* @param doSigning whether message signing should be enabled
     * @return a new SSP authentication context
     * @throws SmbException if context creation fails
     */
    SSPContext createContext(CIFSContext tc, String targetDomain, String host, byte[] initialToken, boolean doSigning) throws SmbException;

    /**
     * Get the security subject associated with these credentials.

        Smb2SessionSetupRequest request = null;
        Smb2SessionSetupResponse response = null;
        SmbException ex = null;
        SSPContext ctx = null;
        byte[] token = negoResp.getSecurityBlob();
        final int securityMode =
                (negoResp.getSecurityMode() & Smb2Constants.SMB2_NEGOTIATE_SIGNING_REQUIRED) != 0 || trans.isSigningEnforced()

        @Override
        public CredentialsInternal clone() {
            // For testing purposes, return this instance (allowed by return type)
            return this;
        }

        @Override
        public SSPContext createContext(CIFSContext tc, String targetDomain, String host, byte[] initialToken, boolean doSigning)
                throws SmbException {
            // Not used within these tests

/**
 * Tests for SpnegoContext focusing on delegation, error handling, and edge cases.
 */
@ExtendWith(MockitoExtension.class)
class SpnegoContextTest {

    @Mock
    Configuration config;

    @Mock
    SSPContext mechContext;

    private ASN1ObjectIdentifier[] mechs;

    @BeforeEach
    void setup() {
        // Default: do not enforce or disable SPNEGO integrity

     *
     * {@inheritDoc}
     *
     * @see jcifs.smb.CredentialsInternal#createContext(jcifs.CIFSContext, java.lang.String, java.lang.String, byte[],
     *      boolean)
     */
    @Override
    public SSPContext createContext(CIFSContext tc, String targetDomain, String host, byte[] initialToken, boolean doSigning)
            throws SmbException {
        checkNotClosed();

        // Check if authentication has expired

     * {@inheritDoc}
     *
     * @see jcifs.smb.NtlmPasswordAuthenticator#createContext(jcifs.CIFSContext, java.lang.String, java.lang.String,
     *      byte[], boolean)
     */
    @Override
    public SSPContext createContext(CIFSContext tc, String targetDomain, String host, byte[] initialToken, boolean doSigning)
            throws SmbException {
        if (host.indexOf('.') < 0 && host.toUpperCase(Locale.ROOT).equals(host)) {