Make generation fail if apple wallet certificate is expired

Author: jontyms

app/util/apple_wallet.py

@@ -171,7 +171,17 @@ def generate_pass(self, user_data: Dict[str, Any]) -> bytes:
 
             try:
                 # Generate the pass using passes_rs_py with all assets
-                generate_pass(config_json, self.cert_path, self.key_path, output_path, self.icon_path, self.icon2x_path, self.logo_path, self.logo2x_path)
+                generate_pass(
+                    config=config_json,
+                    cert_path=self.cert_path,
+                    key_path=self.key_path,
+                    output_path=output_path,
+                    icon_path=self.icon_path,
+                    icon2x_path=self.icon2x_path,
+                    logo_path=self.logo_path,
+                    logo2x_path=self.logo2x_path
+                    #ignore_expired=True  # Add this if you want to ignore expired certificates
+                )
 
                 # Read the generated pass file
                 with open(output_path, "rb") as f:

pyproject.toml

@@ -13,7 +13,7 @@ dependencies = [
     "google-auth~=2.40.3",
     "jinja2==3.1.6",
     "joserfc==1.4.1",
-    "passes-rs-py==3.0.1",
+    "passes-rs-py==4.0.1",
     "pydantic~=2.11.7",
     "pydantic-settings~=2.10.1",
     "python-keycloak~=5.8.1",