Replace usage of deprecated datetime.utcnow() with datetime.now(UTC) (#360)

* Replace usage of deprecated datetime.utcnow() with datetime.now(UTC)

* fix: reorder imports for consistency in jwt.py and test_jwt.py

* fix: correct usage of datetime.now(UTC) in JWT validation functions

* fix: update datetime usage for compatibility with Python versions

Refactor datetime imports and usage to ensure compatibility with Python 3.12 and 3.13. Replace deprecated datetime.utcnow() with datetime.now(UTC) and handle ImportError for older versions.

* fix: update datetime usage for compatibility with Python 3.12 and 3.13

- Replace deprecated datetime.utcnow() with datetime.now(UTC) for better compatibility.
- Adjusted import statements and usage in jwt.py and test_jwt.py for consistency.

Author: iamdhakrey

jose/jwt.py

@@ -5,7 +5,16 @@
     from collections.abc import Mapping
 except ImportError:
     from collections import Mapping
-from datetime import datetime, timedelta
+
+try:
+    from datetime import UTC, datetime, timedelta
+
+    utc_now = datetime.now(UTC)  # Preferred in Python 3.13+
+except ImportError:
+    from datetime import datetime, timedelta, timezone
+
+    utc_now = datetime.now(timezone.utc)  # Preferred in Python 3.12 and below
+    UTC = timezone.utc
 
 from jose import jws
 
@@ -281,7 +290,7 @@ def _validate_nbf(claims, leeway=0):
     except ValueError:
         raise JWTClaimsError("Not Before claim (nbf) must be an integer.")
 
-    now = timegm(datetime.utcnow().utctimetuple())
+    now = timegm(datetime.now(UTC).utctimetuple())
 
     if nbf > (now + leeway):
         raise JWTClaimsError("The token is not yet valid (nbf)")
@@ -311,7 +320,7 @@ def _validate_exp(claims, leeway=0):
     except ValueError:
         raise JWTClaimsError("Expiration Time claim (exp) must be an integer.")
 
-    now = timegm(datetime.utcnow().utctimetuple())
+    now = timegm(datetime.now(UTC).utctimetuple())
 
     if exp < (now - leeway):
         raise ExpiredSignatureError("Signature has expired.")
@@ -385,7 +394,7 @@ def _validate_sub(claims, subject=None):
     "sub" value is a case-sensitive string containing a StringOrURI
     value.  Use of this claim is OPTIONAL.
 
-    Args:
+    Arg
         claims (dict): The claims dictionary to validate.
         subject (str): The subject of the token.
     """

tests/test_jwt.py

@@ -1,6 +1,16 @@
 import base64
 import json
-from datetime import datetime, timedelta
+
+try:
+    from datetime import UTC, datetime, timedelta
+
+    utc_now = datetime.now(UTC)  # Preferred in Python 3.13+
+except ImportError:
+    from datetime import datetime, timedelta, timezone
+
+    utc_now = datetime.now(timezone.utc)  # Preferred in Python 3.12 and below
+    UTC = timezone.utc
+
 
 import pytest
 
@@ -180,7 +190,7 @@ def test_leeway_is_int(self):
         pass
 
     def test_leeway_is_timedelta(self, claims, key):
-        nbf = datetime.utcnow() + timedelta(seconds=5)
+        nbf = datetime.now(UTC) + timedelta(seconds=5)
         leeway = timedelta(seconds=10)
 
         claims = {
@@ -209,15 +219,15 @@ def test_nbf_not_int(self, key):
             jwt.decode(token, key)
 
     def test_nbf_datetime(self, key):
-        nbf = datetime.utcnow() - timedelta(seconds=5)
+        nbf = datetime.now(UTC) - timedelta(seconds=5)
 
         claims = {"nbf": nbf}
 
         token = jwt.encode(claims, key)
         jwt.decode(token, key)
 
     def test_nbf_with_leeway(self, key):
-        nbf = datetime.utcnow() + timedelta(seconds=5)
+        nbf = datetime.now(UTC) + timedelta(seconds=5)
 
         claims = {
             "nbf": nbf,
@@ -229,7 +239,7 @@ def test_nbf_with_leeway(self, key):
         jwt.decode(token, key, options=options)
 
     def test_nbf_in_future(self, key):
-        nbf = datetime.utcnow() + timedelta(seconds=5)
+        nbf = datetime.now(UTC) + timedelta(seconds=5)
 
         claims = {"nbf": nbf}
 
@@ -239,7 +249,7 @@ def test_nbf_in_future(self, key):
             jwt.decode(token, key)
 
     def test_nbf_skip(self, key):
-        nbf = datetime.utcnow() + timedelta(seconds=5)
+        nbf = datetime.now(UTC) + timedelta(seconds=5)
 
         claims = {"nbf": nbf}
 
@@ -261,15 +271,15 @@ def test_exp_not_int(self, key):
             jwt.decode(token, key)
 
     def test_exp_datetime(self, key):
-        exp = datetime.utcnow() + timedelta(seconds=5)
+        exp = datetime.now(UTC) + timedelta(seconds=5)
 
         claims = {"exp": exp}
 
         token = jwt.encode(claims, key)
         jwt.decode(token, key)
 
     def test_exp_with_leeway(self, key):
-        exp = datetime.utcnow() - timedelta(seconds=5)
+        exp = datetime.now(UTC) - timedelta(seconds=5)
 
         claims = {
             "exp": exp,
@@ -281,7 +291,7 @@ def test_exp_with_leeway(self, key):
         jwt.decode(token, key, options=options)
 
     def test_exp_in_past(self, key):
-        exp = datetime.utcnow() - timedelta(seconds=5)
+        exp = datetime.now(UTC) - timedelta(seconds=5)
 
         claims = {"exp": exp}
 
@@ -291,7 +301,7 @@ def test_exp_in_past(self, key):
             jwt.decode(token, key)
 
     def test_exp_skip(self, key):
-        exp = datetime.utcnow() - timedelta(seconds=5)
+        exp = datetime.now(UTC) - timedelta(seconds=5)
 
         claims = {"exp": exp}
 
@@ -504,8 +514,8 @@ def test_unverified_claims_object(self, claims, key):
         [
             ("aud", "aud"),
             ("ait", "ait"),
-            ("exp", datetime.utcnow() + timedelta(seconds=3600)),
-            ("nbf", datetime.utcnow() - timedelta(seconds=5)),
+            ("exp", utc_now + timedelta(seconds=3600)),
+            ("nbf", utc_now - timedelta(seconds=5)),
             ("iss", "iss"),
             ("sub", "sub"),
             ("jti", "jti"),