fields.add(new DERTaggedObject(true, 0, new ASN1Enumerated(res)));
            }
            final ASN1ObjectIdentifier mech = getMechanism();
            if (mech != null) {
                fields.add(new DERTaggedObject(true, 1, mech));
            }
            final byte[] mechanismToken = getMechanismToken();
            if (mechanismToken != null) {

    void testIsPreferredMechDelegates() {
        SpnegoContext ctx = newContext();
        ASN1ObjectIdentifier mech = new ASN1ObjectIdentifier("1.2.840.113554.1.2.2");
        when(this.mechContext.isPreferredMech(mech)).thenReturn(true);
        assertTrue(ctx.isPreferredMech(mech));
        verify(this.mechContext, times(1)).isPreferredMech(mech);
    }

    @Test
    @DisplayName("getFlags delegates to underlying mechanism context")

        Kerb5Authenticator auth = new Kerb5Authenticator(new Subject(), "DOM", "user", "pass");
        auth.setForceFallback(true);

        // Token advertising Kerberos mech (so foundKerberos == true), but forceFallback should still route to NTLM
        byte[] init = spnegoInitWithMechs(Kerb5Context.SUPPORTED_MECHS);

        ASN1ObjectIdentifier mech = ASN1ObjectIdentifier.getInstance(this.gssContext.getMech().getDER());
        for (KerberosTicket ticket : subject.getPrivateCredentials(KerberosTicket.class)) {
            MIEName client = new MIEName(mech, ticket.getClient().getName());
            MIEName server = new MIEName(mech, ticket.getServer().getName());

over
ze
zich
bij
ook
tot
je
mij
uit
der
daar
haar
naar
heb
hoe
heeft
hebben
deze
u
want
nog
zal
me
zij
nu
ge
geen
omdat
iets
worden
toch
al
waren
veel
meer
doen
toen
moet
ben
zonder
kan
hun
dus
alles
onder
ja
eens
hier
wie
werd
altijd
doch
wordt
wezen
kunnen
ons
zelf
tegen

    // Format: TOK_ID(2 bytes) | OID_LEN(2 bytes) | OID_DER | NAME_LEN(4 bytes) | NAME(bytes)
    private static byte[] buildExportName(Oid mech, String name) throws GSSException {
        byte[] der = mech.getDER();
        byte[] nb = name.getBytes();
        int len = 2 + 2 + der.length + 4 + nb.length;
        byte[] out = new byte[len];
        int i = 0;

            if (mechs != null) {
                final ASN1EncodableVector vector = new ASN1EncodableVector();
                for (final ASN1ObjectIdentifier mech : mechs) {
                    vector.add(mech);
                }
                fields.add(new DERTaggedObject(true, 0, new DERSequence(vector)));
            }
            final int ctxFlags = getContextFlags();

Follow your cloud provider's guides to deploy FastAPI apps with them. 🤓

## Deploy your own server { #deploy-your-own-server }

                Set<ASN1ObjectIdentifier> mechs = new HashSet<>(Arrays.asList(tok.getMechanisms()));
                boolean foundKerberos = false;
                for (ASN1ObjectIdentifier mech : Kerb5Context.SUPPORTED_MECHS) {
                    foundKerberos |= mechs.contains(mech);
                }
                if ((!foundKerberos || this.forceFallback) && this.canFallback && tc.getConfig().isAllowNTLMFallback()) {

            CIFSException ex = assertThrows(CIFSException.class, ctx::dispose);
            assertTrue(ex.getMessage().contains("disposed"));
        }

        @Test
        @DisplayName("Supported/preferred mech edge cases (null, empty, unknown)")
        void testMechanismEdges() {
            DummySSPContext empty = new DummySSPContext(new byte[] { 1 }, false, "", new ASN1ObjectIdentifier[0], 0, false);