for testing and deploying your application
for finding and fixing issues
for empowering human code reviews
<?php
declare(strict_types=1);
namespace SimpleSAML\SAML2\Assertion\Validation\ConstraintValidator;
use Beste\Clock;
use DateInterval;
use SimpleSAML\SAML2\XML\saml\Assertion;
use SimpleSAML\SAML2\Assertion\Validation\AssertionConstraintValidator;
use SimpleSAML\SAML2\Assertion\Validation\Result;
use SimpleSAML\SAML2\Utils;
class NotBefore implements AssertionConstraintValidator
{
/** @var \Beste\Clock */
private static Clock $clock;
/**
*/
public function __construct()
self::$clock = Utils::getContainer()->getClock();
}
* @param \SimpleSAML\SAML2\XML\saml\Assertion $assertion
* @param \SimpleSAML\SAML2\Assertion\Validation\Result $result
public function validate(Assertion $assertion, Result $result): void
$conditions = $assertion->getConditions();
if ($conditions !== null) {
$notBeforeTimestamp = $conditions->getNotBefore();
$currentTime = self::$clock->now();
if (($notBeforeTimestamp !== null) && ($notBeforeTimestamp > ($currentTime->add(new DateInterval('PT60S'))))) {
$result->addError(
'Received an assertion that is valid in the future. Check clock synchronization on IdP and SP.',
);
simplesamlphp /
saml2
