Skip to content

fix: read suspension timestamps in UTC#893

Open
RajvardhanPatil07 wants to merge 1 commit into
OWASP:devfrom
RajvardhanPatil07:fix/jdbc-utc-timestamps
Open

fix: read suspension timestamps in UTC#893
RajvardhanPatil07 wants to merge 1 commit into
OWASP:devfrom
RajvardhanPatil07:fix/jdbc-utc-timestamps

Conversation

@RajvardhanPatil07

Copy link
Copy Markdown

Fixes #841.

Summary

  • read users.suspendedUntil via JDBC with a UTC Calendar so DB UTC DATETIME values are not shifted by the JVM default timezone
  • remove the forced UTC Maven test workaround now that the production reads are timezone-explicit
  • add unit coverage for the UTC calendar helper and non-UTC integration coverage for suspended password and SSO authentication

Testing

  • git diff --cached --check
  • python3 - <<PY ... ET.parse("pom.xml") ... PY
  • Not run locally: Maven/Spotless/integration tests, because this machine has no mvn, no Java runtime, and no Docker available.

@RajvardhanPatil07 RajvardhanPatil07 marked this pull request as ready for review June 12, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Backlog

Development

Successfully merging this pull request may close these issues.

Timezone bug: suspended user can authenticate on non-UTC JVM deployments

1 participant