CZ-NIC / django-eidas-specific-node

GNU General Public License v3.0
2 stars 2 forks source link

Compare light token timestamp correctly #92

Closed jiri-janousek closed 4 years ago

jiri-janousek commented 4 years ago

We compare light token timestamps in local time with timestamps in UTC, which is definitely not correct.

eIDAS-Node National IdP and SP Integration Guide doesn't specify whether the timestamp is in the local timezone or UTC, but the embedded Python example uses datetime.now(), which returns local time. We need to verify that eIDAS Generic Node uses local time too.

Internally, we should use timezone-aware timestamps everywhere and convert to bare timestamps converted to the correct timezone as needed.

Related CZ.NIC ticket