}

    @Test
    @DisplayName("toByteArray returns empty when no mechanismToken")
    void toByteArrayWhenNull() {
        TestSpnegoToken t = new TestSpnegoToken();
        assertArrayEquals(new byte[0], t.toByteArray(), "empty array expected when mechanismToken is null");
    }

    @Test
    @DisplayName("toByteArray returns mechanismToken reference when present")

        byte[] checksum = new byte[16];
        for (int i = 0; i < checksum.length; i++) {
            checksum[i] = (byte) i;
        }
        baos.write(checksum);
        byte[] data = baos.toByteArray();

        // Create PacSignature
        PacSignature pacSignature = new PacSignature(data);

        // Verify
        assertEquals(PacSignature.KERB_CHECKSUM_HMAC_MD5, pacSignature.getType());

        byte[] encodeBuffer = new byte[1024];
        NdrBuffer dst = new NdrBuffer(encodeBuffer, 0);
        info1.encode(dst);

        ByteArrayInputStream bis = new ByteArrayInputStream(bos.toByteArray());
        // Use the encoded buffer for decoding
        NdrBuffer src = new NdrBuffer(encodeBuffer, 0);
        netdfs.DfsInfo1 decodedInfo1 = new netdfs.DfsInfo1();
        decodedInfo1.decode(src);

        innerContent.write(wrongTag.getEncoded());

        byte[] content = innerContent.toByteArray();

        // Create GSS-API wrapper
        ByteArrayOutputStream baos = new ByteArrayOutputStream();
        baos.write(0x60); // APPLICATION 0
        baos.write(content.length);
        baos.write(content);

        byte[] token = baos.toByteArray();
        assertThrows(PACDecodingException.class, () -> new KerberosToken(token));
    }

            byte[] firstEncoding = original.toByteArray();

            // Multiple round-trips should produce identical results
            NegTokenInit parsed1 = new NegTokenInit(firstEncoding);
            byte[] secondEncoding = parsed1.toByteArray();

            NegTokenInit parsed2 = new NegTokenInit(secondEncoding);
            byte[] thirdEncoding = parsed2.toByteArray();

        byte[] mic = new byte[] { 9, 9, 9 };
        NegTokenTarg original = new NegTokenTarg(NegTokenTarg.ACCEPT_COMPLETED, mech, tokenArray, mic);

        // Act – serialise and parse back
        byte[] bytes = original.toByteArray();
        NegTokenTarg roundTrip = new NegTokenTarg(bytes);

        // Assert – all getters match the original values
        assertEquals(NegTokenTarg.ACCEPT_COMPLETED, roundTrip.getResult(), "result should roundtrip");

        writeLittleEndianInt(baos, 0); // buffer count = 0
        writeLittleEndianInt(baos, 99); // invalid version
        baos.write(new byte[1]); // Make it > 8 bytes
        byte[] pacData = baos.toByteArray();

        PACDecodingException e = assertThrows(PACDecodingException.class, () -> new Pac(pacData, keys));
        // The error could be about version or missing buffers
        assertNotNull(e.getMessage());
    }

        @DisplayName("Binary constructor happy path and round-trip via toByteArray")
        void testBinaryConstructorAndToByteArray() {
            // Arrange: revision=1, count=2, identAuth zeros except last byte, subauth 10, 20
            byte[] ident = new byte[] { 0, 0, 0, 0, 0, 5 };
            rpc.sid_t st = buildSidT((byte) 1, ident, 10, 20);

            byte[] bytes = SID.toByteArray(st);

            // Act: construct from bytes and re-encode

    void testConsistentByteRepresentation() throws IOException {
        // Given
        Type1Message type1 = new Type1Message(mockContext);

        // When
        byte[] bytes1 = type1.toByteArray();
        byte[] bytes2 = type1.toByteArray();

        // Then
        assertArrayEquals(bytes1, bytes2);
    }

    @Test
    @DisplayName("Should handle parsing invalid message bytes")

            byte[] bytes = message.toByteArray();

            // Then
            assertNotNull(bytes);
            // Ensure target name is NOT written to the byte array
            int flags = Type2Message.readULong(bytes, 20);
            assertFalse((flags & Type2Message.NTLMSSP_REQUEST_TARGET) != 0);
        }

        @Test
        @DisplayName("toByteArray should not set target info flag when target info is null")