admin

Admin Impersonate

Issue a 15-minute access-token for client_id so an admin can see what the client sees. Refuses to impersonate other admins.

The token's sub is the impersonated client's id (so endpoints operate on the client's data), but it carries an act claim with the admin's id and an imp flag so audit rows downstream can show "admin X acting as client Y did Z".

post/api/v1/admin/clients/{client_id}/impersonate

Request

  • Base URL: https://api.nudgelink.co (the document declares no server; this is the origin it was published from)
  • URL: https://api.nudgelink.co/api/v1/admin/clients/{client_id}/impersonate
  • Auth: HTTP bearer

Path parameters

client_idstring uuid required

Request body

reasonstring required

Response

Successful Response

access_tokenstring required
token_typestring
expires_ininteger required
impersonated_client_idstring uuid required
impersonated_emailstring required

Changes

No recorded changes to this operation across all 1 revision of this API.