From aa9b48c86af44810c7a79bce481378a051be0273 Mon Sep 17 00:00:00 2001
From: Dylan Bridgman <light@ether.org.za>
Date: Fri, 11 Jul 2025 16:15:58 +0200
Subject: [PATCH] Use `Date` facade instead of `time()` for
 `password_confirmed_at` check

---
 src/Illuminate/Auth/Middleware/RequirePassword.php | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/Illuminate/Auth/Middleware/RequirePassword.php b/src/Illuminate/Auth/Middleware/RequirePassword.php
index 8ac6f8af66d4..06fa9698efb1 100644
--- a/src/Illuminate/Auth/Middleware/RequirePassword.php
+++ b/src/Illuminate/Auth/Middleware/RequirePassword.php
@@ -5,6 +5,7 @@
 use Closure;
 use Illuminate\Contracts\Routing\ResponseFactory;
 use Illuminate\Contracts\Routing\UrlGenerator;
+use Illuminate\Support\Facades\Date;
 
 class RequirePassword
 {
@@ -92,7 +93,7 @@ public function handle($request, Closure $next, $redirectToRoute = null, $passwo
      */
     protected function shouldConfirmPassword($request, $passwordTimeoutSeconds = null)
     {
-        $confirmedAt = time() - $request->session()->get('auth.password_confirmed_at', 0);
+        $confirmedAt = Date::now()->unix() - $request->session()->get('auth.password_confirmed_at', 0);
 
         return $confirmedAt > ($passwordTimeoutSeconds ?? $this->passwordTimeout);
     }