byte[] data = new byte[] { 1, 2, 3 };
        t.setMechanismToken(data);
        assertArrayEquals(data, t.getMechanismToken(), "mechanismToken should round-trip");

        // Document current behavior: no defensive copy (reference exposed)
        data[0] = 9;
        assertEquals(9, t.getMechanismToken()[0], "no defensive copy; reflects external mutation");
    }

    @Test

        assertEquals(mech, roundTrip.getMechanism(), "mechanism should roundtrip");
        assertArrayEquals(tokenArray, roundTrip.getMechanismToken(), "mechanism token should roundtrip");
        assertArrayEquals(mic, roundTrip.getMechanismListMIC(), "mic should roundtrip");
    }

    @Test
    @DisplayName("default constructor – unspecified result")

        assertArrayEquals(mechs, parsed.getMechanisms(), "Mechanism OIDs should round-trip");
        assertEquals(flags, parsed.getContextFlags(), "Flags should round-trip");
        assertArrayEquals(mechToken, parsed.getMechanismToken(), "Mechanism token should round-trip");
        assertArrayEquals(mic, parsed.getMechanismListMIC(), "MIC should round-trip");

        assertTrue(parsed.getContextFlag(NegTokenInit.DELEGATION));

            }
            inputToken = targ.getMechanismToken();
        } else {
            throw new SmbException("Invalid token");
        }

        if (spToken instanceof final NegTokenTarg targ && this.mechContext.isEstablished()) {
            // already established, but server hasn't completed yet
            if (targ.getResult() == NegTokenTarg.ACCEPT_INCOMPLETE && targ.getMechanismToken() == null

    private byte[] mechanismListMIC;

    /**
     * Gets the inner mechanism token wrapped in this SPNEGO token
     * @return the mechanism token bytes
     */
    public byte[] getMechanismToken() {
        return this.mechanismToken;
    }

    /**
     * Sets the inner mechanism token to be wrapped in this SPNEGO token
     * @param mechanismToken the mechanism token bytes
     */

            if (ctxFlags != 0) {
                fields.add(new DERTaggedObject(true, 1, new DERBitString(ctxFlags)));
            }
            final byte[] mechanismToken = getMechanismToken();
            if (mechanismToken != null) {
                fields.add(new DERTaggedObject(true, 2, new DEROctetString(mechanismToken)));
            }
            final byte[] mechanismListMIC = getMechanismListMIC();

            final ASN1ObjectIdentifier mech = getMechanism();
            if (mech != null) {
                fields.add(new DERTaggedObject(true, 1, mech));
            }
            final byte[] mechanismToken = getMechanismToken();
            if (mechanismToken != null) {
                fields.add(new DERTaggedObject(true, 2, new DEROctetString(mechanismToken)));
            }
            final byte[] mechanismListMIC = getMechanismListMIC();