@Test
    @DisplayName("Constant values match expected OIDs")
    void constantValues() {
        assertEquals("1.3.6.1.5.5.2", SpnegoConstants.SPNEGO_MECHANISM, "SPNEGO_MECHANISM mismatch");
        assertEquals("1.2.840.113554.1.2.2", SpnegoConstants.KERBEROS_MECHANISM, "KERBEROS_MECHANISM mismatch");

/**
 * Constants for SPNEGO authentication mechanism OIDs used in GSS-API negotiations
 */
public interface SpnegoConstants {

    /**
     * OID for the SPNEGO mechanism
     */
    String SPNEGO_MECHANISM = "1.3.6.1.5.5.2";

    /**
     * OID for the Kerberos v5 mechanism
     */
    String KERBEROS_MECHANISM = "1.2.840.113554.1.2.2";

    /**
     * OID for the legacy Kerberos v5 mechanism
     */

    /**
     * Context flag for integrity (signing) capability
     */
    public static final int INTEGRITY = 0x02;

    private static final ASN1ObjectIdentifier SPNEGO_OID = new ASN1ObjectIdentifier(SpnegoConstants.SPNEGO_MECHANISM);

    private ASN1ObjectIdentifier[] mechanisms;

    private int contextFlags;

    /**
     * Default constructor for NegTokenInit
     */
    public NegTokenInit() {
    }

    /**

    private static final ASN1ObjectIdentifier OID_NTLM = new ASN1ObjectIdentifier(SpnegoConstants.NTLMSSP_MECHANISM);
    private static final String SPNEGO_OID_STR = SpnegoConstants.SPNEGO_MECHANISM;

    // Helper to build a SPNEGO NegTokenInit as per NegTokenInit#toByteArray but parameterized for tests