Add admin impersonation flow with explicit consent, time-boxed sessions, and full audit trail

[thlpkee20-wq]

Description

Support staff sometimes need to act as a user to debug. Add an impersonation flow that requires user consent (or break-glass with VP-level approval), issues a session capped at 60 minutes, and tags every action with acted_as in audit logs.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: src/routes/admin.ts, src/middleware/auth.ts
• Break-glass usage must page the security on-call

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/admin-impersonation-audited
• Implement changes
  • Add POST /api/v1/admin/impersonate/:userId
  • JWT carries act claim; logger tags entries with acted_as
  • Break-glass path requires second admin approval
• Validate security and correctness assumptions

Test and commit

• Run tests
  • npm test
• Cover edge cases
  • Session must auto-expire and require re-auth
• Include test output and notes

Example commit message

feat: audited admin impersonation

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[estyemma]

@estyemma has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I’m a full-stack and smart contract developer eager to contribute to this task, learn from the community, and deliver meaningful value. I'd love the opportunity to work on this!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @estyemma to this issue.

[dayo-dev17]

@dayo-dev17 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hi Maintainer!
I'm a backend engineer with a strong focus on security engineering, access control architectures, and strict compliance logging, and I'd love to take on this critical admin impersonation feature for ChronoPay. I will implement the secure POST /api/v1/admin/impersonate/:userId endpoint, updating the JWT token generation layer to embed an explicit act claim while refactoring your global logging middleware to automatically surface and tag every operational entry with an acted_as signature. I'll configure the impersonation session to strictly auto-expire via a 60-minute time-box, build out the high-priority break-glass path to require a secondary admin approval while triggering an alert to the security on-call rotation, and back the entire implementation with robust test suites achieving a minimum of 95% coverage across all session expiration, authorization boundary, and audit trail edge cases within your 96-hour timeframe.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dayo-dev17 to this issue.