* @param stream the ASN.1 input stream
     * @return next object from stream cast to type
     * @throws PACDecodingException if types are incompatible
     * @throws IOException if reading from stream fails
     */
    public static <T extends ASN1Primitive> T as(final Class<T> type, final ASN1InputStream stream)
            throws PACDecodingException, IOException {
        return as(type, stream.readObject());
    }

     * @param pluginUrl the URL of the plugin
     * @param version the snapshot version
     * @return the actual version string with timestamp and build number, or null if not found
     * @throws SAXException if XML parsing fails
     * @throws IOException if I/O error occurs
     */
    protected String getSnapshotActualVersion(final DocumentBuilder builder, final String pluginUrl, final String version)
            throws SAXException, IOException {

     * @param operation the operation to execute
     * @param connection the RDMA connection to use
     * @return operation result
     * @throws IOException if operation fails after all retries
     */
    public <T> T executeWithRetry(RdmaOperation<T> operation, RdmaConnection connection) throws IOException {
        Exception lastError = null;
        int retryCount = 0;

     *
     * @param uri the URI to process
     * @param includeContent whether to include content in the response
     * @return the response data
     * @throws CrawlingAccessException if the request fails
     */
    protected ResponseData processRequest(final String uri, final boolean includeContent) {
        if (isInit.compareAndSet(false, true)) {
            init();
        }

        // start

     */
    public abstract byte[] toByteArray();

    /**
     * Parses the provided token bytes to populate this SPNEGO token
     * @param token the token bytes to parse
     * @throws IOException if parsing fails
     */
    protected abstract void parse(byte[] token) throws IOException;

    void testNullIsNotInstance() {
        // Assert
        assertFalse(SessionSetupHandler.class.isInstance(null));
    }

    @Test
    @DisplayName("Invalid: looking up constructor on interface fails")
    void testNoConstructorLookup() {
        // Act & Assert: interfaces have no constructors
        assertThrows(NoSuchMethodException.class, () -> SessionSetupHandler.class.getDeclaredConstructor());
    }

    @Test

    when both are applicable.
 *  Fix: Fail early when a port is out of range.
 *  Fix: Offer `Content-Length` headers for multipart request bodies.
 *  Fix: Throw `UnknownServiceException` if a cleartext connection is attempted
    when explicitly forbidden.
 *  Fix: Throw a `SSLPeerUnverifiedException` when host verification fails.
 *  Fix: MockWebServer explicitly closes sockets. (On some Android releases,

            // The finally block ensures pipe is closed even if handle close fails
            // Since the real method will propagate the exception from handle.close(),
            // we need to catch it to verify that pipe.close() was still called
            try {
                handle.close();
                fail("Expected IOException to be thrown");
            } catch (IOException e) {

#### Blocking APIs

Blocking APIs are convenient because you get top-to-bottom procedural code without indirection. Network calls work like regular method calls: ask for data and it is returned. If the request fails, you get a stacktrace right where the call was made.

     * Constructs KerberosEncData from encrypted token bytes.
     *
     * @param token the encrypted Kerberos token
     * @param keys map of encryption keys indexed by key type
     * @throws PACDecodingException if decoding fails
     */
    public KerberosEncData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        ASN1InputStream stream = new ASN1InputStream(new ByteArrayInputStream(token));