anchor.diff:  
   @Bean
   public RelyingPartyRegistrationRepository relyingPartyRegistrations() {
  -	RelyingPartyRegistration registration = RelyingPartyRegistrations
  +    RelyingPartyRegistration registration = RelyingPartyRegistrations
               .fromMetadataLocation(assertingPartyMetadataLocation)
               .registrationId("example")
               .build();
  
positive.code:     OneTimeUse oneTimeUse = assertion.getConditions().getOneTimeUse();
      ValidationContext context = new ValidationContext();
      try {
      	if (validator.validate(oneTimeUse, assertion, context) == ValidationResult.VALID) {
      		return result;
      	}
      } catch (Exception e) {
      	return result.concat(new Saml2Error(INVALID_ASSERTION, e.getMessage()));
      }
      return result.concat(new Saml2Error(INVALID_ASSERTION, context.getValidationFailureMessage()));
  });
  
negative.code: ----
  Resource resource = new ClassPathResource("ap.crt");
  try (InputStream is = resource.getInputStream()) {
      X509Certificate certificate = (X509Certificate)
              CertificateFactory.getInstance("X.509").generateCertificate(is);
      return Saml2X509Credential.verification(certificate);
  }
  ----
  
  