Backend for the VIP light-admin /admin view (mirrors quinn.www AdminDevView). Mounted under the SSO-gated /vip/admin/* path, so it is Quinn-only: - GET /vip/admin/impersonate/clients — roster picker flagging which fans have a live token to open as. - POST /vip/admin/impersonate/:clientId — resolves the fan's active token and (best-effort) their content key via the service-token path, returning an impersonation session so the SPA can load the fan's portal without their password. Read view-as; every start is logged for audit. Verified: bun run typecheck clean; 4 integration tests green on a real Postgres. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| @features | ||
| @packages | ||
| config.yaml | ||
| package.json | ||
| tsconfig.base.json | ||