Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
import { jwtDecode } from 'jwt-decode';
import { selector } from 'recoil';
import { isDefined } from 'twenty-shared/utils';
import { tokenPairState } from './tokenPairState';

export const isImpersonatingState = selector<boolean>({
key: 'isImpersonatingState',
get: ({ get }) => {
const tokenPair = get(tokenPairState);

if (!isDefined(tokenPair?.accessOrWorkspaceAgnosticToken?.token)) {
return false;
}

try {
const decodedToken = jwtDecode<{ isImpersonating: boolean }>(
tokenPair.accessOrWorkspaceAgnosticToken.token,
);
return decodedToken?.isImpersonating ?? false;
} catch {
return false;
}
},
});
Original file line number Diff line number Diff line change
@@ -1,13 +1,16 @@
import { isImpersonatingState } from '@/auth/states/isImpersonatingState';
import { InformationBannerBillingSubscriptionPaused } from '@/information-banner/components/billing/InformationBannerBillingSubscriptionPaused';
import { InformationBannerEndTrialPeriod } from '@/information-banner/components/billing/InformationBannerEndTrialPeriod';
import { InformationBannerFailPaymentInfo } from '@/information-banner/components/billing/InformationBannerFailPaymentInfo';
import { InformationBannerNoBillingSubscription } from '@/information-banner/components/billing/InformationBannerNoBillingSubscription';
import { InformationBannerIsImpersonating } from '@/information-banner/components/impersonate/InformationBannerIsImpersonating';
import { InformationBannerReconnectAccountEmailAliases } from '@/information-banner/components/reconnect-account/InformationBannerReconnectAccountEmailAliases';
import { InformationBannerReconnectAccountInsufficientPermissions } from '@/information-banner/components/reconnect-account/InformationBannerReconnectAccountInsufficientPermissions';
import { useIsSomeMeteredProductCapReached } from '@/workspace/hooks/useIsSomeMeteredProductCapReached';
import { useIsWorkspaceActivationStatusEqualsTo } from '@/workspace/hooks/useIsWorkspaceActivationStatusEqualsTo';
import { useSubscriptionStatus } from '@/workspace/hooks/useSubscriptionStatus';
import styled from '@emotion/styled';
import { useRecoilValue } from 'recoil';
import { isDefined } from 'twenty-shared/utils';
import { WorkspaceActivationStatus } from 'twenty-shared/workspace';
import { SubscriptionStatus } from '~/generated-metadata/graphql';
Expand All @@ -27,6 +30,7 @@ export const InformationBannerWrapper = () => {
WorkspaceActivationStatus.SUSPENDED,
);
const isSomeMeteredProductCapReached = useIsSomeMeteredProductCapReached();
const isImpersonating = useRecoilValue(isImpersonatingState);

const displayBillingSubscriptionPausedBanner =
isWorkspaceSuspended && subscriptionStatus === SubscriptionStatus.Paused;
Expand Down Expand Up @@ -54,6 +58,7 @@ export const InformationBannerWrapper = () => {
)}
{displayFailPaymentInfoBanner && <InformationBannerFailPaymentInfo />}
{displayEndTrialPeriodBanner && <InformationBannerEndTrialPeriod />}
{isImpersonating && <InformationBannerIsImpersonating />}
</StyledInformationBannerWrapper>
);
};
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
import { useAuth } from '@/auth/hooks/useAuth';
import { currentWorkspaceMemberState } from '@/auth/states/currentWorkspaceMemberState';
import { InformationBanner } from '@/information-banner/components/InformationBanner';
import { t } from '@lingui/core/macro';
import { useRecoilValue } from 'recoil';
import { isDefined } from 'twenty-shared/utils';
import { IconLogout } from 'twenty-ui/display';

export const InformationBannerIsImpersonating = () => {
const currentWorkspaceMember = useRecoilValue(currentWorkspaceMemberState);
const { signOut } = useAuth();

if (!isDefined(currentWorkspaceMember)) {
return null;
}

const impersonatedUser = `${currentWorkspaceMember.name.firstName} ${currentWorkspaceMember.name.lastName} (${currentWorkspaceMember.userEmail})`;

return (
<InformationBanner
message={t`Logged in as ${impersonatedUser}`}
buttonTitle={t`Stop impersonating`}
buttonIcon={IconLogout}
buttonOnClick={signOut}
/>
);
};
Original file line number Diff line number Diff line change
@@ -1,10 +1,12 @@
import { isImpersonatingState } from '@/auth/states/isImpersonatingState';
import { useHasPermissionFlag } from '@/settings/roles/hooks/useHasPermissionFlag';
import { Dropdown } from '@/ui/layout/dropdown/components/Dropdown';
import { DropdownContent } from '@/ui/layout/dropdown/components/DropdownContent';
import { DropdownMenuItemsContainer } from '@/ui/layout/dropdown/components/DropdownMenuItemsContainer';
import { useCloseDropdown } from '@/ui/layout/dropdown/hooks/useCloseDropdown';
import { type WorkspaceMember } from '@/workspace-member/types/WorkspaceMember';
import { t } from '@lingui/core/macro';
import { useRecoilValue } from 'recoil';
import { IconDotsVertical, IconSpy, IconTrash } from 'twenty-ui/display';
import { LightIconButton } from 'twenty-ui/input';
import { MenuItem } from 'twenty-ui/navigation';
Expand All @@ -24,7 +26,9 @@ export const ManageMembersDropdownMenu = ({
onImpersonate,
}: ManageMembersDropdownMenuProps) => {
const { closeDropdown } = useCloseDropdown();
const canImpersonate = useHasPermissionFlag(PermissionFlagType.IMPERSONATE);
const isImpersonating = useRecoilValue(isImpersonatingState);
const canImpersonate =
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Are we not looking at canImpersonate from user state as well?

Copy link
Contributor Author

@etiennejouan etiennejouan Sep 29, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It has been approved in previous PR like that. And I think I'm ok with it because impersonation can be done at two levels, workspace and server.
Workspace impersonation is enabled via permission and can be started from settings/member page (here).
Server impersonation is enabled via 'canImpersonate from user' and can be started from admin panel.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah, makes sense, ok SGDM!

useHasPermissionFlag(PermissionFlagType.IMPERSONATE) && !isImpersonating;

return (
<Dropdown
Expand Down