Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Dexie Cloud: Allow DB owners impersonate users. #1866

Merged
merged 2 commits into from
Jan 2, 2024
Merged

Dexie Cloud: Allow DB owners impersonate users. #1866

merged 2 commits into from
Jan 2, 2024

Commits on Jan 2, 2024

  1. Dexie Cloud: Allow DB owners impersonate users. 

    To login as other user, the following format will be understood by the service:
"yourEmail as targetEmail"
Example:
"[email protected] as [email protected]"

Allow this format in the login dialog. Server will validate whether the first email owns an API client with GLOBAL_READ and GLOBAL_WRITE access. If so, OTP will be sent to owner email but token will be given out with the access for the second email.

This will help reproducting issues and troubleshooting. Note that this is not a secutiry concern - the first user has full control over the database and access to read and manipulate the full database via REST or import/export anyway. This is just a tool to be able to reproduce customer issues by logging in as them and follow repro steps.
    @dfahlander
    dfahlander committed Jan 2, 2024
    Configuration menu
    Copy the full SHA
    f7cee47 View commit details
    Browse the repository at this point in the history

  2. dexie-cloud-addon version bump

    @dfahlander
    dfahlander committed Jan 2, 2024
    Configuration menu
    Copy the full SHA
    43ae54d View commit details
    Browse the repository at this point in the history