Add Python test with expired token

src/python/test/verifier_test.py

@@ -59,6 +59,12 @@ class VerifierTest(unittest.TestCase):
         v = sso.Verifier(self.public, 'service/', 'domain', self.groups)
         self.assertRaises(sso.Error, v.verify, signed)
 
+    def test_verify_fail_expired(self):
+        tkt = sso.Ticket('user', 'service/', 'domain', nonce='nonce', ttl=-1000)
+        signed = self._sign_token(tkt)
+        v = sso.Verifier(self.public, 'service/', 'domain')
+        self.assertRaises(sso.Error, v.verify, signed, 'nonce')
+
 
 class KnownDataVerifierTest(unittest.TestCase):