| claims             | key-value pairs                         | Claims to be associated with the requested credentials |

The keys "exp", "parent" and "sub" in the `claims` object are reserved and if present are ignored by MinIO.

If the token is not valid or access is not approved, the plugin must return a `403` (forbidden) HTTP status code. The body must have an `application/json` content-type with the following structure:

        // Verify the bytes written
        assertTrue(bytesWritten > 0);

        // For secondary, first byte should be 0x00 (Reserved)
        assertEquals(0, dst[0]);

        // Verify reserved bytes
        assertEquals(0, dst[1]);
        assertEquals(0, dst[2]);

        // Verify total parameter count (4 bytes at position 3)

        byte[] buf = new byte[bodyLen];
        int pos = 0;

        // structureSize (LE) - includes 1 byte of the variable part
        SMBUtil.writeInt2(49, buf, pos);
        pos += 2;
        // 2 reserved bytes
        pos += 2;
        // ctlCode
        SMBUtil.writeInt4(ctlCode, buf, pos);
        pos += 4;
        // fileId (16 bytes)
        byte[] fid = fileId != null ? fileId : new byte[16];

        assertEquals(66, result);
        assertEquals(0, response.getStatus()); // Should be STATUS_SUCCESS
    }

    @Test
    @DisplayName("Test readBytesWireFormat preserves buffer content")
    void testReadBytesWireFormatPreservesBuffer() throws SMBProtocolDecodingException {
        byte[] buffer = new byte[1024];
        int bufferIndex = 0;

        // Fill buffer with test data

// Copyright 2010 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

/*
Package zip provides support for reading and writing ZIP archives.

See the [ZIP specification] for details.

This package does not support disk spanning.

A note about ZIP64:

To be backwards compatible the FileHeader has both 32 and 64 bit Size

            dst[dstIndex] = maxSetupCount;
            dstIndex++;
            dst[dstIndex++] = (byte) 0x00; // Reserved1
            writeInt2(flags, dst, dstIndex);
            dstIndex += 2;
            writeInt4(timeout, dst, dstIndex);
            dstIndex += 4;
            dst[dstIndex++] = (byte) 0x00; // Reserved2
            dst[dstIndex++] = (byte) 0x00;
        }
        writeInt2(parameterCount, dst, dstIndex);

085E          ; valid                  ;      ; NV8    # 6.0  MANDAIC PUNCTUATION
085F          ; disallowed                             # NA   <reserved-085F>
0860..086A    ; valid                                  # 10.0 SYRIAC LETTER MALAYALAM NGA..SYRIAC LETTER MALAYALAM SSA
086B..086F    ; disallowed                             # NA   <reserved-086B>..<reserved-086F>

        final int start = bufferIndex;

        buffer[bufferIndex] = (byte) 0x00; // Reserved
        bufferIndex++;
        buffer[bufferIndex++] = (byte) 0x00; // Reserved
        buffer[bufferIndex++] = (byte) 0x00; // Reserved

        this.totalParameterCount = SMBUtil.readInt4(buffer, bufferIndex);
        if (this.bufDataStart == 0) {

COPYRIGHT

All contributions by the University of California:

Copyright (c) 2014, The Regents of the University of California (Regents)
All rights reserved.

All other contributions:

Copyright (c) 2014, the respective contributors
All rights reserved.

Caffe uses a shared copyright model: each contributor holds copyright over
their contributions to Caffe. The project versioning records all such

        bufferIndex += 2; // reserved
        this.dataCompactionMode = SMBUtil.readInt2(buffer, bufferIndex);
        bufferIndex += 4; // 2 reserved
        this.dataLength = SMBUtil.readInt2(buffer, bufferIndex);
        bufferIndex += 2;
        this.dataOffset = SMBUtil.readInt2(buffer, bufferIndex);
        bufferIndex += 12; // 10 reserved

        return bufferIndex - start;
    }