Add Auth clearCache

Author: skadefro

OpenFlow/src/Auth.ts

@@ -50,6 +50,16 @@ export class Auth {
         this.RemoveUser(key, type);
         return null;
     }
+    public static async clearCache() {
+        if (this.authorizationCache == null) return;
+        const keys: string[] = Object.keys(this.authorizationCache);
+        for (let i = keys.length - 1; i >= 0; i--) {
+            let key: string = keys[i];
+            var res: CachedUser = this.authorizationCache[key];
+            if (res === null || res === undefined) continue;
+            this.RemoveUser(key, res.type);
+        }
+    }
     public static async cleanCache() {
         try {
             if (this.authorizationCache == null) return;

OpenFlow/src/DatabaseConnection.ts

@@ -1060,6 +1060,12 @@ export class DatabaseConnection extends events.EventEmitter {
                 Logger.otel.endSpan(mongodbspan);
                 Logger.otel.endTimer(ot_end, DatabaseConnection.mongodb_replace, { collection: collectionname });
                 DBHelper.cached_roles = [];
+                if (item._type === "role") {
+                    const r: Role = (item as any);
+                    if (r.members.length > 0) {
+                        Auth.clearCache();
+                    }
+                }
             }
             if (collectionname === "config" && item._type === "oauthclient") {
                 if (user.HasRoleName("admins")) {
@@ -1142,6 +1148,10 @@ export class DatabaseConnection extends events.EventEmitter {
                             }
                         }
                     }
+                    if (item._type === "role") {
+                        const r: Role = item as any;
+                        if (r.members.length > 0) Auth.clearCache();
+                    }
                 }
                 item._version = 0;
                 if (item._id != null) {
@@ -1579,7 +1589,9 @@ export class DatabaseConnection extends events.EventEmitter {
                         q.item = await this.Cleanmembers(q.item as any, original);
                         DBHelper.cached_roles = [];
                     }
-
+                    if (q.item._type === "role") {
+                        Auth.clearCache();
+                    }
                     if (q.collectionname != "fs.files") {
                         const ot_end = Logger.otel.startTimer();
                         const mongodbspan: Span = Logger.otel.startSubSpan("mongodb.replaceOne", span);
@@ -1977,6 +1989,9 @@ export class DatabaseConnection extends events.EventEmitter {
                         this.DeleteOne(r._id, "config", jwt, span);
                     }
                 }
+                if (collectionname == "users" && doc._type == "role") {
+                    Auth.clearCache();
+                }
             }
         } catch (error) {
             span.recordException(error);