tcptunnel: handle invalid http response codes (#1727)

internal/cliutil/jwtcache.go

@@ -25,6 +25,7 @@ var (
 
 // A JWTCache loads and stores JWTs.
 type JWTCache interface {
+	DeleteJWT(key string) error
 	LoadJWT(key string) (rawJWT string, err error)
 	StoreJWT(key string, rawJWT string) error
 }
@@ -53,6 +54,16 @@ func NewLocalJWTCache() (*LocalJWTCache, error) {
 	}, nil
 }
 
+// DeleteJWT deletes a raw JWT from the local cache.
+func (cache *LocalJWTCache) DeleteJWT(key string) error {
+	path := filepath.Join(cache.dir, cache.fileName(key))
+	err := os.Remove(path)
+	if os.IsNotExist(err) {
+		err = nil
+	}
+	return err
+}
+
 // LoadJWT loads a raw JWT from the local cache.
 func (cache *LocalJWTCache) LoadJWT(key string) (rawJWT string, err error) {
 	path := filepath.Join(cache.dir, cache.fileName(key))
@@ -98,6 +109,15 @@ func NewMemoryJWTCache() *MemoryJWTCache {
 	return &MemoryJWTCache{entries: make(map[string]string)}
 }
 
+// DeleteJWT deletes a JWT from the in-memory map.
+func (cache *MemoryJWTCache) DeleteJWT(key string) error {
+	cache.mu.Lock()
+	defer cache.mu.Unlock()
+
+	delete(cache.entries, key)
+	return nil
+}
+
 // LoadJWT loads a JWT from the in-memory map.
 func (cache *MemoryJWTCache) LoadJWT(key string) (rawJWT string, err error) {
 	cache.mu.Lock()