Org Access Policy prevents access

[Vyerni]

Describe the Bug

In my org, I have an access policy with a max session length of 1 day. This all works perfectly fine with the web based stuff.

Using the android client on my phone, I've been able to log in and get things to work. Though, a few days later when I went to go use it again, I'm now getting: "Failed organization access policy check: Unknown error", which I can only assume is the session length.

I then attempt to connect and get "Access to this organization has been denied because your session has expired. Please log in again to refresh the session", with no option to log in again, or log out and log back in.

Environment

• OS Type & Version: (e.g., Ubuntu 22.04): Docker
• Pangolin Version: 1.15.1
• Gerbil Version: 1.3.0
• Traefik Version: 3.6
• Newt Version: 1.9.0
• Client Version: (if applicable): 0.1.5

To Reproduce

Set access policy.
Log in.
Wait a little longer than access policy defines
Attempt to log in again

Expected Behavior

To be able to log out and log back in, or refresh the token, without having to clear the app data.

[felix-berlin]

I have the same issue. Does anyone know how to login again in this case?

[oschwartz10612]

Hey we are working on this and its a valid issue. Right now the best thing to do is to click on the account and log out then log back in.

[Vyerni]

Via the phone app? Because I can't find any function anywhere to be able to log out in my case.

I have to clear the app data and start again.

[oschwartz10612]

You can click on the user account on the main page and it should pop up a window to switch accounts or log out or add an account.

[JonathanHohimer]

I am also experiencing this issue. If the app is closed after the access is expired and then reopened, there is no account section to open to logout.

Attempting to connect again just gives the error but there is nothing else you can do at this point other than wiping the app data. As far as I can see.

[Vyerni]

I am also experiencing this issue. If the app is closed after the access is expired and then reopened, there is no account section to open to logout.

Thanks for posting these, I hadn't had a chance too.

Yeah, same issue for me. Zero option to change account

[Vyerni]

So whilst on 0.1.7 I can now log back in, rather than just allowing me to reauthenticate with the current user. I need to go through the whe process again, including re-entering my domain.

No middle ground?

Sort of quite inconvenient for any users/staff

Edit:

I know it's the wrong repo, but the Windows app is the same thing

[oschwartz10612]

@Vyerni good point we will work on this.