When the session expires (because of peer login expiration settings) the client looks like it's connected but it's not

[andresemartinez]

Describe the problem

I'm using Netbird Selfhosted with Google as IDP. I have peer login expiration set to 24hs. When the time comes the session expires and I lose connection and DNS resolution but the client icon is still orange and if I right click it offers to "disconnect". I could reproduce this on Mac and Windows laptops.

To Reproduce

Steps to reproduce the behavior:

1. Have an instance of Netbird Control Plane with Google as IDP
2. Configure Peer login expiration to 1h
3. Connect with a Windows or Mac client using Google SSO
4. Put the laptop in sleep mode (not sure if necessary)
5. Wake the laptop up after 1h
6. Try to access any resource on another peer

Expected behavior

The client icon and menu should show that you are disconected and need to authenticate again. A desktop notification like the one the OpenVPN client has would be awesome.

Are you using NetBird Cloud?

I'm using Selfhosted Control Plane with Google as IDP

NetBird version

Control Plane: 0.27.9
Clients for Mac and Windows: 0.27.9 and 0.27.10

[nazarewk]

@andresemartinez can you confirm whether it is still the case on the latest NetBird versions?

[andresemartinez]

Hey! I haven't used NetBird in a while due to a different issue. I'm going to update everything now and will report back once I've tested it.

[janosmiko]

@nazarewk I can confirm - I'm on macOS - (and one of my colleagues - on Windows - reported this) when the session expired we did not get logged out or prompted to login again. After a manual disconnect and reconnect everything works again.
I raised the
We are on a self-hosted instance using Azure OIDC.

[Volemon]

I can confirm that this issue still persists on Linux systems on the latest versions.
On some clients, the NetBird connection stops working while the client still shows as "connected". In the NetBird management center, we don't see a "Login of the peer name is expired" message either. The only way to restore connectivity is to disconnect and reconnect (with re-authentication).

[TechHutTV]

Session-expiration UX was fixed in PR #3955. The client now shows a login popup and updates the tray status when the peer login expires. Closing as fixed; please reopen with logs and your IdP details if you still see a stale "connected" state on the latest release.