def test_no_not_before(self):
        a = SAMLAuthenticator()

        tampered_etree = etree.fromstring(
            test_constants.tampered_assertion_no_not_before)

        assert not a._verify_physical_constraints(tampered_etree)
        assert not a._verify_saml_response_fields(self.metadata_etree,
                                                  tampered_etree)
    def test_now_after_allowed(self, mock_datetime):
        mock_datetime.now.return_value = datetime(2020,
                                                  4,
                                                  9,
                                                  21,
                                                  35,
                                                  0,
                                                  tzinfo=timezone.utc)
        mock_datetime.strptime = datetime.strptime

        a = SAMLAuthenticator()

        assert not a._verify_physical_constraints(self.verified_signed_xml)
        assert not a._verify_saml_response_fields(self.metadata_etree,
                                                  self.verified_signed_xml)

        response_is_valid, signed_xml = a._test_valid_saml_response(
            self.metadata_etree, self.response_etree)
        assert not response_is_valid
        assert etree.tostring(
            self.verified_signed_xml) == etree.tostring(signed_xml)