100% test coverage

[shay-te]

🐛 Hypothesis found 2 real bugs

1. Production bug fixed: JWTTokenHandler.encode used datetime.utcnow().timestamp() — utcnow() is a naive datetime, but .timestamp() interprets naive datetimes as local time. On any non-UTC system, this produces an epoch offset by the local TZ delta, and PyJWT 2.0+ rejects all such tokens as expired immediately.

Fixed core_lib/session/jwt_token_handler.py:21 to use datetime.now(tz=timezone.utc). Also updated tests/test_user_security.py:119 which relied on the same buggy assumption.

2. Production quirk documented: RuleValidator skips int→str coercion when the value is 0 (because if value and ... short-circuits on falsy). Surfaced by hypothesis trying value=0. Test now explicitly documents the behavior.

Cache decorator quirk surfaced
If a cache key template contains { from repr()-ed values, UnseenFormatter.format raises ValueError: expected '}' before end of string. Test reworked to use a clean digits-only key template.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud