if claims.AccessKey != globalActiveCred.AccessKey {
			u, ok := globalIAMSys.GetUser(req.Context(), claims.AccessKey)
			if !ok {
				// Credentials will be invalid but for disabled
				// return a different error in such a scenario.
				if u.Credentials.Status == auth.AccountOff {
					return nil, errAccessKeyDisabled
				}
				return nil, errInvalidAccessKeyID
			}

    )
  }

  @Test fun mixedCasePunycode() {
    testDecodeOnly(
      unicode = "ليهمابتكلموشعربي؟",
      punycode = "Xn--EgBpDaJ6Bu4bXfGeHfVwXn",
    )
  }

  /**
   * It's invalid to have a label longer than 63 characters. If that's requested, the encoder may
   * overflow and return null.
   */
  @Test fun overflowEncodingOversizedLabel() {
    val a1000 = "a".repeat(1000)

    @Test
    @DisplayName("toString contains class name and message when provided")
    void toString_containsClassName_and_Message() {
        // Arrange
        String msg = "signature invalid";
        SMBSignatureValidationException ex = new SMBSignatureValidationException(msg);

        // Act
        String s = ex.toString();

        // Assert

        assertEquals(WitnessEventType.CLIENT_MOVE, WitnessEventType.valueOf("CLIENT_MOVE"));
    }

    @Test
    void testInvalidEnumValueOf() {
        // Test that invalid valueOf throws exception
        assertThrows(IllegalArgumentException.class, () -> {
            WitnessServiceType.valueOf("INVALID_TYPE");
        });

        assertThrows(IllegalArgumentException.class, () -> {

- ListObjectsV2 API calls must be used to list zip file content.
- Range requests for GetObject/HeadObject for individual files from zip is not supported.
- Names inside ZIP files are kept unmodified, but some may lead to invalid paths. See [Object key naming guidelines](https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-keys.html) on safe names.
- This API behavior is limited for following **read** operations on files inside a zip archive:

        assertThrows(PACDecodingException.class, () -> new KerberosToken(wrongOidToken));
    }

    /**
     * Test constructor with a malformed Kerberos token (invalid inner structure).
     *
     * @throws IOException if an I/O error occurs
     */
    @Test
    void testConstructorWithMalformedKerberosToken() throws IOException {

                ASN1Integer tktvno = ASN1Util.as(ASN1Integer.class, tagged);
                if (!tktvno.getValue().equals(new BigInteger(KerberosConstants.KERBEROS_VERSION))) {
                    throw new PACDecodingException("Invalid kerberos version " + tktvno);
                }
                break;
            case 1:// Realm
                DERGeneralString derRealm = ASN1Util.as(DERGeneralString.class, tagged);

        assertSame(transport, asIface);
        SmbTransportInternal asInternal = transport.unwrap(SmbTransportInternal.class);
        assertSame(transport, asInternal);

        // Invalid type should throw
        class OtherTransport implements SmbTransport {
            @Override
            public String getRemoteHostName() {
                return "test";
            }

            @Override

        SmbException exception = assertThrows(SmbException.class, () -> new NetServerEnumIterator(parent, treeHandle, "*", 0, null));

        assertTrue(exception.getMessage().contains("invalid"));
        verify(treeHandle, never()).acquire();
    }

    @Test
    @DisplayName("Constructor should handle null parent")
    void testConstructor_NullParent_ThrowsNPE() {

	testCases := []struct {
		queryParams map[string]string
		expected    APIErrorCode
	}{
		// (0) Should error without a set URL query.
		{
			expected: ErrInvalidQueryParams,
		},
		// (1) Should error on an invalid access key.
		{
			queryParams: map[string]string{
				"Expires":        "60",
				"Signature":      "badsignature",
				"AWSAccessKeyId": "Z7IXGOO6BZ0REAN1Q26I",
			},
			expected: ErrInvalidAccessKeyID,
		},