`id_token` we can perform an STS request to MinIO to get temporary credentials for MinIO API operations. MinIO STS API uses [JSON Web Key Set Endpoint](https://docs.wso2.com/display/IS541/JSON+Web+Key+Set+Endpoint) to validate if JWT is valid and is properly signed.

**We recommend setting `policy` as a custom claim for the JWT service provider follow [here](https://docs.wso2.com/display/IS550/Configuring+Claims+for+a+Service+Provider) and [here](https://docs.wso2.com/display/IS550/Handling+...

        .inOrder();
  }

  /**
   * Populates the graph with nodes and edges in a star shape with node `1` in the middle.
   *
   * <p>Note that the edges are added in a shuffled order to properly test the effect of the
   * insertion order.
   */
  private void populateStarShapedGraph() {
    putEdge(2, 1);
    putEdge(1, 4);
    putEdge(1, 3);
    putEdge(5, 1);
    putEdge(1, 2);

        // Create a mock RPC SID to simulate a domain SID
        rpc.sid_t rpcSid = new rpc.sid_t();
        rpcSid.revision = 1;
        rpcSid.sub_authority_count = 4; // Fixed: should be 4 to properly represent domain SID
        rpcSid.identifier_authority = new byte[] { 0, 0, 0, 0, 0, 5 };
        rpcSid.sub_authority = new int[] { 21, 123, 456, 789 };

        FileEntry fe3 = mock(FileEntry.class);
        lenient().when(fe3.getName()).thenReturn("file3");
        when(fe3.getFileIndex()).thenReturn(3);

        // Track query count to handle multiple queries properly
        final int[] queryCount = { 0 };

        // Mock send(create) to wire a query response with fe1, fe2
        doAnswer(inv -> {
            Object arg = inv.getArgument(0);

 * <a href="../../resolver.html">Setting Name Resolution Properties</a>
 * and the <code>jcifs.smb1.resolveOrder</code> property. Changing
 * jCIFS name resolution properties can greatly affect the behavior of
 * the client and may be necessary for proper operation.
 * <p>
 * This class should be used in favor of {@code InetAddress} to resolve
 * hostnames on LANs and WANs that support a mixture of NetBIOS/WINS and

        MockNotifyResponse response = new MockNotifyResponse(Collections.emptyList());

        // Test async property
        assertFalse(response.isAsync());
        response.setAsync(true);
        assertTrue(response.isAsync());

        // Test next response property
        assertNull(response.getNextResponse());
        MockNotifyResponse nextResponse = new MockNotifyResponse(Collections.emptyList());

        byte[] buffer = new byte[512];
        int written = trans2QueryPathInfo.writeParametersWireFormat(buffer, 0);

        // Should handle special characters properly
        assertTrue(written > specialPath.length());

        // Check information level
        int actualInfoLevel = SMBUtil.readInt2(buffer, 0);
        assertEquals(0x0101, actualInfoLevel);
    }

            System.arraycopy(fileId, 0, buffer, 8, 16);

            int bytesRead = notification.readBytesWireFormat(buffer, 0);
            assertEquals(24, bytesRead);

            // Verify that reserved fields were properly skipped
            Field oplockLevelField = Smb2OplockBreakNotification.class.getDeclaredField("oplockLevel");
            oplockLevelField.setAccessible(true);

        // Verify bufDataStart was not changed
        assertEquals(999, bufDataStartField.get(response));
    }

    @ParameterizedTest
    @DisplayName("Test reserved bytes are properly skipped")
    @ValueSource(bytes = { 0x00, 0x01, (byte) 0xFF, 0x7F, (byte) 0x80 })
    void testReservedBytesSkipped(byte reservedValue) throws Exception {
        byte[] buffer = new byte[100];
        int bufferIndex = 0;

    for (Class<?> classToTest : findClassesToTest(loadClassesInPackage(), NULL_TEST_METHOD_NAMES)) {
      if (classToTest.getSimpleName().equals("ReflectionFreeAssertThrows")) {
        /*
         * These classes handle null properly but throw IllegalArgumentException for the default
         * Class argument that this test uses. Normally we'd fix that by declaring a