POST `/admin/impersonate`

Admin: log in as a target user directly, returns access_token/refresh_token; requires super_admin role

Account Management `bearerAuth` application/json

Request Body

Schema: dto.AdminImpersonateRequest

Field	Type	Required	Example	Constraints	Description
`user_id`	`string`	Yes	`01ARZ3NDEKTSV4RRFFQ69G5FAV`
`reason`	`string`	No	`Troubleshooting user issue`

Status	Description	Schema
200	Impersonation successful	`dto.AdminImpersonateResponseWrapper`

Admin impersonate user login response

Field	Type	Required	Example
`access_token`	`string`	No	`eyJhbGciOi...`
`expires_in`	`integer`	No	`1800`
`refresh_token`	`string`	No	`eyJhbGciOi...`
`token_type`	`string`	No	`Bearer`
`user`	`dto.UserInfo`	No

Field	Type	Required
`code`	`integer`	No
`data`	`dto.AdminImpersonateResponse`	No
`message`	`string`	No
`timestamp`	`string`	No

User basic information

Field	Type	Required	Example	Description
`created_at`	`string`	No	`2026-01-15T10:30:00Z`	Account creation time
`email`	`string`	No	`john@example.com`	Email
`id`	`string`	No	`usr_abc123`	User ID
`must_change_password`	`boolean`	No	`False`	Password must be changed
`password_expires_in`	`integer`	No	`30`	Days until password expires
`password_warning`	`string`	No	`expiring`	Password warning: expiring/expired_grace/expired
`phone`	`string`	No	`13800138000`	Phone
`status`	`string`	No	`active`	Status
`username`	`string`	No	`john.doe`	Username