Impersonate user

[brunowego]

I'm very frustrated with this, maybe you can help me. I'm trying to do impersonate a user, but whenever I update the page the session is changed.

My controller method bellow:

def impersonate
  authorize @current_user # pundit ok!

  session[:impersonator_id] = @current_user.id

  warden.set_user @user, scope: :user

  render json: { message: "You are now impersonating #{@user.name}" }
end

Any idea how do this or tip? Thanks!

[rubyconvict]

I wouldn't play with warden or session. In this method, try to:

• add a new auth_token to user's tokens
• save the user (with a new token)
• sign_in as the user with a new token (devise method)
• return the new auth headers in the action's response headers

[zachfeldman]

Possible solution posted (thanks @rubyconvict ), closing for now.

[ausangshukla]

So anyone has a code snippet that I can use to do impersonation ?
TIA

[eterry1388]

user = User.find(1)
user_token = user.create_token
user.save!

{
  "Access-Token" => user_token.token,
  "Client" => user_token.client,
  "Expiry" => user_token.expiry,
  "Uid" => user.uid,
}