* **`400 - 499`** are for "Client error" responses. These are the second type you would probably use the most.
    * An example is `404`, for a "Not Found" response.
    * For generic errors from the client, you can just use `400`.

        NtlmMessage.writeSecurityBuffer(dest, 0, 8, payload);
        assertEquals(3, NtlmMessage.readUShort(dest, 0), "Length field must be 3");
        assertEquals(3, NtlmMessage.readUShort(dest, 2), "Length field must be 3 again");
        assertEquals(8, NtlmMessage.readULong(dest, 4), "Offset must point to payload start");
        byte[] actualPayload = new byte[payload.length];

        if (sMaxAgeSeconds != -1) append("s-maxage=").append(sMaxAgeSeconds).append(", ")
        if (isPrivate) append("private, ")
        if (isPublic) append("public, ")
        if (mustRevalidate) append("must-revalidate, ")
        if (maxStaleSeconds != -1) append("max-stale=").append(maxStaleSeconds).append(", ")
        if (minFreshSeconds != -1) append("min-fresh=").append(minFreshSeconds).append(", ")

     */
    public static void registerDriver(final Class<Driver> driverClass) {
        assertArgumentNotNull("driverClass", driverClass);
        registerDriver(ClassUtil.newInstance(driverClass));
    }

    /**
     * Registers a JDBC driver.
     *
     * @param driver
     *            The JDBC driver to register. Must not be {@literal null}.
     */

     * <code>maven-toolchains-plugin</code> contains the configuration to select the appropriate
     * toolchain and is executed at the beginning of the build.
     *
     * @param type the type, must not be {@code null}
     * @param context the Maven session, must not be {@code null}
     * @return the toolchain selected by <code>maven-toolchains-plugin</code>
     */
    Toolchain getToolchainFromBuildContext(String type, MavenSession context);

        assertTrue(Modifier.isPublic(clazz.getModifiers()), "Interface should be public");
        assertEquals("jcifs.smb", clazz.getPackageName(), "Package must match source");
        assertEquals("SessionSetupHandler", clazz.getSimpleName(), "Simple name must match source");
    }

    @Test
    @DisplayName("Interface declares no methods or fields")
    void testNoMembers() {
        // Assert

    /**
     * Determines the mirror for the specified repository.
     *
     * @param repository The repository to determine the mirror for, must not be {@code null}.
     * @param mirrors The available mirrors, may be {@code null}.
     * @return The mirror specification for the repository or {@code null} if no mirror matched.
     */

        URL url = new URL(null, "smb://server/share#frag", handler);

        // Assert: ref is moved into path by Handler.parseURL
        assertNull(url.getRef(), "Ref must be cleared by Handler");
        assertTrue(url.getPath().endsWith("/share#frag"), "Path must contain the fragment suffix");
        assertEquals(SmbConstants.DEFAULT_PORT, url.getPort(), "Default port applied when not explicitly set");
    }

    @Test

    /**
     * Do not instantiate.
     */
    protected ModifierUtil() {
    }

    /**
     * Checks if the specified method is public.
     *
     * @param method
     *            the method to check. Must not be null.
     * @return true if public, false otherwise
     */
    public static boolean isPublic(final Method method) {
        assertArgumentNotNull("method", method);

The keys "exp", "parent" and "sub" in the `claims` object are reserved and if present are ignored by MinIO.

If the token is not valid or access is not approved, the plugin must return a `403` (forbidden) HTTP status code. The body must have an `application/json` content-type with the following structure:

```json
{
    "reason": <string>
}
```

The reason message is returned to the client.