The id_token received is a signed JSON Web Token (JWT). Use a JWT decoder to decode the id_token to access the payload of the token that includes following JWT claims, `policy` claim is mandatory and should be present as part of your JWT claim. Without this claim the generated credentials will not have access to any resources on the server, using these credentials application would receive 'Access Denied' errors.

   *     time
   * @throws AssertionFailedError if the given method name does not match the name of the method
   *     this thread has called most recently
   */
  private Response getResponse(String methodName) throws Exception {
    Response response = responseQueue.poll(TIMEOUT_MILLIS, MILLISECONDS);
    if (response == null) {
      throw new TimeoutException();

            // Verify FILE_NOTIFY_CHANGE_SIZE is removed
            assertFalse((flags & FileNotifyInformation.FILE_NOTIFY_CHANGE_SIZE) != 0);

            // Verify other flags are still present
            assertTrue((flags & FileNotifyInformation.FILE_NOTIFY_CHANGE_FILE_NAME) != 0);
            assertTrue((flags & FileNotifyInformation.FILE_NOTIFY_CHANGE_LAST_WRITE) != 0);
        }

        @Test

   * loaded entries; it will never contain null keys or values.
   *
   * <p>Caches loaded by a {@link CacheLoader} will issue a single request to {@link
   * CacheLoader#loadAll} for all keys which are not already present in the cache. All entries
   * returned by {@link CacheLoader#loadAll} will be stored in the cache, over-writing any
   * previously cached values. This method will throw an exception if {@link CacheLoader#loadAll}

   *
   * <p>If the returned map doesn't contain all requested {@code keys} then the entries it does
   * contain will be cached, but {@code getAll} will throw an exception. If the returned map
   * contains extra keys not present in {@code keys} then all returned entries will be cached, but
   * only the entries for {@code keys} will be returned from {@code getAll}.
   *

		{
			objInfos:    allVersExpObjInfos,
			wants:       nil,
			wantExpired: []ObjectToDelete{{ObjectV: ObjectV{ObjectName: obj, VersionID: allVersExpObjInfos[0].VersionID}}},
		},
		{
			// When no versions are present, in practice this could be an object with only free versions
			objInfos:    nil,
			wants:       nil,
			wantExpired: nil,
		},
	}
	for i, test := range tests {

        // Skip standard lease flags (4 bytes)
        dataOffset += 4;

        // Skip lease duration (8 bytes)
        dataOffset += 8;

        // Decode directory-specific data if present
        if (length > 24 + getStandardLeaseSize()) {
            int scopeOrdinal = SMBUtil.readInt4(buffer, dataOffset);
            this.cacheScope = DirectoryCacheScope.values()[scopeOrdinal];
            dataOffset += 4;

    }

    /**
     * Checks if any sort builders have been added to this context.
     * @return True if sort builders are present, false otherwise.
     */
    public boolean hasSorts() {
        return !sortBuilderList.isEmpty();
    }

    /**
     * Gets the list of sort builders for this query context.

     * per line (similar to {@code maven.conf}) and {@code '#'} (hash) marked comment lines are allowed. Goals, if
     * present, are appended, to those specified on CLI input, if any.
     */
    Optional<String> atFile();

    /**
     * Returns the list of goals and phases to execute.
     *

				rpt.SetStatus(bucket, fileName, fmt.Errorf("An Object Lock configuration is present on this bucket, so the versioning state cannot be suspended."))
				continue
			}
			if rcfg, _ := getReplicationConfig(ctx, bucket); rcfg != nil && v.Suspended() {
				rpt.SetStatus(bucket, fileName, fmt.Errorf("A replication configuration is present on this bucket, so the versioning state cannot be suspended."))
				continue
			}