private ASN1ObjectIdentifier[] mechanisms;

    private int contextFlags;

    /**
     * Default constructor for NegTokenInit
     */
    public NegTokenInit() {
    }

    /**
     * Constructs a NegTokenInit with the specified parameters
     * @param mechanisms the array of supported authentication mechanisms

        @ValueSource(ints = { NegTokenInit.DELEGATION, NegTokenInit.MUTUAL_AUTHENTICATION, NegTokenInit.REPLAY_DETECTION,
                NegTokenInit.SEQUENCE_CHECKING, NegTokenInit.ANONYMITY, NegTokenInit.CONFIDENTIALITY, NegTokenInit.INTEGRITY })
        @DisplayName("Individual flag values are correctly set and retrieved")
        void testIndividualFlagValues(int flag) {
            NegTokenInit init = new NegTokenInit();

        }
        if (this.gssContext.getAnonymityState()) {
            contextFlags |= NegTokenInit.ANONYMITY;
        }
        if (this.gssContext.getConfState()) {
            contextFlags |= NegTokenInit.CONFIDENTIALITY;
        }
        if (this.gssContext.getIntegState()) {
            contextFlags |= NegTokenInit.INTEGRITY;
        }
        return contextFlags;
    }

        when(gssContext.getIntegState()).thenReturn(true);

        int flags = ctx.getFlags();
        int expected = NegTokenInit.DELEGATION | NegTokenInit.MUTUAL_AUTHENTICATION | NegTokenInit.REPLAY_DETECTION
                | NegTokenInit.SEQUENCE_CHECKING | NegTokenInit.ANONYMITY | NegTokenInit.CONFIDENTIALITY | NegTokenInit.INTEGRITY;
        assertEquals(expected, flags);
    }

    @Test

import jcifs.Configuration;
import jcifs.spnego.NegTokenInit;

@ExtendWith(MockitoExtension.class)
class Kerb5AuthenticatorTest {

    @Mock
    CIFSContext tc;

    @Mock
    Configuration config;

    private static byte[] spnegoInitWithMechs(ASN1ObjectIdentifier... mechs) {
        // Build a minimal SPNEGO NegTokenInit containing the provided mechanisms
        NegTokenInit tok = new NegTokenInit(mechs, 0, null, null);

import org.bouncycastle.asn1.DERSequence;
import org.slf4j.Logger;
import org.slf4j.LoggerFactory;

import jcifs.CIFSException;
import jcifs.Configuration;
import jcifs.spnego.NegTokenInit;
import jcifs.spnego.NegTokenTarg;
import jcifs.spnego.SpnegoException;
import jcifs.spnego.SpnegoToken;
import jcifs.util.Hexdump;

/**
 * This class used to wrap a {@link SSPContext} to provide SPNEGO feature.

            throw new SmbUnsupportedOperationException("Cannot use netbios/short names with kerberos authentication, have " + host);
        }
        try {
            NegTokenInit tok = new NegTokenInit(initialToken);
            if (log.isDebugEnabled()) {
                log.debug("Have initial token " + tok);
            }
            if (tok.getMechanisms() != null) {

            return setupTargetName(tc, host, new NtlmContext(tc, this, doSigning));
        }

        try {
            if (initialToken != null && initialToken.length > 0) {
                NegTokenInit tok = new NegTokenInit(initialToken);
                if (log.isDebugEnabled()) {
                    log.debug("Have initial token " + tok);
                }
                if (tok.getMechanisms() != null) {

        // Ensure delegate is not consulted
        verify(this.mechContext, never()).isSupported(any);
    }

    @Test
    @DisplayName("initSecContext with empty len returns initial NegTokenInit and delegates to mechContext")
    void testInitSecContextInitialToken() throws Exception {
        SpnegoContext ctx = newContext();