@Test
public void testAuthenticate_clientIdNotAllowed() throws ServiceUnavailableException {

  when(config.getScopeExpression()).thenReturn(AuthScopeExpressions.interpret("scope1"));
  when(config.getClientIds()).thenReturn(ImmutableList.of("clientId2"));
  assertNull(authenticator.authenticate(request));
  assertNotNull(attr.get(Attribute.TOKEN_INFO));
}