Add admin endpoint POST /api/admin/users/:id/impersonate with short-lived audited token

[1nonlypiece]

Add admin endpoint POST /api/admin/users/:id/impersonate with short-lived audited token

Description

Support teams need to reproduce user issues but src/routes/admin.ts has no impersonation flow, so debugging requires unsafe credential sharing. Add POST /api/admin/users/:id/impersonate that issues a 5-minute JWT containing impersonatorId and writes an audit log entry capturing reason text.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Restrict to admin role via src/middleware/rbac.ts
• Embed impersonatorId claim and reject self-impersonation
• Log to audit_logs with reason
• Add src/tests/impersonation.test.ts
• Update docs/ADMIN_USER_MANAGEMENT_API.md

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/admin-impersonation
• Implement changes
  • Edit src/routes/admin.ts
  • Update auth middleware to honour impersonatorId
  • Add tests and docs
• Test and commit
  • Run npm test
  • Include test output and notes

Example commit message

feat: audited admin impersonation tokens

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[Godfrey-Delight]

@Godfrey-Delight has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Please assign this to me. Credential sharing for debugging is a real security gap, and I've built audited impersonation flows before. I'll add the endpoint with RBAC guard, 5-minute JWT with impersonatorId, self-impersonation rejection, audit log writes, tests, and docs.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Godfrey-Delight to this issue.

[Banx17]

@Banx17 has applied to work on this issue as part of the Stellar Wave Program's 5th wave.

Please kindly assign me this issue, Im trying to meet my wave monthly target.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Banx17 to this issue.

[drips-wave]

Congratulations, @Banx17! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 2, 2026.

🧑‍💻 @Banx17: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊