make sure error messages for two different expiration cases are unique

node-saml · Mar 26, 2021 · f0a7f84 · f0a7f84
1 parent 352e059
commit f0a7f84
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/passport-saml/saml.ts b/src/passport-saml/saml.ts
@@ -1260,11 +1260,11 @@ class SAML {
     if (notOnOrAfter) {
       const notOnOrAfterMs = Date.parse(notOnOrAfter);
       if (nowMs - this.options.acceptedClockSkewMs >= notOnOrAfterMs)
-        return new Error("SAML assertion expired");
+        return new Error("SAML assertion expired: clocks skewed too much");
     }
     if (maxTimeLimitMs) {
       if (nowMs - this.options.acceptedClockSkewMs >= maxTimeLimitMs)
-        return new Error("SAML assertion expired");
+        return new Error("SAML assertion expired: assertion too old");
     }
 
     return null;