CluPilotCloud

Author	SHA1	Message	Date
nexxo	26c84e3695	Hand impersonation over by signed link, not by a cookie that cannot cross hosts	2026-07-28 12:02:22 +02:00
nexxo	87c49de6e5	Move the console's identity out of the customer table	2026-07-28 10:31:43 +02:00
nexxo	4e86e135a6	fix(admin): harden impersonation + datacenter code per Codex review - normalize datacenter code before uniqueness validation - ensureUser: race-safe create + refuse linking admin accounts - impersonate start/leave are POST (CSRF-protected) Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 13:50:16 +02:00
nexxo	879697c6ea	feat(admin): impersonate customer portal — session login + return banner Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 13:46:48 +02:00