjectIdentifier KRB5_MS_MECH_OID;
    static final ASN1ObjectIdentifier[] SUPPORTED_MECHS;
    private static final Oid JGSS_KRB5_NAME_OID;
    private static final Oid JGSS_KRB5_MECH_OID;

    static {
        KRB5_MECH_OID = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2");

    SSPContext mechContext;

    private ASN1ObjectIdentifier[] mechs;

    @BeforeEach
    void setup() {
        // Default: do not enforce or disable SPNEGO integrity
        when(this.config.isEnforceSpnegoIntegrity()).thenReturn(false);
        when(this.config.isDisableSpnegoIntegrity()).thenReturn(false);
        this.mechs = new ASN1ObjectIdentifier[] { new ASN1ObjectIdentifier("1.2.3.4") };
    }

        // Create inner content with OID and magic bytes but wrong tag after
        ByteArrayOutputStream innerContent = new ByteArrayOutputStream();
        ASN1ObjectIdentifier kerberosOid = new ASN1ObjectIdentifier(KerberosConstants.KERBEROS_OID);
        innerContent.write(kerberosOid.getEncoded());
        innerContent.write(0x01); // magic byte 1
        innerContent.write(0x00); // magic byte 2

        }

        @Test
        void notEqualWhenOidDiffersOrNameNullityDiffers() {
            MIEName a = new MIEName(new ASN1ObjectIdentifier("1.2.3"), "X");
            MIEName b = new MIEName(new ASN1ObjectIdentifier("1.2.4"), "X");
            MIEName c = new MIEName(new ASN1ObjectIdentifier("1.2.3"), null);
            assertNotEquals(a, b);
            assertNotEquals(a, c);
            assertNotEquals(a, new Object());

     * @return the mechanism OID
     */
    public ASN1ObjectIdentifier getMechanism() {
        return this.mechanism;
    }

    /**
     * Sets the selected authentication mechanism OID
     * @param mechanism the mechanism OID to set
     */
    public void setMechanism(final ASN1ObjectIdentifier mechanism) {
        this.mechanism = mechanism;
    }

    @Override

        Kerb5Authenticator auth = new Kerb5Authenticator((Subject) null);

        // Build a token with an arbitrary non-kerberos mechanism OID
        ASN1ObjectIdentifier unsupported = new ASN1ObjectIdentifier("1.2.3.4.5");
        byte[] init = spnegoInitWithMechs(unsupported);

        // Host is a FQDN to pass the short-name check
        SmbUnsupportedOperationException ex =