Fix wrong message

Author: pitbulk

lib/onelogin/ruby-saml/response.rb

@@ -709,15 +709,15 @@ def validate_issuer
       # this time validation is relaxed by the allowed_clock_drift value)
       # If fails, the error is added to the errors array
       # @param soft [Boolean] soft Enable or Disable the soft mode (In order to raise exceptions when the response is invalid or not)
-      # @return [Boolean] True if the SessionNotOnOrAfter of the AttributeStatement is valid, otherwise (when expired) False if soft=True
+      # @return [Boolean] True if the SessionNotOnOrAfter of the AuthnStatement is valid, otherwise (when expired) False if soft=True
       # @raise [ValidationError] if soft == false and validation fails
       #
       def validate_session_expiration(soft = true)
         return true if session_expires_at.nil?
 
         now = Time.now.utc
         unless (session_expires_at + allowed_clock_drift) > now
-          error_msg = "The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response"
+          error_msg = "The attributes have expired, based on the SessionNotOnOrAfter of the AuthnStatement of this Response"
           return append_error(error_msg)
         end
 

test/response_test.rb

@@ -817,7 +817,7 @@ def generate_audience_error(expected, actual)
       it "return false when the session has expired" do
         response.settings = settings
         assert !response.send(:validate_session_expiration)
-        assert_includes response.errors, "The attributes have expired, based on the SessionNotOnOrAfter of the AttributeStatement of this Response"
+        assert_includes response.errors, "The attributes have expired, based on the SessionNotOnOrAfter of the AuthnStatement of this Response"
       end
 
       it "returns true when the session has expired, but is still within the allowed_clock_drift" do

test/settings_test.rb

@@ -102,7 +102,7 @@ class SettingsTest < Minitest::Test
 
       @settings = OneLogin::RubySaml::Settings.new(config)
       assert_equal @settings.security[:metadata_signed], true
-      assert_equal @settings.security[:digest_method], nil
+      assert_nil @settings.security[:digest_method]
     end
 
     describe "#single_logout_service_url" do