From 0d04e0dbaf42305a15657f968cdc90e2d2776b6f Mon Sep 17 00:00:00 2001
From: Mart Aarma <mart.aarma@nortal.com>
Date: Thu, 16 Jul 2026 09:37:54 +0300
Subject: [PATCH] Update mock dates in example app tests

The test user certificate expired on 2026-07-09, which made auth token
validation fail with CertificateExpiredException. Mock the validation
clock to a date within the certificate validity period, like commit
8ab06e0 did for the library tests.
---
 .../eu/webeid/example/WebApplicationTest.java    |  1 +
 .../java/eu/webeid/example/testutil/Dates.java   | 16 ++++++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/example/src/test/java/eu/webeid/example/WebApplicationTest.java b/example/src/test/java/eu/webeid/example/WebApplicationTest.java
index f7f5a3de..fa8197e9 100644
--- a/example/src/test/java/eu/webeid/example/WebApplicationTest.java
+++ b/example/src/test/java/eu/webeid/example/WebApplicationTest.java
@@ -103,6 +103,7 @@ public void validateOcspResponse(XadesSignature xadesSignature) {
         session.setAttribute("challenge-nonce", new ChallengeNonce(ObjectMother.VALID_CHALLENGE_NONCE, DateAndTime.utcNow().plusMinutes(1)));
 
         Dates.setMockedSignatureDate(Dates.getSigningDateTime());
+        Dates.setMockedAuthTokenValidationDate(Dates.getAuthTokenValidationDateTime());
 
         // Act and assert
         mvcBuilder.build().perform(get("/auth/challenge"));
diff --git a/example/src/test/java/eu/webeid/example/testutil/Dates.java b/example/src/test/java/eu/webeid/example/testutil/Dates.java
index 3f5f76ae..02f7b1f4 100644
--- a/example/src/test/java/eu/webeid/example/testutil/Dates.java
+++ b/example/src/test/java/eu/webeid/example/testutil/Dates.java
@@ -23,6 +23,7 @@
 package eu.webeid.example.testutil;
 
 import eu.europa.esig.dss.model.BLevelParameters;
+import eu.webeid.security.util.DateAndTime;
 import mockit.Mock;
 import mockit.MockUp;
 
@@ -37,6 +38,12 @@ public static ZonedDateTime getSigningDateTime() {
                 ZoneId.of("Europe/Tallinn"));
     }
 
+    public static ZonedDateTime getAuthTokenValidationDateTime() {
+        // Ensure that the certificates do not expire.
+        return ZonedDateTime.of(2021, 7, 23, 0, 0, 0, 0,
+                ZoneId.of("UTC"));
+    }
+
     public static void setMockedSignatureDate(ZonedDateTime mockedDateTime) {
         new MockUp<BLevelParameters>() {
             @Mock
@@ -45,4 +52,13 @@ public Date getSigningDate() {
             }
         };
     }
+
+    public static void setMockedAuthTokenValidationDate(ZonedDateTime mockedDateTime) {
+        new MockUp<DateAndTime.DefaultClock>() {
+            @Mock
+            public Date now() {
+                return Date.from(mockedDateTime.toInstant());
+            }
+        };
+    }
 }