/**
     * Generate the access token.
     * @return The access token.
     */
    public String generateAccessToken() {
        return RandomStringUtils.random(ComponentUtil.getFessConfig().getApiAccessTokenLengthAsInteger(), 0, 0, true, true, null, random);
    }

    /**
     * Get the access token from the request.
     * @param request The request.
     * @return The access token.
     */

    /**
     * Constructs KerberosPacAuthData from token bytes.
     *
     * @param token the PAC token bytes
     * @param keys map of Kerberos keys indexed by key type
     * @throws PACDecodingException if PAC decoding fails
     */
    public KerberosPacAuthData(byte[] token, Map<Integer, KerberosKey> keys) throws PACDecodingException {
        this.pac = new Pac(token, keys);
    }

    /**
     * Returns the PAC object.

 * governing permissions and limitations under the License.
 */
package org.codelibs.fess.exception;

/**
 * Exception thrown when an invalid access token is encountered.
 * This exception is typically used in authentication and authorization contexts
 * where a provided access token is invalid, expired, or malformed.
 */
public class InvalidAccessTokenException extends FessSystemException {

    /** Serial version UID for serialization */

 */
class KerberosTokenTest {

    /**
     * Test constructor with an empty token.
     */
    @Test
    void testConstructorWithEmptyToken() {
        byte[] emptyToken = new byte[0];
        assertThrows(PACDecodingException.class, () -> new KerberosToken(emptyToken));
    }

    /**
     * Test constructor with a malformed token (not ASN.1).
     */
    @Test
    void testConstructorWithMalformedToken() {

        // Given
        Configuration mockConfig = mock(Configuration.class);

        // When
        Smb2TreeDisconnectRequest req = new Smb2TreeDisconnectRequest(mockConfig);

        // Then - verify command is set correctly using reflection
        Field commandField = ServerMessageBlock2.class.getDeclaredField("command");
        commandField.setAccessible(true);
        int command = (int) commandField.get(req);

        int expectedLength = 100;

        when(messageBlock.decode(buffer, bufferIndex)).thenReturn(expectedLength);

        // When
        int actualLength = messageBlock.decode(buffer, bufferIndex);

        // Then
        assertEquals(expectedLength, actualLength);
        verify(messageBlock).decode(buffer, bufferIndex);
    }

    @Test
    @DisplayName("Test decode method throws SMBProtocolDecodingException")

    @Nested
    @DisplayName("Protocol Information Tests")
    class ProtocolInfoTests {

        @Test
        @DisplayName("Should return correct syntax string")
        void testGetSyntax() {
            // When/Then: Verify the protocol syntax identifier
            assertEquals("12345778-1234-abcd-ef00-0123456789ac:1.0", samr.getSyntax());
        }
    }

    @Nested
    @DisplayName("Constants Tests")
    class ConstantsTests {

        // When/Then
        assertEquals((int) 0x80000005L, infoStatus);
        // Should be an informational/warning status (0x8 prefix)
        assertTrue((infoStatus & (int) 0x80000000L) == (int) 0x80000000L);
    }

    @Test
    @DisplayName("Should handle pending status")
    void testPendingStatus() {
        // Given
        int pendingStatus = NtStatus.NT_STATUS_PENDING;

        // When/Then

        // Then
        assertEquals(128, credits);
    }

    @Test
    @DisplayName("Should return dialect revision")
    void testGetDialectRevision() throws Exception {
        // Given
        setPrivateField(response, "dialectRevision", 0x0311);

        // When
        int dialect = response.getDialectRevision();

        // Then
        assertEquals(0x0311, dialect);
    }

        // Then
        assertNotNull(resp);
        assertTrue(resp instanceof ServerMessageBlock2Response);
        assertTrue(resp instanceof ServerMessageBlock2);
    }

    @Test
    @DisplayName("Should return correct OVERHEAD constant value")
    void testOverheadConstant() {
        // Then