- Ya
- 15 Juni 2026, 17:20 UTC
- Mwandishi
- kamo
- Ahadi ya
- 4f51627
Adds a top-right 'Impersonate' action on /settings/member/[id], visible only when the signed-in session carries god mode (getIsGod) and the target isn't self/new. Calls the new /api/security/impersonate, then swaps the *** cookie via the OTK path (/validate?otk=...&keepPrev=1) in a new tab. keepPrev preserves the admin's own session in Redis; a global ImpersonationBanner stashes the admin *** and offers one-click 'Return to my account' (same-origin cookies can't hold two live sessions at once). SettingsView gains an optional headerAction slot.