---
title: "Impersonate User"
method: POST
path: "/auth/impersonate/{user_id}"
tags: ["authentication"]
---

# Impersonate User

`POST /auth/impersonate/{user_id}`

## Request

- Base URL: `https://api.threadchain.pro` (the document declares no server; this is the origin it was published from)
- URL: `https://api.threadchain.pro/auth/impersonate/{user_id}`
- Auth: OAuth 2
  - Password
  - Token URL: `auth/token`

Issue a short-lived (2-hour) JWT that authenticates as *user_id*.
Restricted to platform admins. The token carries an ``impersonated_by``
claim for audit purposes but is otherwise a normal Bearer token — all
existing endpoints work without modification.

## Path parameters

- `user_id` string, uuid, required

## Response `200`

Successful Response

- Token
  - `access_token` string, required
  - `token_type` string, required

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/threadchain/apis/threadchain-backend.md) - [All operations](https://skmtc.dev/threadchain/apis/threadchain-backend/llms.txt) - [OpenAPI document](https://skmtc.dev/threadchain/apis/threadchain-backend/revisions/8ee288a7e6bd?raw)