nexxo
|
88d9a66f44
|
Sign the impersonation link against the portal's own host, not the console's
|
2026-07-28 12:24:53 +02:00 |
|
nexxo
|
26c84e3695
|
Hand impersonation over by signed link, not by a cookie that cannot cross hosts
|
2026-07-28 12:02:22 +02:00 |
|
nexxo
|
87c49de6e5
|
Move the console's identity out of the customer table
|
2026-07-28 10:31:43 +02:00 |
|
nexxo
|
4e86e135a6
|
fix(admin): harden impersonation + datacenter code per Codex review
- normalize datacenter code before uniqueness validation
- ensureUser: race-safe create + refuse linking admin accounts
- impersonate start/leave are POST (CSRF-protected)
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-25 13:50:16 +02:00 |
|
nexxo
|
879697c6ea
|
feat(admin): impersonate customer portal — session login + return banner
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
|
2026-07-25 13:46:48 +02:00 |