fix(webapp): two customer-card and impersonation fixes - #4571

Closed

isshaddad wants to merge 9 commits into

mainfrom

fix/plain-card-and-impersonation-switch

Commits on Aug 11, 2026

fix(webapp): accept Plain customers without an external id on customer cards
isshaddad
committed
cb6088c
fix(webapp): let an admin switch impersonation target without stopping first
isshaddad
committed
5dc5f70
fix(webapp): scope impersonation to id-matched customers and enforce session controls
isshaddad
committed
6551a58
chore(webapp): drop the now-unused requireUser import
isshaddad
committed
3c90ce3
fix(webapp): keep the impersonation link through login, order audit rows
isshaddad
committed
4aadcd5
fix(webapp): write the impersonation audit pair atomically
isshaddad
committed
f1c6eb3
fix(webapp): reset the view-as-user flag when switching impersonation target
isshaddad
committed
4f7fc96
fix(webapp): take the impersonate route out of the admin layout
isshaddad
committed
7be4c3b
fix(webapp): gate the impersonate route on canSuper, not the admin column
isshaddad
committed
e5e910b