Skip to content

fix: read suspension timestamps in UTC - #893

Closed
RajvardhanPatil07 wants to merge 1 commit into
OWASP:devfrom
RajvardhanPatil07:fix/jdbc-utc-timestamps
Closed

RajvardhanPatil07 wants to merge 1 commit into
OWASP:devfrom
RajvardhanPatil07:fix/jdbc-utc-timestamps

Conversation

@RajvardhanPatil07

Copy link
Copy Markdown

Fixes #841.

Summary

  • read users.suspendedUntil via JDBC with a UTC Calendar so DB UTC DATETIME values are not shifted by the JVM default timezone
  • remove the forced UTC Maven test workaround now that the production reads are timezone-explicit
  • add unit coverage for the UTC calendar helper and non-UTC integration coverage for suspended password and SSO authentication

Testing

  • git diff --cached --check
  • python3 - <<PY ... ET.parse("pom.xml") ... PY
  • Not run locally: Maven/Spotless/integration tests, because this machine has no mvn, no Java runtime, and no Docker available.

@RajvardhanPatil07
RajvardhanPatil07 marked this pull request as ready for review June 12, 2026 10:32
@SeanDuggan SeanDuggan self-assigned this Jun 19, 2026
@SeanDuggan

Copy link
Copy Markdown
Member

Closing this as it looks like it's already tracked in #843

@SeanDuggan SeanDuggan closed this Jun 19, 2026
@ismisepaul ismisepaul moved this from Backlog to Done in Security Shepherd Oct 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

Timezone bug: suspended user can authenticate on non-UTC JVM deployments

3 participants