Authnstatement as an object

[timlegge]

Some SPs look at the datetime of the AuthnStatement - when the original authentication occurred at the Identity Provider.

It is likely that we should also have a AuthnStatement_valid to check whether the date is withing some SP specified timeframe.

[timlegge]

Not sure its complete yet or even if this is the correct approach. @waterkip you may have some suggestions.

[waterkip]

I think we may want to make a Net::SAML2::AuthStatement object that you can query instead of doing it via the assertion. I'm a little bit opposed to the authstatment_foobar calls. It feels we either need to have an object there or we need to call them just foobar.

[timlegge]

I think we may want to make a Net::SAML2::AuthStatement object that you can query instead of doing it via the assertion. I'm a little bit opposed to the authstatment_foobar calls. It feels we either need to have an object there or we need to call them just foobar.

Pretty much just following the nameid changes you did a while ago. I am not really happy with the authnstatement_whatever calls either. Since it is a subsection of the assertion I would be more inclined to populate the assertion with the data.