* @return the mechanisms array
     */
    public ASN1ObjectIdentifier[] getMechanisms() {
        return this.mechanisms;
    }

    /**
     * Sets the array of supported authentication mechanisms
     * @param mechanisms the mechanisms to set
     */
    public void setMechanisms(final ASN1ObjectIdentifier[] mechanisms) {
        this.mechanisms = mechanisms;
    }

    /**

            NegTokenInit parsed = new NegTokenInit(encoded);

            if (mechanisms == null) {
                assertNull(parsed.getMechanisms());
            } else {
                assertArrayEquals(mechanisms, parsed.getMechanisms());
            }
        }

        static Stream<Arguments> provideMechanismCombinations() {

     */
    public NegTokenTarg(final int result, final ASN1ObjectIdentifier mechanism, final byte[] mechanismToken,
            final byte[] mechanismListMIC) {
        setResult(result);
        setMechanism(mechanism);
        setMechanismToken(mechanismToken);
        setMechanismListMIC(mechanismListMIC);
    }

    /**
     * Constructs a NegTokenTarg by parsing the provided token bytes

            if (log.isDebugEnabled()) {
                log.debug("Have initial token " + tok);
            }
            if (tok.getMechanisms() != null) {
                Set<ASN1ObjectIdentifier> mechs = new HashSet<>(Arrays.asList(tok.getMechanisms()));
                boolean foundKerberos = false;
                for (ASN1ObjectIdentifier mech : Kerb5Context.SUPPORTED_MECHS) {

    void testEmptyMechanismToken() throws IOException {
        NegTokenTarg nt = new NegTokenTarg();
        nt.setResult(NegTokenTarg.REQUEST_MIC);
        nt.setMechanismToken(new byte[0]); // empty but non‑null
        nt.setMechanism(new ASN1ObjectIdentifier("2.16.840.1.101.3.6.1"));
        nt.setMechanismListMIC(null);
        byte[] bytes = nt.toByteArray();
        NegTokenTarg parsed = new NegTokenTarg(bytes);

                if (log.isDebugEnabled()) {
                    log.debug("Have initial token " + tok);
                }
                if (tok.getMechanisms() != null) {
                    Set<ASN1ObjectIdentifier> mechs = new HashSet<>(Arrays.asList(tok.getMechanisms()));
                    if (!mechs.contains(NtlmContext.NTLMSSP_OID)) {

        final SpnegoToken spToken = getToken(inputBuf, offset, len);
        byte[] inputToken = null;
        if (spToken instanceof final NegTokenInit tinit) {
            final ASN1ObjectIdentifier[] rm = tinit.getMechanisms();
            this.remoteMechs = rm;
            final ASN1ObjectIdentifier prefMech = rm[0];
            // only use token if the optimistic mechanism is supported