@Test
    @DisplayName("byte[] ctor: empty token throws PACDecodingException with clear message")
    void byteArrayConstructor_emptyToken_throws() {
        // Arrange
        byte[] empty = new byte[0];

        // Act + Assert
        PACDecodingException ex = assertThrows(PACDecodingException.class, () -> new KerberosApRequest(empty, new KerberosKey[0]));
        assertTrue(ex.getMessage().contains("Empty kerberos ApReq"));
    }

    @Test

    @Test
    @DisplayName("Default ctor: null message/cause and success status")
    void defaultConstructor_hasNullMessageAndCause_andDefaultStatus() {
        // Arrange & Act
        SMBSignatureValidationException ex = new SMBSignatureValidationException();

        // Assert
        assertNull(ex.getMessage(), "Default ctor should not set a message");

        return Stream.of(Arguments.of(anon), Arguments.of(mock));
    }

    @Test
    @DisplayName("Class is a public interface in expected package")
    void testPublicInterfaceAndPackage() {
        // Arrange & Act
        Class<SessionSetupHandler> clazz = SessionSetupHandler.class;

        // Assert
        assertTrue(clazz.isInterface(), "Should be an interface");

        sqlException.setNextException(sqlException2);
        sqlException2.setNextException(sqlException3);

        final SQLRuntimeException sqlRuntimeException = new SQLRuntimeException(sqlException);

        // ## Act ##
        final String message = sqlRuntimeException.getMessage();

        // ## Assert ##
        System.out.println(message);
        assertContains(message, "ErrorCode=7650");

    void defaultConstructor_producesRequiredKrb5EntryWithEmptyOptions() {
        // Arrange
        StaticJAASConfiguration cfg = new StaticJAASConfiguration();

        // Act
        AppConfigurationEntry[] entries = cfg.getAppConfigurationEntry("ignored");

        // Assert
        assertNotNull(entries, "Entries array should not be null");

        // Need to mock getRequestProperty as well since it delegates to wrapped connection
        when(mockConnection.getRequestProperty("Accept")).thenReturn("application/json");

        // Act
        ntlmConnection = new NtlmHttpURLConnection(mockConnection, mockCifsContext);

        // Assert
        assertEquals("GET", ntlmConnection.getRequestMethod());

        void testTextualConstructorAndToString() throws Exception {
            // Arrange
            SID sid = new SID("S-1-5-21-1-2-3-1029");

            // Act & Assert
            // toString should reconstruct exact textual form
            assertEquals("S-1-5-21-1-2-3-1029", sid.toString());
            // RID is the last subauthority
            assertEquals(1029, sid.getRid());

    void testGetRemoteUser() {
        // Arrange: Define the expected user name from the principal
        String expectedUserName = "testUser";
        when(mockPrincipal.getName()).thenReturn(expectedUserName);

        // Act: Call the method under test
        String actualUserName = ntlmRequest.getRemoteUser();

        // Assert: Verify that the returned user name is the expected one

        when(delegate.next()).thenReturn(e1, e2);

        NetServerFileEntryAdapterIterator itr = new NetServerFileEntryAdapterIterator(parent, delegate, null);

        // Act & Assert
        assertTrue(itr.hasNext(), "Should have first element ready");
        SmbResource r1 = itr.next();
        assertNotNull(r1, "First adapted resource must not be null");

        // Arrange
        int fid = 0x1234;
        int offset = 100;
        int remaining = 50;
        byte[] buffer = new byte[100];
        int off = 10;
        int len = 40;

        // Act
        SmbComWrite write = new SmbComWrite(fid, offset, remaining, buffer, off, len);

        // Assert
        assertEquals(fid, getFieldValue(write, "fid"), "FID should match constructor arg");