fix: removed exceedent ACR check + unit test

setup.py

@@ -10,7 +10,7 @@ def readme():
 
 setup(
     name='spid_sp_test',
-    version='0.6.6-1',
+    version='0.6.7',
     description="SAML2 SPID Service Provider validation tool that can be run from the command line",
     long_description=readme(),
     long_description_content_type='text/markdown',

src/spid_sp_test/authn_request.py

@@ -378,13 +378,7 @@ def test_AuthnRequest_SPID(self):
                     description = acr_desc
                 )
                 value = req.get('ForceAuthn')
-                if not value:
-                    self._assertTrue(
-                        value,
-                        'The ForceAuthn attribute MUST be present if ACR > L1',
-                        **error_kwargs
-                    )
-                else:
+                if value:
                     self._assertTrue(
                         (value.lower() in constants.BOOLEAN_TRUE),
                         'The ForceAuthn attribute MUST be true or 1 - TR pag. 8 ',

tests/test_02_authn.py

@@ -5,9 +5,9 @@
 CMD = BASE_CMD + " --extra --metadata-url file://tests/metadata/{} --authn-url file://tests/authn/{}"
 
 
-def run_cmd(mfname, metadata = BASE_METADATA) -> int:
+def run_cmd(mfname, metadata = BASE_METADATA, profile="spid-sp-public") -> int:
     cmd = CMD.format(metadata, mfname)
-    return os.system(cmd)
+    return os.system(f'{cmd} --profile {profile}')
 
 
 def test_django_post_html():
@@ -36,3 +36,10 @@ def test_spid_express_no_relaystate():
 def test_django_post_wrong_signature():
     es = run_cmd('spid_django_wrong_signature.xml')
     assert es != 0
+
+def test_L2():
+    """Must fail"""
+    es = run_cmd("tests/authn/spid_express_forceauthn_spid_level_2.url",
+                 metadata = "spid_express_forceauthn_spid_level_2_metadata.xml",
+                 profile="spid-sp-private")
+    assert es != 0