expertiza / reimplementation-back-end

MIT License
1 stars 108 forks source link

E2421 Reimplement impersonating users #88

Open jaypatel31 opened 7 months ago

jaypatel31 commented 7 months ago

Problem Statement:

The objective is to reimplement the backend code for the impersonation feature in the new implementation of Expertiza. The current implementation relies on sessions, which won't be compatible with the new implementation using JWT tokens for authentication and returning JSON responses. The challenge lies in transitioning the logic from session-based management to JWT-based authentication while maintaining the functionality of impersonating users. The reimplementation involves planning how the backend will communicate with the frontend, potentially requiring changes in existing or new files beyond the impersonate_controller.rb.

Wiki Page Link:

Wiki Page - E2421

Pierce57 commented 1 week ago

It looks like a user can impersonate itself. Is this expected? https://cdn.discordapp.com/attachments/1290049251333640227/1301017138223513671/image.png?ex=6722f221&is=6721a0a1&hm=1ce1d4361d189aa82404d482adee077d2763d2759671df86a75b52d27bb8ea5c&