use TimeWithZone instead of just Time

Author: syoder

app/controllers/kracken/sessions_controller.rb

@@ -11,7 +11,7 @@ def create
       current_user = @user
       session[:user_id] = @user.id
       session[:user_cache_key] = cookies[:_radius_user_cache_key]
-      session[:token_expires_at] = Time.at(auth_hash[:credentials][:expires_at])
+      session[:token_expires_at] = Time.zone.at(auth_hash[:credentials][:expires_at])
       redirect_to return_to_path
     end
 

lib/kracken/controllers/authenticatable.rb

@@ -45,7 +45,7 @@ def authenticate_user!
       end
 
       def check_token_expiry!
-        if session[:token_expires_at].nil? || session[:token_expires_at] < Time.now
+        if session[:token_expires_at].nil? || session[:token_expires_at] < Time.zone.now
           session.delete :user_id
         end
       end

spec/kracken/controllers/authenticatable_spec.rb

@@ -95,15 +95,15 @@ class ControllerDouble < BaseControllerDouble
         it "redirects to sign-in when token has expired" do
           allow(controller).to receive(:request).and_return(double(format: nil, fullpath: nil))
           allow(controller).to receive(:redirect_to)
-          controller.session[:token_expires_at] = 5.minutes.ago
+          controller.session[:token_expires_at] = Time.zone.now - 5.minutes
           controller.authenticate_user!
           expect(controller).to have_received(:redirect_to)
         end
 
         it "authenticates user when token has not expired" do
           allow(controller).to receive(:request).and_return(double(format: nil, fullpath: nil))
           allow(controller).to receive(:redirect_to)
-          controller.session[:token_expires_at] = Time.now + 5.minutes
+          controller.session[:token_expires_at] = Time.zone.now + 5.minutes
           controller.authenticate_user!
           expect(controller).to_not have_received(:redirect_to)
         end

spec/requests/authentication_spec.rb

@@ -31,7 +31,7 @@ def headers_with_token(token)
     it "sets :token_expires_at in the session" do
       OmniAuth.config.mock_auth[:radius] = OmniAuth::AuthHash.new(auth_hash)
       get "/auth/radius/callback"
-      expect(request.session[:token_expires_at]).to eq(Time.at(token_expiry))
+      expect(request.session[:token_expires_at]).to eq(Time.zone.at(token_expiry))
     end
   end
 end