[FIX/BE-US] changes permission to redis and scope

internal/modules/sso/verifier/profile.go

@@ -265,24 +265,44 @@ func profileCacheKey(userID uint) string {
 	return profileCachePrefix + strconv.FormatUint(uint64(userID), 10)
 }
 
+// InvalidateProfileCache clears cached profile data for the given user in both local and Redis caches.
+func InvalidateProfileCache(ctx context.Context, userID uint) {
+	if userID == 0 {
+		return
+	}
+	key := profileCacheKey(userID)
+	profileLocalCache.Delete(key)
+
+	client := cache.Redis()
+	if client == nil {
+		return
+	}
+	if ctx == nil {
+		ctx = context.Background()
+	}
+	if err := client.Del(ctx, key).Err(); err != nil && !errors.Is(err, redis.Nil) {
+		utils.Log.WithError(err).Warn("sso profile redis delete failed")
+	}
+}
+
 func canonicalPermissionName(name string) string {
 	return strings.ToLower(strings.TrimSpace(name))
 }
 
 // userInfoEnvelope handles the varying shapes returned by the SSO userinfo endpoint.
 type userInfoEnvelope struct {
-	Roles []userInfoRole `json:"roles"`
-	AreaIDs     []uint `json:"area_ids"`
-	LocationIDs []uint `json:"location_ids"`
-	AllArea     bool   `json:"all_area"`
-	AllLocation bool   `json:"all_location"`
-	Data  *struct {
-		ID    int64          `json:"id"`
-		Roles []userInfoRole `json:"roles"`
-		AreaIDs     []uint `json:"area_ids"`
-		LocationIDs []uint `json:"location_ids"`
-		AllArea     bool   `json:"all_area"`
-		AllLocation bool   `json:"all_location"`
+	Roles       []userInfoRole `json:"roles"`
+	AreaIDs     []uint         `json:"area_ids"`
+	LocationIDs []uint         `json:"location_ids"`
+	AllArea     bool           `json:"all_area"`
+	AllLocation bool           `json:"all_location"`
+	Data        *struct {
+		ID          int64          `json:"id"`
+		Roles       []userInfoRole `json:"roles"`
+		AreaIDs     []uint         `json:"area_ids"`
+		LocationIDs []uint         `json:"location_ids"`
+		AllArea     bool           `json:"all_area"`
+		AllLocation bool           `json:"all_location"`
 	} `json:"data"`
 	User *struct {
 		ID int64 `json:"id"`