05/02/2026 updated code for security 2

app/routes/emergency.py

@@ -1,4 +1,4 @@
-from datetime import datetime
+from datetime import datetime, timezone
 
 from flask import Blueprint, request, jsonify, g
 from app import db
@@ -210,7 +210,7 @@ def request_access(ea_id):
         return jsonify({'error': 'Not found or not in ready state'}), 404
 
     ea.status = 'pending'
-    ea.request_initiated_at = datetime.utcnow()
+    ea.request_initiated_at = datetime.now(timezone.utc).replace(tzinfo=None)
 
     AuditLog.log(
         user_id=g.current_user_id,
@@ -271,7 +271,7 @@ def get_emergency_vault(ea_id):
         return jsonify({'error': 'Not found'}), 404
     if not ea.wait_elapsed:
         if ea.request_initiated_at:
-            elapsed_secs = (datetime.utcnow() - ea.request_initiated_at).total_seconds()
+            elapsed_secs = (datetime.now(timezone.utc).replace(tzinfo=None) - ea.request_initiated_at).total_seconds()
             days_left = max(0, ea.wait_days - elapsed_secs / 86400)
         else:
             days_left = ea.wait_days