SVI/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-07-01 11:42:00 -04:00
Code Issues 3.0k Packages Projects Releases 10 Wiki Activity

JWT Token expired #2064

New Issue
Closed
opened 2025-11-20 06:12:09 -05:00 by saavagebueno · 2 comments
saavagebueno commented 2025-11-20 06:12:09 -05:00
Owner
Copy Link

Originally created by @Coler-e on GitHub (Jul 12, 2025).

Describe the problem

I am unable to log in on the Windows client intermitently, logs on the management server point to an expired JWT.

To Reproduce

Really have no Idea how this can be replicated other than running a windows client on a Self-Hosted netbird setup (with Entra IDP) and it should eventually happen?

Expected behavior

This should not happen and SSO login should always start the VPN correctly

Are you using NetBird Cloud?

Netbird self-hosted

NetBird version

client was version 0.50.1, upgraded to 0.50.2 while tinkering to try and make things work.

Is any other VPN software installed?

None! I have moved away from Twingate and just have the relays on my infra as a backup in case of Netbird failure but no client deployed.

To help us resolve the problem, please attach the following anonymized status output

netbird status -dA

Peers detail:
 dm3qxeea.anon-2EhSJ.domain:
  NetBird IP: 100.86.45.187/32
  Public key: IatWq6oG1JPKbUwH4AhMUj4fvOjR2znnJHVDy68pRQA=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-1.anon-2EhSJ.domain:
  NetBird IP: 100.86.25.68/32
  Public key: eg10b6g7Fyt0vK8jOnAALZWVdAJxeP/Wo6CzMqJQRmU=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-2.anon-2EhSJ.domain:
  NetBird IP: 100.86.17.193/32
  Public key: VdwYASpdNJ/IVsSxLdwtKN2XJmjYTehtnevlpmj8ZSk=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-3.anon-2EhSJ.domain:
  NetBird IP: 100.86.252.44/32
  Public key: 2D6Pvz6C6LnOlfUXLUJovB3xdEM+R9NB1w06Yj0kIn0=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-122-80.anon-2EhSJ.domain:
  NetBird IP: 100.86.122.80/32
  Public key: oh1CTYGWSEnrBEtqPZo7WN0x6jco/FWZa/43xOPScSA=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-125-10.anon-2EhSJ.domain:
  NetBird IP: 100.86.125.10/32
  Public key: EP5cfsKR53kSdryaK/7pYtECht8qpFOPYlg8jof/Cl8=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 dm3qxeea-53-96.anon-2EhSJ.domain:
  NetBird IP: 100.86.53.96/32
  Public key: gwPyhA7Qi59TihEiiBYxeO8tOl7mqq3pxky0TjZ7LGQ=
  Status: Idle
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 netbird-1.anon-2EhSJ.domain:
  NetBird IP: 100.86.14.27
  Public key: ZGhzW9Dg8VDJ2QPvt7WAtBUIkkS+5SeFle2jKui0lTI=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 for-m341.anon-2EhSJ.domain:
  NetBird IP: 100.86.23.200
  Public key: t9GqitXwGJoQwzbulMdQzhSrhWrAOiINAimVJD8qzQ0=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 localhost.anon-2EhSJ.domain:
  NetBird IP: 100.86.58.221
  Public key: YqsOJyjiuEXcYa2mTlRLmJIVTxr/Nzi8MX40oyPiBgQ=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 netbird.anon-2EhSJ.domain:
  NetBird IP: 100.86.174.229
  Public key: 2LhojfnNBv2cAge4LHMw0V2Q34RWLboAN+p7xU6b5WU=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 for-m341-194-11.anon-2EhSJ.domain:
  NetBird IP: 100.86.194.11
  Public key: hrhokBhW7XinJC18hipWFU5vVIIir9j+PEJTFrjE4QU=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

 netbird-2.anon-2EhSJ.domain:
  NetBird IP: 100.86.196.12
  Public key: T+FZm/fVapUTpFMFfrSg2QlOA+jbqyfqMv16SDR592o=
  Status: Connected
  -- detail --
  Connection type: Relayed
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address: rel://bifrost.anon-E4hAQ.domain:33080
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: 28 seconds ago
  Transfer status (received/sent) 30.5 KiB/15.6 KiB
  Quantum resistance: false
  Networks: 192.168.1.145/32, 192.168.1.4/32, 192.168.1.5/32, 192.168.1.6/32, 192.168.2.254/32
  Latency: 0s

 for-m341-242-45.anon-2EhSJ.domain:
  NetBird IP: 100.86.242.45
  Public key: hVq3IBrXTGjREob5HIkwlCCQTuQw1IocgPP8CFm92mk=
  Status: Connecting
  -- detail --
  Connection type:
  ICE candidate (Local/Remote): -/-
  ICE candidate endpoints (Local/Remote): -/-
  Relay server address:
  Last connection update: 6 minutes, 46 seconds ago
  Last WireGuard handshake: -
  Transfer status (received/sent) 0 B/0 B
  Quantum resistance: false
  Networks: -
  Latency: 0s

Events:
  [WARNING] DNS (4f08bc51-2242-4d2a-b7c8-8b989c361b4e)
    Message: All upstream servers failed (probe failed)
    Time: 6 minutes, 46 seconds ago
    Metadata: upstreams: 192.168.2.254:53
  [INFO] SYSTEM (16c44dd2-bd5f-4d48-8928-591aaa599b12)
    Message: Network map updated
    Time: 6 minutes, 46 seconds ago
OS: windows/amd64
Daemon version: 0.50.2
CLI version: 0.50.2
Management: Connected to https://bifrost.anon-E4hAQ.domain:33073
Signal: Connected to http://bifrost.anon-E4hAQ.domain:10000
Relays:
  [stun:bifrost.anon-E4hAQ.domain:3478] is Available
  [turn:bifrost.anon-E4hAQ.domain:3478?transport=udp] is Available
  [rel://bifrost.anon-E4hAQ.domain:33080] is Available
Nameservers:
  [192.168.2.254:53] for [.] is Available
FQDN: revenant.anon-2EhSJ.domain
NetBird IP: 100.86.6.65/16
Interface type: Userspace
Quantum resistance: false
Lazy connection: false
Networks: -
Forwarding rules: 0
Peers count: 1/14 Connected

Create and upload a debug bundle, and share the returned file key:

netbird debug for 1m -AS -U

Uploaded files are automatically deleted after 30 days.

Alternatively, create the file only and attach it here manually:

netbird debug for 1m -AS

Screenshots

Logs from the management server when the problem was happening :

2025-07-12T09:14:16Z ERRO [context: GRPC, requestID: 22459455-28b5-4eec-b02a-1c265fecf5fd, accountID: d167g3d8plqs73em4fug, peerID: x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24=] management/server/auth/jwt/validator.go:161: token could not be parsed: Token is expired

2025-07-12T09:14:16Z WARN [context: GRPC, requestID: 22459455-28b5-4eec-b02a-1c265fecf5fd, accountID: d167g3d8plqs73em4fug, peerID: x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24=] management/server/grpcserver.go:553: failed validating JWT token sent from peer x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24= with error rpc error: code = InvalidArgument desc = invalid jwt token, err: token could not be parsed: Token is expired. Trying again as it may be due to the IdP cache issue

Additional context

Netbird is now working again but I am fairly confident the problem might happen again in the future (unless I missed something in the path notes).

Initially I was unable to connect on 0.50.1, tried a few times, didn't work. Tried updating to 0.50.2, still wasn't working. 3-5 minutes later I shut off netbird via the GUI, and turn it back on, tried to log in, and it worked this time.

Next time I will try to check the status of my time synhronization, but a slight desync should not cause this (and is not a problem I think I encountered on my infra, but who knows)

Have you tried these troubleshooting steps?

  • Reviewed client troubleshooting (if applicable)
  • Checked for newer NetBird versions
  • Searched for similar issues on GitHub (including closed ones)
  • Restarted the NetBird client
  • Disabled other VPN software
  • Checked firewall settings
Originally created by @Coler-e on GitHub (Jul 12, 2025). **Describe the problem** I am unable to log in on the Windows client intermitently, logs on the management server point to an expired JWT. **To Reproduce** Really have no Idea how this can be replicated other than running a windows client on a Self-Hosted netbird setup (with Entra IDP) and it should eventually happen? **Expected behavior** This should not happen and SSO login should always start the VPN correctly **Are you using NetBird Cloud?** Netbird self-hosted **NetBird version** client was version 0.50.1, upgraded to 0.50.2 while tinkering to try and make things work. **Is any other VPN software installed?** None! I have moved away from Twingate and just have the relays on my infra as a backup in case of Netbird failure but no client deployed. To help us resolve the problem, please attach the following anonymized status output netbird status -dA ``` Peers detail: dm3qxeea.anon-2EhSJ.domain: NetBird IP: 100.86.45.187/32 Public key: IatWq6oG1JPKbUwH4AhMUj4fvOjR2znnJHVDy68pRQA= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-1.anon-2EhSJ.domain: NetBird IP: 100.86.25.68/32 Public key: eg10b6g7Fyt0vK8jOnAALZWVdAJxeP/Wo6CzMqJQRmU= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-2.anon-2EhSJ.domain: NetBird IP: 100.86.17.193/32 Public key: VdwYASpdNJ/IVsSxLdwtKN2XJmjYTehtnevlpmj8ZSk= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-3.anon-2EhSJ.domain: NetBird IP: 100.86.252.44/32 Public key: 2D6Pvz6C6LnOlfUXLUJovB3xdEM+R9NB1w06Yj0kIn0= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-122-80.anon-2EhSJ.domain: NetBird IP: 100.86.122.80/32 Public key: oh1CTYGWSEnrBEtqPZo7WN0x6jco/FWZa/43xOPScSA= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-125-10.anon-2EhSJ.domain: NetBird IP: 100.86.125.10/32 Public key: EP5cfsKR53kSdryaK/7pYtECht8qpFOPYlg8jof/Cl8= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s dm3qxeea-53-96.anon-2EhSJ.domain: NetBird IP: 100.86.53.96/32 Public key: gwPyhA7Qi59TihEiiBYxeO8tOl7mqq3pxky0TjZ7LGQ= Status: Idle -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s netbird-1.anon-2EhSJ.domain: NetBird IP: 100.86.14.27 Public key: ZGhzW9Dg8VDJ2QPvt7WAtBUIkkS+5SeFle2jKui0lTI= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s for-m341.anon-2EhSJ.domain: NetBird IP: 100.86.23.200 Public key: t9GqitXwGJoQwzbulMdQzhSrhWrAOiINAimVJD8qzQ0= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s localhost.anon-2EhSJ.domain: NetBird IP: 100.86.58.221 Public key: YqsOJyjiuEXcYa2mTlRLmJIVTxr/Nzi8MX40oyPiBgQ= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s netbird.anon-2EhSJ.domain: NetBird IP: 100.86.174.229 Public key: 2LhojfnNBv2cAge4LHMw0V2Q34RWLboAN+p7xU6b5WU= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s for-m341-194-11.anon-2EhSJ.domain: NetBird IP: 100.86.194.11 Public key: hrhokBhW7XinJC18hipWFU5vVIIir9j+PEJTFrjE4QU= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s netbird-2.anon-2EhSJ.domain: NetBird IP: 100.86.196.12 Public key: T+FZm/fVapUTpFMFfrSg2QlOA+jbqyfqMv16SDR592o= Status: Connected -- detail -- Connection type: Relayed ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: rel://bifrost.anon-E4hAQ.domain:33080 Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: 28 seconds ago Transfer status (received/sent) 30.5 KiB/15.6 KiB Quantum resistance: false Networks: 192.168.1.145/32, 192.168.1.4/32, 192.168.1.5/32, 192.168.1.6/32, 192.168.2.254/32 Latency: 0s for-m341-242-45.anon-2EhSJ.domain: NetBird IP: 100.86.242.45 Public key: hVq3IBrXTGjREob5HIkwlCCQTuQw1IocgPP8CFm92mk= Status: Connecting -- detail -- Connection type: ICE candidate (Local/Remote): -/- ICE candidate endpoints (Local/Remote): -/- Relay server address: Last connection update: 6 minutes, 46 seconds ago Last WireGuard handshake: - Transfer status (received/sent) 0 B/0 B Quantum resistance: false Networks: - Latency: 0s Events: [WARNING] DNS (4f08bc51-2242-4d2a-b7c8-8b989c361b4e) Message: All upstream servers failed (probe failed) Time: 6 minutes, 46 seconds ago Metadata: upstreams: 192.168.2.254:53 [INFO] SYSTEM (16c44dd2-bd5f-4d48-8928-591aaa599b12) Message: Network map updated Time: 6 minutes, 46 seconds ago OS: windows/amd64 Daemon version: 0.50.2 CLI version: 0.50.2 Management: Connected to https://bifrost.anon-E4hAQ.domain:33073 Signal: Connected to http://bifrost.anon-E4hAQ.domain:10000 Relays: [stun:bifrost.anon-E4hAQ.domain:3478] is Available [turn:bifrost.anon-E4hAQ.domain:3478?transport=udp] is Available [rel://bifrost.anon-E4hAQ.domain:33080] is Available Nameservers: [192.168.2.254:53] for [.] is Available FQDN: revenant.anon-2EhSJ.domain NetBird IP: 100.86.6.65/16 Interface type: Userspace Quantum resistance: false Lazy connection: false Networks: - Forwarding rules: 0 Peers count: 1/14 Connected ``` Create and upload a debug bundle, and share the returned file key: netbird debug for 1m -AS -U *Uploaded files are automatically deleted after 30 days.* Alternatively, create the file only and attach it here manually: netbird debug for 1m -AS **Screenshots** Logs from the management server when the problem was happening : ``` 2025-07-12T09:14:16Z ERRO [context: GRPC, requestID: 22459455-28b5-4eec-b02a-1c265fecf5fd, accountID: d167g3d8plqs73em4fug, peerID: x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24=] management/server/auth/jwt/validator.go:161: token could not be parsed: Token is expired 2025-07-12T09:14:16Z WARN [context: GRPC, requestID: 22459455-28b5-4eec-b02a-1c265fecf5fd, accountID: d167g3d8plqs73em4fug, peerID: x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24=] management/server/grpcserver.go:553: failed validating JWT token sent from peer x+nxM7XDXuxmtUAvdl8+0wnNNuopsz2qZbkBjdN3Q24= with error rpc error: code = InvalidArgument desc = invalid jwt token, err: token could not be parsed: Token is expired. Trying again as it may be due to the IdP cache issue ``` **Additional context** Netbird is now working again but I am fairly confident the problem might happen again in the future (unless I missed something in the path notes). Initially I was unable to connect on 0.50.1, tried a few times, didn't work. Tried updating to 0.50.2, still wasn't working. 3-5 minutes later I shut off netbird via the GUI, and turn it back on, tried to log in, and it worked this time. Next time I will try to check the status of my time synhronization, but a slight desync should not cause this (and is not a problem I think I encountered on my infra, but who knows) **Have you tried these troubleshooting steps?** - [x] Reviewed [client troubleshooting](https://docs.netbird.io/how-to/troubleshooting-client) (if applicable) - [x] Checked for newer NetBird versions - [x] Searched for similar issues on GitHub (including closed ones) - [x] Restarted the NetBird client - [x] Disabled other VPN software - [x] Checked firewall settings
saavagebueno added the self-hostingazure labels 2025-11-20 06:12:09 -05:00
saavagebueno commented 2025-11-20 06:12:10 -05:00
Author
Owner
Copy Link

@nazarewk commented on GitHub (Jul 15, 2025):

it's most likely due to Entra ID not handling max_age=0 according to the OIDC spec, please see https://github.com/netbirdio/netbird/issues/4054#issuecomment-3007539611

feel free to reopen in case it doesn't solve your problem

@nazarewk commented on GitHub (Jul 15, 2025): it's most likely due to Entra ID not handling `max_age=0` according to the OIDC spec, please see https://github.com/netbirdio/netbird/issues/4054#issuecomment-3007539611 feel free to reopen in case it doesn't solve your problem
saavagebueno commented 2025-11-20 06:12:10 -05:00
Author
Owner
Copy Link

@Coler-e commented on GitHub (Sep 16, 2025):

Thank you so much @nazarewk, came back to this issue cause I recently kept on having the problem and login straight up stopped working on Android, I also see the default have been updated so nobody new to netbird should encounter this again!

@Coler-e commented on GitHub (Sep 16, 2025): Thank you so much @nazarewk, came back to this issue cause I recently kept on having the problem and login straight up stopped working on Android, I also see the default have been updated so nobody new to netbird should encounter this again!
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
2021 Q4
2022 Q1
2022 Q1
accessibility
acl
agent
agent
Android
Android
api
authentik
automation
azure
battery-usage
bug
cache
client
client-ui
cloud
cloud-only
cloudflare
community
compatibility
config-idp
config-issue
connection
contribution
coturn
cross-vpn
dashboard
data-usage
distribution
dns
docker
documentation
duplicate
enhancement
enhancement
event-stream
feature-request
freebsd
getting-started
go
good first issue
gui
help wanted
home-assistant
idp
inconsistency
integration
integrations
ios
ipv6
jwt
k8s
keycloak
linux
login
macos
management-service
missing-docs
mobile
moved-internal
needs-review
netbird-ui
networking
new-platform
nginx
notification
okta
openwrt
packaging
peer-management
peer-management
peer-management
performance
postgres
posture-checks
psk
pull-request
Mirrored from GitHub Pull Request
 question
refactor
relay
release
rfc
routes
security
security-related
self-hosting
server
signal
sleep-issue
ssh
ssl
status
store
synology
system-compatibility-issue
test-suite
third-party-integration
triage
triage-needed
troubleshooting
UX
waiting-feedback
windows
wontfix
zitadel
No Label azure self-hosting
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
saavagebueno
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: SVI/netbird#2064
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?