05/02/2026 updated code for security 2

app/models/emergency_access.py

@@ -1,4 +1,4 @@
-from datetime import datetime, timedelta
+from datetime import datetime, timezone, timedelta
 
 from sqlalchemy.dialects.mysql import INTEGER
 
@@ -39,14 +39,14 @@ class EmergencyAccess(db.Model):
     request_initiated_at = db.Column(db.DateTime, nullable=True)
     # JSON string: [{ id, name, item_type, enc_data, iv }, ...]
     enc_vault = db.Column(db.Text, nullable=True)
-    created_at = db.Column(db.DateTime, default=datetime.utcnow, nullable=False)
+    created_at = db.Column(db.DateTime, default=lambda: datetime.now(timezone.utc).replace(tzinfo=None), nullable=False)
 
     @property
     def wait_elapsed(self):
         """True if the wait period has passed since the access request."""
         if self.status != 'pending' or not self.request_initiated_at:
             return False
-        return datetime.utcnow() >= self.request_initiated_at + timedelta(days=self.wait_days)
+        return datetime.now(timezone.utc).replace(tzinfo=None) >= self.request_initiated_at + timedelta(days=self.wait_days)
 
     def to_dict(self, grantor_email=None):
         return {