Build admin impersonation flow with banner-required audit trail and explicit expiry

[thlpkee20-wq]

Description

Support read-only admin impersonation for investigation, requiring an active reason, banner display on responses, automatic expiry, and an audit trail of every viewed resource.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: src/auth/, src/middleware/authWithSession.ts
• Writes must be blocked while impersonating

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/admin-impersonation
• Implement changes
  • Add impersonation session type with TTL and reason field
  • Block non-GET requests under impersonation
  • Inject banner header into responses and audit each view
• Validate security and correctness assumptions

Test and commit

• Run tests
  • npm test
• Cover edge cases
  • Write attempt, TTL expiry mid-request, nested impersonation block
• Include test output and notes

Example commit message

feat: read-only admin impersonation with audit

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[jesutobaadedejidev]

I would like to work on this issue. Do assign it to me

[Aishat004]

@Aishat004 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

please can i work on the issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Aishat004 to this issue.