Lock developers using Matter.js gain enforcement of PIN schedules and temporary-access deadlines. Its door-lock implementation previously accepted a valid enabled PIN without checking whether its allowed time window had ended, and temporary users never expired after their first successful use.
Ludovic BOUÉ makes scheduled access depend on the host’s local clock and saves a temporary user’s expiry deadline across restarts. An expired PIN is rejected even before the timer marks the account disabled. Ingo Fischer reviewed the correction.
The correction applies to PIN requests sent to the Matter.js implementation. Physical keypad, fingerprint and other local credential checks remain separate.