Add some verifier tests with nonces

src/python/test/verifier_test.py

@@ -33,6 +33,20 @@ class VerifierTest(unittest.TestCase):
         tkt2 = v.verify(signed)
         self.assertEquals(tkt, tkt2)
 
+    def test_verify_ok_with_nonce(self):
+        tkt = sso.Ticket('user', 'service/', 'domain', nonce='nonce')
+        signed = self._sign_token(tkt)
+        v = sso.Verifier(self.public, 'service/', 'domain')
+        tkt2 = v.verify(signed, 'nonce')
+        self.assertEquals(tkt, tkt2)
+        self.assertEquals('user', tkt2.user())
+
+    def test_verify_fail_with_bad_nonce(self):
+        tkt = sso.Ticket('user', 'service/', 'domain', nonce='nonce')
+        signed = self._sign_token(tkt)
+        v = sso.Verifier(self.public, 'service/', 'domain')
+        self.assertRaises(sso.Error, v.verify, signed, 'bad_nonce')
+
     def test_verify_fail_too_short(self):
         signed = base64.b64encode('some data')
         v = sso.Verifier(self.public, 'service/', 'domain', self.groups)