- Shipped
- 15 ஜூன், 2026 அன்று 5:20 PM UTC
- Author
- kamo
- Commit
- 4f51627
Adds a top-right 'Impersonate' action on /settings/member/[id], visible only when the signed-in session carries god mode (getIsGod) and the target isn't self/new. Calls the new /api/security/impersonate, then swaps the *** cookie via the OTK path (/validate?otk=...&keepPrev=1) in a new tab. keepPrev preserves the admin's own session in Redis; a global ImpersonationBanner stashes the admin *** and offers one-click 'Return to my account' (same-origin cookies can't hold two live sessions at once). SettingsView gains an optional headerAction slot.