From 807724d610bafefe3441e5035f5dc00b4962f866 Mon Sep 17 00:00:00 2001
From: ale <ale@incal.net>
Date: Sun, 20 Nov 2022 23:01:44 +0000
Subject: [PATCH] Add Python test with expired token

---
 src/python/test/verifier_test.py | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/python/test/verifier_test.py b/src/python/test/verifier_test.py
index a23f9b6..0309cc8 100644
--- a/src/python/test/verifier_test.py
+++ b/src/python/test/verifier_test.py
@@ -59,6 +59,12 @@ class VerifierTest(unittest.TestCase):
         v = sso.Verifier(self.public, 'service/', 'domain', self.groups)
         self.assertRaises(sso.Error, v.verify, signed)
 
+    def test_verify_fail_expired(self):
+        tkt = sso.Ticket('user', 'service/', 'domain', nonce='nonce', ttl=-1000)
+        signed = self._sign_token(tkt)
+        v = sso.Verifier(self.public, 'service/', 'domain')
+        self.assertRaises(sso.Error, v.verify, signed, 'nonce')
+
 
 class KnownDataVerifierTest(unittest.TestCase):
 
-- 
GitLab