assertThrows(PACDecodingException.class, () -> new KerberosToken(wrongOidToken));
    }

    /**
     * Test constructor with a malformed Kerberos token (invalid inner structure).
     *
     * @throws IOException if an I/O error occurs
     */
    @Test
    void testConstructorWithMalformedKerberosToken() throws IOException {

                ASN1Integer tktvno = ASN1Util.as(ASN1Integer.class, tagged);
                if (!tktvno.getValue().equals(new BigInteger(KerberosConstants.KERBEROS_VERSION))) {
                    throw new PACDecodingException("Invalid kerberos version " + tktvno);
                }
                break;
            case 1:// Realm
                DERGeneralString derRealm = ASN1Util.as(DERGeneralString.class, tagged);

        assertSame(transport, asIface);
        SmbTransportInternal asInternal = transport.unwrap(SmbTransportInternal.class);
        assertSame(transport, asInternal);

        // Invalid type should throw
        class OtherTransport implements SmbTransport {
            @Override
            public String getRemoteHostName() {
                return "test";
            }

            @Override

        SmbException exception = assertThrows(SmbException.class, () -> new NetServerEnumIterator(parent, treeHandle, "*", 0, null));

        assertTrue(exception.getMessage().contains("invalid"));
        verify(treeHandle, never()).acquire();
    }

    @Test
    @DisplayName("Constructor should handle null parent")
    void testConstructor_NullParent_ThrowsNPE() {

	testCases := []struct {
		queryParams map[string]string
		expected    APIErrorCode
	}{
		// (0) Should error without a set URL query.
		{
			expected: ErrInvalidQueryParams,
		},
		// (1) Should error on an invalid access key.
		{
			queryParams: map[string]string{
				"Expires":        "60",
				"Signature":      "badsignature",
				"AWSAccessKeyId": "Z7IXGOO6BZ0REAN1Q26I",
			},
			expected: ErrInvalidAccessKeyID,
		},

        try {
            form.content = encodeJsp(new String(FileUtil.readBytes(jspFile), Constants.UTF_8));
        } catch (final UnsupportedEncodingException e) {
            throw new FessSystemException("Invalid encoding", e);
        }
        saveToken();
        return asEditHtml(form);
    }

    /**
     * Show the edit page with the default content.
     * @param form The edit form.

                    if ("en".equals(lang)) {
                        hasEn = true;
                        break;
                    }
                }
                assertTrue("Should filter invalid languages and keep 'en'", hasEn || languages.length >= 0);
            }
        } catch (NullPointerException e) {
            // Expected in test environment due to missing dependencies

                if (e.getNtStatus() == NtStatus.NT_STATUS_INVALID_PARAMETER) {
                    // Silently ignore invalid parameter errors - these may occur with certain server configurations
                    if (log.isDebugEnabled()) {
                        log.debug("Invalid parameter error.", e);
                    }
                    return;
                }

        @ParameterizedTest
        @DisplayName("Should reject invalid binding URLs")
        @ValueSource(strings = { "invalid_url", "proto:", "proto:server[]", "proto:[key=]", "proto:[=value]", "proto:server[endpoint=]",
                "proto:[endpoint=]" })
        void testParseInvalidBindingUrls(String url) {
            // When/Then: Should throw DcerpcException for invalid URLs

	}

	// 2. Verify that policy json is validated by server
	invalidPolicyBytes := policyBytes[:len(policyBytes)-1]
	err = s.adm.AddCannedPolicy(ctx, policy1+"invalid", invalidPolicyBytes)
	if err == nil {
		c.Fatalf("invalid policy creation success")
	}

	// 3. Create a user, associate policy and verify access
	accessKey, secretKey := mustGenerateCredentials(c)