Remove password history feature in iotdb.

[wenyanshi-123]

Remove password history feature in iotdb.

[Copilot]

Pull request overview

Removes the password history-based authentication features (password expiration and password reuse interval) from IoTDB.

Changes:

• Removes password expiration/reuse configuration fields and their usage paths.
• Deletes DataNodeAuthUtils and strips post-success password-history recording from authorization statements.
• Removes password-history verification from login flows and integration tests.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/conf/CommonConfig.java	Drops password expiration/reuse config fields; leaves related config surface to reassess.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/utils/DataNodeAuthUtils.java	Deletes password history utilities (query/record/delete/expire/reuse checks).
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/statement/sys/AuthorStatement.java	Removes password-history recording on CREATE/ALTER/DROP USER success.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/relational/sql/ast/RelationalAuthorStatement.java	Same as above for relational author statements.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/execution/config/TreeConfigTaskVisitor.java	Removes password reuse interval enforcement during user password updates.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/queryengine/plan/execution/config/TableConfigTaskVisitor.java	Removes password reuse interval enforcement during relational user password updates.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/protocol/session/SessionManager.java	Removes password-expiration checks and related login messaging/history creation.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/pipe/receiver/protocol/thrift/IoTDBDataNodeReceiver.java	Removes password-expiration checks during receiver login.
iotdb-core/datanode/src/main/java/org/apache/iotdb/db/audit/DNAuditLogger.java	Removes the password history audit prefix constant.
integration-test/src/test/java/org/apache/iotdb/db/it/auth/IoTDBAuthIT.java	Removes password history integration tests and related imports.

Comments suppressed due to low confidence (1)

iotdb-core/node-commons/src/main/java/org/apache/iotdb/commons/conf/CommonConfig.java:2731

• mayBypassPasswordCheckInException (and its getter/setter) appears to be unused after removing the password history/expiration/reuse logic. Keeping a dead config knob is confusing for operators and future maintainers; consider removing this field and any corresponding config parsing/documentation if it was only intended to bypass password-history checks.

  public boolean isMayBypassPasswordCheckInException() {
    return mayBypassPasswordCheckInException;
  }

  public void setMayBypassPasswordCheckInException(boolean mayBypassPasswordCheckInException) {
    this.mayBypassPasswordCheckInException = mayBypassPasswordCheckInException;

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[CRZbulabula]

LGTM!