WS-Fed: Check date conditions.

git-svn-id: https://simplesamlphp.googlecode.com/svn/trunk@649 44740490-163a-0410-bde0-09ae8108e29a

www/wsfed/sp/prp.php

@@ -95,6 +95,15 @@ try {
 			$idpEntityId . '\'.');
 	}
 
+	/* Check time constraints of contitions (if present). */
+	foreach($xpath->query('./saml:Conditions', $assertion) as $condition) {
+		$notBefore = $condition->getAttribute('NotBefore');
+		$notOnOrAfter = $condition->getAttribute('NotOnOrAfter');
+		if(!SimpleSAML_Utilities::checkDateConditions($notBefore, $notOnOrAfter)) {
+			throw new Exception('The response has expired.');
+		}
+	}
+
 
 	/* Extract the name identifier from the response. */
 	$nameid = $xpath->query('./saml:AuthenticationStatement/saml:Subject/saml:NameIdentifier', $assertion);