Is there any way to have Impersonate User feature ...
# general
s
Is there any way to have Impersonate User feature in Ory Kratos/Hydra?
m
Hello @steep-greece-67535 what is your use case for impersonation exactly? In general implementing the ability to impersonate users is a huge security risk - if you make a mistake you can open to door to malicious actors taking over user accounts without you noticing. So that is why we recommend to not even start implementing such a feature. It is of course possible - but I would very strongly recommend to a) make sure you really need impersonation (in 99% of use cases in my experience its not really needed) b) know exactly what you are doing to avoid any future footguns
s
The thing is that can speed up development process, so UI is not needed for all aspects since higher administrator can just login to user account and get exact same view that user get and perform actions on their accout, without need of building UIs for every single interaction or settings. Of course that feature should only be available for people of trust.
So I was wondering if there is some sort of plugin or something that can be used for that.