@Test
    void checkRejectedAttributesNotAvailable() throws Throwable {
        val authz = new DefaultRegisteredServiceAccessStrategy();
        val reqs = getRequiredAttributes();
        authz.setRequiredAttributes(reqs);
        val rejectedAttributes = getRejectedAttributes();
        authz.setRejectedAttributes(rejectedAttributes);

        val pAttrs = getPrincipalAttributes();
        assertTrue(authz.authorizeRequest(RegisteredServiceAccessStrategyRequest.builder().applicationContext(applicationContext)
            .principalId(TEST).attributes(pAttrs).build()));
    }
It is important that the non-matching attribute is not the first one, due to the
use of anyMatch and allMatch in the access strategy.
core/cas-server-core-services/src/test/java/org/apereo/cas/services/DefaultRegisteredServiceAccessStrategyTests.java