Clear REST user cache when invalidating user cache

external-service-impl/mqtt/src/main/java/org/apache/iotdb/mqtt/MQTTService.java

@@ -52,6 +52,11 @@ public void stop() {
     shutdown();
   }
 
+  @Override
+  public void clearUserCache(String userName) {
+    // do nothing
+  }
+
   public void startup() {
     IoTDBConfig iotDBConfig = IoTDBDescriptor.getInstance().getConfig();
     IConfig config = createBrokerConfig(iotDBConfig);

external-service-impl/rest/src/main/java/org/apache/iotdb/rest/RestService.java

@@ -20,6 +20,7 @@
 import org.apache.iotdb.db.conf.rest.IoTDBRestServiceDescriptor;
 import org.apache.iotdb.externalservice.api.IExternalService;
 import org.apache.iotdb.rest.protocol.filter.ApiOriginFilter;
+import org.apache.iotdb.rest.protocol.filter.UserCache;
 
 import org.eclipse.jetty.http.HttpVersion;
 import org.eclipse.jetty.server.HttpConfiguration;
@@ -141,4 +142,9 @@ public void stop() {
       server.destroy();
     }
   }
+
+  @Override
+  public void clearUserCache(String userName) {
+    UserCache.getInstance().clearUserCache(userName);
+  }
 }

external-service-impl/rest/src/main/java/org/apache/iotdb/rest/protocol/filter/UserCache.java

@@ -23,6 +23,7 @@
 import com.github.benmanes.caffeine.cache.Cache;
 import com.github.benmanes.caffeine.cache.Caffeine;
 
+import java.util.Map;
 import java.util.concurrent.TimeUnit;
 
 public class UserCache {
@@ -51,6 +52,15 @@ public void setUser(String key, User user) {
     cache.put(key, user);
   }
 
+  public void clearUserCache(String userName) {
+    for (Map.Entry<String, User> mapValue : cache.asMap().entrySet()) {
+      if (mapValue.getValue().getUsername().equals(userName)) {
+        cache.invalidate(mapValue.getKey());
+        return;
+      }
+    }
+  }
+
   private static class UserCacheHolder {
     private static final UserCache INSTANCE = new UserCache();
   }

iotdb-api/external-service-api/src/main/java/org/apache/iotdb/externalservice/api/IExternalService.java

@@ -30,4 +30,7 @@ public interface IExternalService {
    * guarantee to putBack thread or thread pool.
    */
   void stop();
+
+  /** Clear user cache of current service. */
+  void clearUserCache(String userName);
 }

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/auth/AuthorityChecker.java

@@ -51,6 +51,7 @@
 import org.apache.iotdb.db.queryengine.plan.relational.sql.ast.RelationalAuthorStatement;
 import org.apache.iotdb.db.queryengine.plan.statement.Statement;
 import org.apache.iotdb.db.queryengine.plan.statement.sys.AuthorStatement;
+import org.apache.iotdb.db.service.externalservice.ExternalServiceManagementService;
 import org.apache.iotdb.rpc.TSStatusCode;
 
 import com.google.common.util.concurrent.SettableFuture;
@@ -130,6 +131,7 @@ public static IAuthorityFetcher getAuthorityFetcher() {
 
   public static boolean invalidateCache(String username, String roleName) {
     PipeInsertionDataNodeListener.getInstance().invalidateAllCache();
+    ExternalServiceManagementService.getInstance().clearServiceUserCache(username);
     return authorityFetcher.get().getAuthorCache().invalidateCache(username, roleName);
   }
 

iotdb-core/datanode/src/main/java/org/apache/iotdb/db/service/externalservice/ExternalServiceManagementService.java

@@ -417,6 +417,25 @@ public static ExternalServiceManagementService getInstance() {
     return ExternalServiceManagementServiceHolder.INSTANCE;
   }
 
+  public void clearServiceUserCache(String userName) {
+    serviceInfos
+        .values()
+        .forEach(
+            serviceInfo -> {
+              // clear user cache of service with RUNNING state
+              if (serviceInfo.getState() == RUNNING) {
+                IExternalService serviceInstance = serviceInfo.getServiceInstance();
+                // serviceInstance maybe null when an exception occurs during the start of certain
+                // service in restoreRunningServiceInstance method
+                if (serviceInstance != null) {
+                  // only clear user cache of the instance successfully started and running
+                  runWithServiceClassLoader(
+                      serviceInfo, () -> serviceInstance.clearUserCache(userName));
+                }
+              }
+            });
+  }
+
   private static class ExternalServiceManagementServiceHolder {
 
     private static final ExternalServiceManagementService INSTANCE =