powr-sdk-web 6.2.0 → 6.3.0

package/dist/auth/index.js

@@ -43,6 +43,10 @@ var PowrLogin = function PowrLogin(_ref) {
     requirePhoneVerification = _ref$requirePhoneVeri === void 0 ? true : _ref$requirePhoneVeri,
     _ref$showForgotPasswo = _ref.showForgotPassword,
     showForgotPassword = _ref$showForgotPasswo === void 0 ? true : _ref$showForgotPasswo,
+    _ref$passwordResetHel = _ref.passwordResetHelpUrl,
+    passwordResetHelpUrl = _ref$passwordResetHel === void 0 ? null : _ref$passwordResetHel,
+    _ref$passwordResetHel2 = _ref.passwordResetHelpLabel,
+    passwordResetHelpLabel = _ref$passwordResetHel2 === void 0 ? 'Forgot password? WhatsApp us' : _ref$passwordResetHel2,
     _ref$completeProfileO = _ref.completeProfileOnLogin,
     completeProfileOnLogin = _ref$completeProfileO === void 0 ? false : _ref$completeProfileO,
     _ref$requireTerms = _ref.requireTerms,
@@ -871,13 +875,18 @@ var PowrLogin = function PowrLogin(_ref) {
     style: styles.checkbox
   }), /*#__PURE__*/_react["default"].createElement("span", {
     style: styles.checkboxText
-  }, "Remember me")), showForgotPassword && /*#__PURE__*/_react["default"].createElement("button", {
+  }, "Remember me")), passwordResetHelpUrl ? /*#__PURE__*/_react["default"].createElement("a", {
+    href: passwordResetHelpUrl,
+    target: "_blank",
+    rel: "noopener noreferrer",
+    style: styles.forgotPasswordLink
+  }, passwordResetHelpLabel) : showForgotPassword ? /*#__PURE__*/_react["default"].createElement("button", {
     type: "button",
     onClick: function onClick() {
       return setShowOtpOption(!showOtpOption);
     },
     style: styles.forgotPasswordLink
-  }, "Forgot password?")), isLogin && showForgotPassword && showOtpOption && /*#__PURE__*/_react["default"].createElement("div", {
+  }, "Forgot password?") : null), isLogin && !passwordResetHelpUrl && showForgotPassword && showOtpOption && /*#__PURE__*/_react["default"].createElement("div", {
     style: styles.otpSection
   }, /*#__PURE__*/_react["default"].createElement("p", {
     style: styles.otpText

package/dist/impersonate/index.js

@@ -0,0 +1,468 @@
+"use strict";
+
+function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "POWR_IMPERSONATOR_KEY", {
+  enumerable: true,
+  get: function get() {
+    return _storage.POWR_IMPERSONATOR_KEY;
+  }
+});
+exports.PowrImpersonationBar = PowrImpersonationBar;
+exports.PowrLoginAsDialog = PowrLoginAsDialog;
+exports.canStartLoginAs = canStartLoginAs;
+Object.defineProperty(exports, "clearImpersonator", {
+  enumerable: true,
+  get: function get() {
+    return _storage.clearImpersonator;
+  }
+});
+exports.enterLoginAs = enterLoginAs;
+exports.exitLoginAs = exitLoginAs;
+exports.notifyImpersonationExit = notifyImpersonationExit;
+Object.defineProperty(exports, "readImpersonator", {
+  enumerable: true,
+  get: function get() {
+    return _storage.readImpersonator;
+  }
+});
+Object.defineProperty(exports, "viewAsLabel", {
+  enumerable: true,
+  get: function get() {
+    return _storage.viewAsLabel;
+  }
+});
+var _react = _interopRequireWildcard(require("react"));
+var _auth = require("../utils/auth");
+var _session = require("../session");
+var _styles = require("../shell/styles");
+var _storage = require("./storage");
+function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t3 in e) "default" !== _t3 && {}.hasOwnProperty.call(e, _t3) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t3)) && (i.get || i.set) ? o(f, _t3, i) : f[_t3] = e[_t3]); return f; })(e, t); }
+function ownKeys(e, r) { var t = Object.keys(e); if (Object.getOwnPropertySymbols) { var o = Object.getOwnPropertySymbols(e); r && (o = o.filter(function (r) { return Object.getOwnPropertyDescriptor(e, r).enumerable; })), t.push.apply(t, o); } return t; }
+function _objectSpread(e) { for (var r = 1; r < arguments.length; r++) { var t = null != arguments[r] ? arguments[r] : {}; r % 2 ? ownKeys(Object(t), !0).forEach(function (r) { _defineProperty(e, r, t[r]); }) : Object.getOwnPropertyDescriptors ? Object.defineProperties(e, Object.getOwnPropertyDescriptors(t)) : ownKeys(Object(t)).forEach(function (r) { Object.defineProperty(e, r, Object.getOwnPropertyDescriptor(t, r)); }); } return e; }
+function _defineProperty(e, r, t) { return (r = _toPropertyKey(r)) in e ? Object.defineProperty(e, r, { value: t, enumerable: !0, configurable: !0, writable: !0 }) : e[r] = t, e; }
+function _toPropertyKey(t) { var i = _toPrimitive(t, "string"); return "symbol" == _typeof(i) ? i : i + ""; }
+function _toPrimitive(t, r) { if ("object" != _typeof(t) || !t) return t; var e = t[Symbol.toPrimitive]; if (void 0 !== e) { var i = e.call(t, r || "default"); if ("object" != _typeof(i)) return i; throw new TypeError("@@toPrimitive must return a primitive value."); } return ("string" === r ? String : Number)(t); }
+function _regenerator() { /*! regenerator-runtime -- Copyright (c) 2014-present, Facebook, Inc. -- license (MIT): https://github.com/babel/babel/blob/main/packages/babel-helpers/LICENSE */ var e, t, r = "function" == typeof Symbol ? Symbol : {}, n = r.iterator || "@@iterator", o = r.toStringTag || "@@toStringTag"; function i(r, n, o, i) { var c = n && n.prototype instanceof Generator ? n : Generator, u = Object.create(c.prototype); return _regeneratorDefine2(u, "_invoke", function (r, n, o) { var i, c, u, f = 0, p = o || [], y = !1, G = { p: 0, n: 0, v: e, a: d, f: d.bind(e, 4), d: function d(t, r) { return i = t, c = 0, u = e, G.n = r, a; } }; function d(r, n) { for (c = r, u = n, t = 0; !y && f && !o && t < p.length; t++) { var o, i = p[t], d = G.p, l = i[2]; r > 3 ? (o = l === n) && (u = i[(c = i[4]) ? 5 : (c = 3, 3)], i[4] = i[5] = e) : i[0] <= d && ((o = r < 2 && d < i[1]) ? (c = 0, G.v = n, G.n = i[1]) : d < l && (o = r < 3 || i[0] > n || n > l) && (i[4] = r, i[5] = n, G.n = l, c = 0)); } if (o || r > 1) return a; throw y = !0, n; } return function (o, p, l) { if (f > 1) throw TypeError("Generator is already running"); for (y && 1 === p && d(p, l), c = p, u = l; (t = c < 2 ? e : u) || !y;) { i || (c ? c < 3 ? (c > 1 && (G.n = -1), d(c, u)) : G.n = u : G.v = u); try { if (f = 2, i) { if (c || (o = "next"), t = i[o]) { if (!(t = t.call(i, u))) throw TypeError("iterator result is not an object"); if (!t.done) return t; u = t.value, c < 2 && (c = 0); } else 1 === c && (t = i["return"]) && t.call(i), c < 2 && (u = TypeError("The iterator does not provide a '" + o + "' method"), c = 1); i = e; } else if ((t = (y = G.n < 0) ? u : r.call(n, G)) !== a) break; } catch (t) { i = e, c = 1, u = t; } finally { f = 1; } } return { value: t, done: y }; }; }(r, o, i), !0), u; } var a = {}; function Generator() {} function GeneratorFunction() {} function GeneratorFunctionPrototype() {} t = Object.getPrototypeOf; var c = [][n] ? t(t([][n]())) : (_regeneratorDefine2(t = {}, n, function () { return this; }), t), u = GeneratorFunctionPrototype.prototype = Generator.prototype = Object.create(c); function f(e) { return Object.setPrototypeOf ? Object.setPrototypeOf(e, GeneratorFunctionPrototype) : (e.__proto__ = GeneratorFunctionPrototype, _regeneratorDefine2(e, o, "GeneratorFunction")), e.prototype = Object.create(u), e; } return GeneratorFunction.prototype = GeneratorFunctionPrototype, _regeneratorDefine2(u, "constructor", GeneratorFunctionPrototype), _regeneratorDefine2(GeneratorFunctionPrototype, "constructor", GeneratorFunction), GeneratorFunction.displayName = "GeneratorFunction", _regeneratorDefine2(GeneratorFunctionPrototype, o, "GeneratorFunction"), _regeneratorDefine2(u), _regeneratorDefine2(u, o, "Generator"), _regeneratorDefine2(u, n, function () { return this; }), _regeneratorDefine2(u, "toString", function () { return "[object Generator]"; }), (_regenerator = function _regenerator() { return { w: i, m: f }; })(); }
+function _regeneratorDefine2(e, r, n, t) { var i = Object.defineProperty; try { i({}, "", {}); } catch (e) { i = 0; } _regeneratorDefine2 = function _regeneratorDefine(e, r, n, t) { function o(r, n) { _regeneratorDefine2(e, r, function (e) { return this._invoke(r, n, e); }); } r ? i ? i(e, r, { value: n, enumerable: !t, configurable: !t, writable: !t }) : e[r] = n : (o("next", 0), o("throw", 1), o("return", 2)); }, _regeneratorDefine2(e, r, n, t); }
+function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
+function _nonIterableRest() { throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method."); }
+function _unsupportedIterableToArray(r, a) { if (r) { if ("string" == typeof r) return _arrayLikeToArray(r, a); var t = {}.toString.call(r).slice(8, -1); return "Object" === t && r.constructor && (t = r.constructor.name), "Map" === t || "Set" === t ? Array.from(r) : "Arguments" === t || /^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t) ? _arrayLikeToArray(r, a) : void 0; } }
+function _arrayLikeToArray(r, a) { (null == a || a > r.length) && (a = r.length); for (var e = 0, n = Array(a); e < a; e++) n[e] = r[e]; return n; }
+function _iterableToArrayLimit(r, l) { var t = null == r ? null : "undefined" != typeof Symbol && r[Symbol.iterator] || r["@@iterator"]; if (null != t) { var e, n, i, u, a = [], f = !0, o = !1; try { if (i = (t = t.call(r)).next, 0 === l) { if (Object(t) !== t) return; f = !1; } else for (; !(f = (e = i.call(t)).done) && (a.push(e.value), a.length !== l); f = !0); } catch (r) { o = !0, n = r; } finally { try { if (!f && null != t["return"] && (u = t["return"](), Object(u) !== u)) return; } finally { if (o) throw n; } } return a; } }
+function _arrayWithHoles(r) { if (Array.isArray(r)) return r; }
+function asyncGeneratorStep(n, t, e, r, o, a, c) { try { var i = n[a](c), u = i.value; } catch (n) { return void e(n); } i.done ? t(u) : Promise.resolve(u).then(r, o); }
+function _asyncToGenerator(n) { return function () { var t = this, e = arguments; return new Promise(function (r, o) { var a = n.apply(t, e); function _next(n) { asyncGeneratorStep(a, r, o, _next, _throw, "next", n); } function _throw(n) { asyncGeneratorStep(a, r, o, _next, _throw, "throw", n); } _next(void 0); }); }; }
+function emitImpersonation() {
+  if (typeof window === "undefined") return;
+  window.dispatchEvent(new Event("powr-impersonation"));
+}
+function applyLiveSession(session, next) {
+  var _session$setSession;
+  (0, _session.writeStoredSession)(next);
+  session === null || session === void 0 || (_session$setSession = session.setSession) === null || _session$setSession === void 0 || _session$setSession.call(session, next.user, next.token, next.refreshToken || null);
+  emitImpersonation();
+}
+function adminSnapshot(session) {
+  var saved = (0, _storage.readImpersonator)();
+  if (saved !== null && saved !== void 0 && saved.token) return saved;
+  var stored = (0, _session.readStoredSession)();
+  return {
+    user: session !== null && session !== void 0 && session.token ? session.user : (stored === null || stored === void 0 ? void 0 : stored.user) || null,
+    token: (session === null || session === void 0 ? void 0 : session.token) || (stored === null || stored === void 0 ? void 0 : stored.token) || null,
+    refreshToken: session !== null && session !== void 0 && session.token ? session.refreshToken || null : (stored === null || stored === void 0 ? void 0 : stored.refreshToken) || null
+  };
+}
+
+/**
+ * Start or hop. The saved admin snapshot stays the original admin.
+ * Sends the admin token, not the account currently on screen.
+ */
+function enterLoginAs(_x) {
+  return _enterLoginAs.apply(this, arguments);
+}
+/** Host audit, then restore the admin session. Throws if the audit does not land. */
+function _enterLoginAs() {
+  _enterLoginAs = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee3(_ref) {
+    var _readImpersonator3;
+    var session, apiUrl, projectId, phoneOrEmail, admin, _yield$apiCall, ok, data;
+    return _regenerator().w(function (_context3) {
+      while (1) switch (_context3.n) {
+        case 0:
+          session = _ref.session, apiUrl = _ref.apiUrl, projectId = _ref.projectId, phoneOrEmail = _ref.phoneOrEmail;
+          admin = adminSnapshot(session);
+          if (admin.token) {
+            _context3.n = 1;
+            break;
+          }
+          throw new Error("Sign in as an admin first.");
+        case 1:
+          _context3.n = 2;
+          return (0, _auth.apiCall)(apiUrl, "/auth/impersonate", projectId, {
+            method: "POST",
+            headers: {
+              Authorization: "Bearer ".concat(admin.token)
+            },
+            body: {
+              phoneOrEmail: String(phoneOrEmail || "").trim()
+            }
+          });
+        case 2:
+          _yield$apiCall = _context3.v;
+          ok = _yield$apiCall.ok;
+          data = _yield$apiCall.data;
+          if (!(!ok || !(data !== null && data !== void 0 && data.token))) {
+            _context3.n = 3;
+            break;
+          }
+          throw new Error((data === null || data === void 0 ? void 0 : data.message) || "Could not open that account.");
+        case 3:
+          if (!((_readImpersonator3 = (0, _storage.readImpersonator)()) !== null && _readImpersonator3 !== void 0 && _readImpersonator3.token)) {
+            (0, _storage.writeImpersonator)(admin);
+          }
+          applyLiveSession(session, {
+            user: data.user,
+            token: data.token,
+            refreshToken: null
+          });
+          return _context3.a(2, data);
+      }
+    }, _callee3);
+  }));
+  return _enterLoginAs.apply(this, arguments);
+}
+function exitLoginAs(_x2) {
+  return _exitLoginAs.apply(this, arguments);
+}
+/**
+ * Best-effort exit audit. Reads the bearer before the caller clears storage.
+ * Sign out uses this so the host still records the leave.
+ */
+function _exitLoginAs() {
+  _exitLoginAs = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee4(_ref2) {
+    var session, apiUrl, projectId, admin, _yield$apiCall2, ok, data;
+    return _regenerator().w(function (_context4) {
+      while (1) switch (_context4.n) {
+        case 0:
+          session = _ref2.session, apiUrl = _ref2.apiUrl, projectId = _ref2.projectId;
+          admin = (0, _storage.readImpersonator)();
+          if (admin !== null && admin !== void 0 && admin.token) {
+            _context4.n = 1;
+            break;
+          }
+          return _context4.a(2);
+        case 1:
+          _context4.n = 2;
+          return (0, _auth.apiCall)(apiUrl, "/auth/impersonate/exit", projectId, {
+            method: "POST",
+            body: {}
+          });
+        case 2:
+          _yield$apiCall2 = _context4.v;
+          ok = _yield$apiCall2.ok;
+          data = _yield$apiCall2.data;
+          if (ok) {
+            _context4.n = 3;
+            break;
+          }
+          throw new Error((data === null || data === void 0 ? void 0 : data.message) || "Could not leave this account.");
+        case 3:
+          (0, _storage.clearImpersonator)();
+          applyLiveSession(session, {
+            user: admin.user,
+            token: admin.token,
+            refreshToken: admin.refreshToken || null
+          });
+        case 4:
+          return _context4.a(2);
+      }
+    }, _callee4);
+  }));
+  return _exitLoginAs.apply(this, arguments);
+}
+function notifyImpersonationExit(_ref3) {
+  var _readImpersonator;
+  var apiUrl = _ref3.apiUrl,
+    projectId = _ref3.projectId;
+  if (!((_readImpersonator = (0, _storage.readImpersonator)()) !== null && _readImpersonator !== void 0 && _readImpersonator.token)) return Promise.resolve({
+    ok: true,
+    skipped: true
+  });
+  var token = (0, _auth.getAuthToken)();
+  if (!token) return Promise.resolve({
+    ok: true,
+    skipped: true
+  });
+  return (0, _auth.apiCall)(apiUrl, "/auth/impersonate/exit", projectId, {
+    method: "POST",
+    headers: {
+      Authorization: "Bearer ".concat(token)
+    },
+    body: {}
+  });
+}
+function PowrLoginAsDialog(_ref4) {
+  var open = _ref4.open,
+    onClose = _ref4.onClose,
+    apiUrl = _ref4.apiUrl,
+    projectId = _ref4.projectId,
+    onStarted = _ref4.onStarted;
+  var session = (0, _session.usePowrSession)();
+  var _useState = (0, _react.useState)(""),
+    _useState2 = _slicedToArray(_useState, 2),
+    value = _useState2[0],
+    setValue = _useState2[1];
+  var _useState3 = (0, _react.useState)(""),
+    _useState4 = _slicedToArray(_useState3, 2),
+    error = _useState4[0],
+    setError = _useState4[1];
+  var _useState5 = (0, _react.useState)(false),
+    _useState6 = _slicedToArray(_useState5, 2),
+    busy = _useState6[0],
+    setBusy = _useState6[1];
+  if (!open) return null;
+  var submit = /*#__PURE__*/function () {
+    var _ref5 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee(event) {
+      var phoneOrEmail, _t;
+      return _regenerator().w(function (_context) {
+        while (1) switch (_context.p = _context.n) {
+          case 0:
+            event.preventDefault();
+            phoneOrEmail = value.trim();
+            if (phoneOrEmail) {
+              _context.n = 1;
+              break;
+            }
+            setError("Enter a phone number or email.");
+            return _context.a(2);
+          case 1:
+            setBusy(true);
+            setError("");
+            _context.p = 2;
+            _context.n = 3;
+            return enterLoginAs({
+              session: session,
+              apiUrl: apiUrl,
+              projectId: projectId,
+              phoneOrEmail: phoneOrEmail
+            });
+          case 3:
+            setValue("");
+            onStarted === null || onStarted === void 0 || onStarted();
+            onClose === null || onClose === void 0 || onClose();
+            _context.n = 5;
+            break;
+          case 4:
+            _context.p = 4;
+            _t = _context.v;
+            setError((_t === null || _t === void 0 ? void 0 : _t.message) || "Could not open that account.");
+          case 5:
+            _context.p = 5;
+            setBusy(false);
+            return _context.f(5);
+          case 6:
+            return _context.a(2);
+        }
+      }, _callee, null, [[2, 4, 5, 6]]);
+    }));
+    return function submit(_x3) {
+      return _ref5.apply(this, arguments);
+    };
+  }();
+  return /*#__PURE__*/_react["default"].createElement(_react["default"].Fragment, null, /*#__PURE__*/_react["default"].createElement("div", {
+    style: _styles.s.overlay,
+    onClick: busy ? undefined : onClose,
+    "aria-hidden": true
+  }), /*#__PURE__*/_react["default"].createElement("div", {
+    role: "dialog",
+    "aria-modal": "true",
+    "aria-labelledby": "powr-login-as-title",
+    style: {
+      position: "fixed",
+      zIndex: 70,
+      top: "20vh",
+      left: "50%",
+      transform: "translateX(-50%)",
+      width: "min(400px, calc(100vw - 32px))",
+      padding: 16,
+      borderRadius: _styles.v.radius,
+      border: "1px solid ".concat(_styles.v.border),
+      background: _styles.v.surface,
+      color: _styles.v.text,
+      fontFamily: _styles.v.font,
+      boxShadow: "0 10px 30px rgba(0,0,0,0.12)"
+    }
+  }, /*#__PURE__*/_react["default"].createElement("form", {
+    onSubmit: submit
+  }, /*#__PURE__*/_react["default"].createElement("div", {
+    id: "powr-login-as-title",
+    style: {
+      fontWeight: 600,
+      fontSize: 16,
+      marginBottom: 8
+    }
+  }, "Login as"), /*#__PURE__*/_react["default"].createElement("p", {
+    style: {
+      margin: "0 0 12px",
+      fontSize: 13,
+      color: _styles.v.muted
+    }
+  }, "Phone or email of an account on this app. Their password stays as it is."), /*#__PURE__*/_react["default"].createElement("input", {
+    autoFocus: true,
+    value: value,
+    onChange: function onChange(e) {
+      return setValue(e.target.value);
+    },
+    placeholder: "Phone or email",
+    autoComplete: "off",
+    style: {
+      width: "100%",
+      boxSizing: "border-box",
+      height: 40,
+      padding: "0 10px",
+      borderRadius: _styles.v.radius,
+      border: "1px solid ".concat(_styles.v.border),
+      background: _styles.v.bg,
+      color: _styles.v.text,
+      fontSize: 14
+    }
+  }), error ? /*#__PURE__*/_react["default"].createElement("div", {
+    style: {
+      marginTop: 8,
+      fontSize: 13,
+      color: _styles.v.danger
+    }
+  }, error) : null, /*#__PURE__*/_react["default"].createElement("div", {
+    style: {
+      display: "flex",
+      justifyContent: "flex-end",
+      gap: 8,
+      marginTop: 14
+    }
+  }, /*#__PURE__*/_react["default"].createElement("button", {
+    type: "button",
+    onClick: onClose,
+    disabled: busy,
+    style: _styles.s.menuItem(false)
+  }, "Cancel"), /*#__PURE__*/_react["default"].createElement("button", {
+    type: "submit",
+    disabled: busy,
+    style: _objectSpread(_objectSpread({}, _styles.s.menuItem(false)), {}, {
+      width: "auto",
+      background: _styles.v.primary,
+      color: _styles.v.primaryFg,
+      borderRadius: _styles.v.radius,
+      padding: "8px 12px"
+    })
+  }, busy ? "Opening…" : "View account")))));
+}
+
+/** Banner while an admin is viewing someone else. Exit restores the admin session. */
+function PowrImpersonationBar(_ref6) {
+  var apiUrl = _ref6.apiUrl,
+    projectId = _ref6.projectId;
+  var session = (0, _session.usePowrSession)();
+  var _useState7 = (0, _react.useState)(0),
+    _useState8 = _slicedToArray(_useState7, 2),
+    tick = _useState8[0],
+    setTick = _useState8[1];
+  var _useState9 = (0, _react.useState)(""),
+    _useState0 = _slicedToArray(_useState9, 2),
+    error = _useState0[0],
+    setError = _useState0[1];
+  var _useState1 = (0, _react.useState)(false),
+    _useState10 = _slicedToArray(_useState1, 2),
+    busy = _useState10[0],
+    setBusy = _useState10[1];
+  (0, _react.useEffect)(function () {
+    var refresh = function refresh() {
+      return setTick(function (n) {
+        return n + 1;
+      });
+    };
+    window.addEventListener("powr-impersonation", refresh);
+    window.addEventListener("storage", refresh);
+    return function () {
+      window.removeEventListener("powr-impersonation", refresh);
+      window.removeEventListener("storage", refresh);
+    };
+  }, []);
+  var snapshot = (0, _storage.readImpersonator)();
+  var stored = (0, _session.readStoredSession)();
+  var liveToken = session.token || (stored === null || stored === void 0 ? void 0 : stored.token);
+  var liveUser = session.token ? session.user : stored === null || stored === void 0 ? void 0 : stored.user;
+  if (!(snapshot !== null && snapshot !== void 0 && snapshot.token) || !liveToken) return null;
+  var leave = /*#__PURE__*/function () {
+    var _ref7 = _asyncToGenerator(/*#__PURE__*/_regenerator().m(function _callee2() {
+      var _t2;
+      return _regenerator().w(function (_context2) {
+        while (1) switch (_context2.p = _context2.n) {
+          case 0:
+            setBusy(true);
+            setError("");
+            _context2.p = 1;
+            _context2.n = 2;
+            return exitLoginAs({
+              session: session,
+              apiUrl: apiUrl,
+              projectId: projectId
+            });
+          case 2:
+            _context2.n = 4;
+            break;
+          case 3:
+            _context2.p = 3;
+            _t2 = _context2.v;
+            setError((_t2 === null || _t2 === void 0 ? void 0 : _t2.message) || "Could not leave this account.");
+          case 4:
+            _context2.p = 4;
+            setBusy(false);
+            return _context2.f(4);
+          case 5:
+            return _context2.a(2);
+        }
+      }, _callee2, null, [[1, 3, 4, 5]]);
+    }));
+    return function leave() {
+      return _ref7.apply(this, arguments);
+    };
+  }();
+  return /*#__PURE__*/_react["default"].createElement("div", {
+    role: "status",
+    "data-rev": tick,
+    style: {
+      display: "flex",
+      alignItems: "center",
+      gap: 12,
+      minHeight: 36,
+      padding: "6px 16px",
+      background: _styles.v.primary,
+      color: _styles.v.primaryFg,
+      fontSize: 13,
+      fontFamily: _styles.v.font
+    }
+  }, /*#__PURE__*/_react["default"].createElement("span", {
+    style: {
+      flex: 1
+    }
+  }, "Viewing as ", (0, _storage.viewAsLabel)(liveUser), error ? " \u2014 ".concat(error) : ""), /*#__PURE__*/_react["default"].createElement("button", {
+    type: "button",
+    onClick: leave,
+    disabled: busy,
+    style: {
+      border: "1px solid ".concat(_styles.v.primaryFg),
+      background: "transparent",
+      color: _styles.v.primaryFg,
+      borderRadius: _styles.v.radius,
+      padding: "4px 10px",
+      cursor: busy ? "wait" : "pointer",
+      fontSize: 13
+    }
+  }, busy ? "Leaving…" : "Exit"));
+}
+function canStartLoginAs(session) {
+  var _readImpersonator2;
+  return Boolean((session === null || session === void 0 ? void 0 : session.isPowrAdmin) || ((_readImpersonator2 = (0, _storage.readImpersonator)()) === null || _readImpersonator2 === void 0 ? void 0 : _readImpersonator2.token));
+}

package/dist/impersonate/storage.js

@@ -0,0 +1,43 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.POWR_IMPERSONATOR_KEY = void 0;
+exports.clearImpersonator = clearImpersonator;
+exports.readImpersonator = readImpersonator;
+exports.viewAsLabel = viewAsLabel;
+exports.writeImpersonator = writeImpersonator;
+/** Admin session kept while Login As is active. Separate from `auth-store`. */
+var POWR_IMPERSONATOR_KEY = exports.POWR_IMPERSONATOR_KEY = "powr-impersonator";
+function readImpersonator() {
+  if (typeof window === "undefined") return null;
+  try {
+    var raw = window.localStorage.getItem(POWR_IMPERSONATOR_KEY);
+    if (!raw) return null;
+    var parsed = JSON.parse(raw);
+    if (!(parsed !== null && parsed !== void 0 && parsed.token)) return null;
+    return {
+      user: parsed.user || null,
+      token: parsed.token,
+      refreshToken: parsed.refreshToken || null
+    };
+  } catch (_unused) {
+    return null;
+  }
+}
+function writeImpersonator(snapshot) {
+  if (typeof window === "undefined" || !(snapshot !== null && snapshot !== void 0 && snapshot.token)) return;
+  window.localStorage.setItem(POWR_IMPERSONATOR_KEY, JSON.stringify({
+    user: snapshot.user || null,
+    token: snapshot.token,
+    refreshToken: snapshot.refreshToken || null
+  }));
+}
+function clearImpersonator() {
+  if (typeof window === "undefined") return;
+  window.localStorage.removeItem(POWR_IMPERSONATOR_KEY);
+}
+function viewAsLabel(user) {
+  return (user === null || user === void 0 ? void 0 : user.phoneNumber) || (user === null || user === void 0 ? void 0 : user.email) || (user === null || user === void 0 ? void 0 : user.fullName) || "this account";
+}

package/dist/index.js

@@ -76,6 +76,12 @@ Object.defineProperty(exports, "POWR_DENSITIES", {
     return _theme.POWR_DENSITIES;
   }
 });
+Object.defineProperty(exports, "POWR_IMPERSONATOR_KEY", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.POWR_IMPERSONATOR_KEY;
+  }
+});
 Object.defineProperty(exports, "POWR_SCHEMES", {
   enumerable: true,
   get: function get() {
@@ -244,6 +250,18 @@ Object.defineProperty(exports, "PowrCalendarStrip", {
     return _calendar["default"];
   }
 });
+Object.defineProperty(exports, "PowrImpersonationBar", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.PowrImpersonationBar;
+  }
+});
+Object.defineProperty(exports, "PowrLoginAsDialog", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.PowrLoginAsDialog;
+  }
+});
 Object.defineProperty(exports, "PowrOnboardingProvider", {
   enumerable: true,
   get: function get() {
@@ -304,6 +322,18 @@ Object.defineProperty(exports, "buildPowrSsoUrl", {
     return _sso.buildPowrSsoUrl;
   }
 });
+Object.defineProperty(exports, "canStartLoginAs", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.canStartLoginAs;
+  }
+});
+Object.defineProperty(exports, "clearImpersonator", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.clearImpersonator;
+  }
+});
 Object.defineProperty(exports, "clearStoredSession", {
   enumerable: true,
   get: function get() {
@@ -328,12 +358,24 @@ Object.defineProperty(exports, "defineOptionalAppStep", {
     return _onboarding.defineOptionalAppStep;
   }
 });
+Object.defineProperty(exports, "enterLoginAs", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.enterLoginAs;
+  }
+});
 Object.defineProperty(exports, "evaluateSteps", {
   enumerable: true,
   get: function get() {
     return _onboarding.evaluateSteps;
   }
 });
+Object.defineProperty(exports, "exitLoginAs", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.exitLoginAs;
+  }
+});
 Object.defineProperty(exports, "fetchThemePreference", {
   enumerable: true,
   get: function get() {
@@ -496,6 +538,12 @@ Object.defineProperty(exports, "profileNameStep", {
     return _onboarding.profileNameStep;
   }
 });
+Object.defineProperty(exports, "readImpersonator", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.readImpersonator;
+  }
+});
 Object.defineProperty(exports, "readStoredSession", {
   enumerable: true,
   get: function get() {
@@ -556,6 +604,12 @@ Object.defineProperty(exports, "usePowrThemeHost", {
     return _theme.usePowrThemeHost;
   }
 });
+Object.defineProperty(exports, "viewAsLabel", {
+  enumerable: true,
+  get: function get() {
+    return _impersonate.viewAsLabel;
+  }
+});
 Object.defineProperty(exports, "writeStoredSession", {
   enumerable: true,
   get: function get() {
@@ -591,5 +645,6 @@ var _sessionMessages = require("./utils/sessionMessages");
 var _theme = require("./theme");
 var _session = require("./session");
 var _shell = require("./shell");
+var _impersonate = require("./impersonate");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }

package/dist/session/index.js

@@ -16,6 +16,7 @@ exports.usePowrSession = usePowrSession;
 exports.writeStoredSession = writeStoredSession;
 var _react = _interopRequireWildcard(require("react"));
 var _jwt = require("../utils/jwt");
+var _storage = require("../impersonate/storage");
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
 function _typeof(o) { "@babel/helpers - typeof"; return _typeof = "function" == typeof Symbol && "symbol" == typeof Symbol.iterator ? function (o) { return typeof o; } : function (o) { return o && "function" == typeof Symbol && o.constructor === Symbol && o !== Symbol.prototype ? "symbol" : typeof o; }, _typeof(o); }
 function _slicedToArray(r, e) { return _arrayWithHoles(r) || _iterableToArrayLimit(r, e) || _unsupportedIterableToArray(r, e) || _nonIterableRest(); }
@@ -183,6 +184,7 @@ function PowrSessionProvider(_ref2) {
   }, [controlled, persist]);
   var clear = (0, _react.useCallback)(function () {
     var _onChangeRef$current2;
+    (0, _storage.clearImpersonator)();
     if (!controlled) {
       setLocal(EMPTY);
       clearStoredSession();

package/dist/shell/PowrBaseAppWrapper.js

@@ -16,6 +16,7 @@ var _PowrOnboardingProvider = _interopRequireDefault(require("../onboarding/Powr
 var _useMediaQuery = _interopRequireDefault(require("../utils/useMediaQuery"));
 var _styles = require("./styles");
 var _parts = require("./parts");
+var _impersonate = require("../impersonate");
 var _excluded = ["theme", "presets", "scheme", "density", "preset", "persistTheme", "user", "token", "refreshToken", "onSessionChange", "onLogout"];
 function _interopRequireDefault(e) { return e && e.__esModule ? e : { "default": e }; }
 function _interopRequireWildcard(e, t) { if ("function" == typeof WeakMap) var r = new WeakMap(), n = new WeakMap(); return (_interopRequireWildcard = function _interopRequireWildcard(e, t) { if (!t && e && e.__esModule) return e; var o, i, f = { __proto__: null, "default": e }; if (null === e || "object" != _typeof(e) && "function" != typeof e) return f; if (o = t ? n : r) { if (o.has(e)) return o.get(e); o.set(e, f); } for (var _t in e) "default" !== _t && {}.hasOwnProperty.call(e, _t) && ((i = (o = Object.defineProperty) && Object.getOwnPropertyDescriptor(e, _t)) && (i.get || i.set) ? o(f, _t, i) : f[_t] = e[_t]); return f; })(e, t); }
@@ -82,6 +83,7 @@ function PowrBaseAppWrapper(props) {
   }, shell);
 }
 function Shell(_ref) {
+  var _readImpersonator;
   var _ref$mode = _ref.mode,
     mode = _ref$mode === void 0 ? "topbar" : _ref$mode,
     _ref$brand = _ref.brand,
@@ -136,6 +138,20 @@ function Shell(_ref) {
     _useState4 = _slicedToArray(_useState3, 2),
     settingsOpen = _useState4[0],
     setSettingsOpen = _useState4[1];
+  var _useState5 = (0, _react.useState)(false),
+    _useState6 = _slicedToArray(_useState5, 2),
+    loginAsOpen = _useState6[0],
+    setLoginAsOpen = _useState6[1];
+  var viewingAs = Boolean(((_readImpersonator = (0, _impersonate.readImpersonator)()) === null || _readImpersonator === void 0 ? void 0 : _readImpersonator.token) && session.token);
+  var chromeOffset = _styles.HEADER_HEIGHT + (viewingAs ? 36 : 0);
+  var leaveAndSignOut = (0, _react.useCallback)(function () {
+    var pending = (0, _impersonate.notifyImpersonationExit)({
+      apiUrl: apiUrl,
+      projectId: projectId
+    });
+    session.clear();
+    pending["catch"](function () {});
+  }, [apiUrl, projectId, session]);
   var closeNav = (0, _react.useCallback)(function () {
     return setNavOpen(false);
   }, []);
@@ -214,8 +230,20 @@ function Shell(_ref) {
   var showBurger = narrow && nav.length > 0;
   var content = /*#__PURE__*/_react["default"].createElement("div", {
     style: _styles.s.root
-  }, /*#__PURE__*/_react["default"].createElement("header", {
-    style: _styles.s.header
+  }, /*#__PURE__*/_react["default"].createElement("div", {
+    style: {
+      position: "sticky",
+      top: 0,
+      zIndex: 40
+    }
+  }, /*#__PURE__*/_react["default"].createElement(_impersonate.PowrImpersonationBar, {
+    apiUrl: apiUrl,
+    projectId: projectId
+  }), /*#__PURE__*/_react["default"].createElement("header", {
+    style: _objectSpread(_objectSpread({}, _styles.s.header), {}, {
+      position: "relative",
+      top: "auto"
+    })
   }, showBurger ? /*#__PURE__*/_react["default"].createElement("button", {
     type: "button",
     "aria-label": "Menu",
@@ -247,16 +275,22 @@ function Shell(_ref) {
     onOpenSettings: showThemeSettings ? function () {
       return setSettingsOpen(true);
     } : null,
-    onLogout: session.clear
+    onLoginAs: (0, _impersonate.canStartLoginAs)(session) ? function () {
+      return setLoginAsOpen(true);
+    } : null,
+    onLogout: leaveAndSignOut
   }) : /*#__PURE__*/_react["default"].createElement(Link, {
     href: loginHref,
     style: _objectSpread(_objectSpread({}, _styles.s.navItem(false, false)), {}, {
       border: "1px solid ".concat(_styles.v.border)
     })
-  }, "Sign in"))), /*#__PURE__*/_react["default"].createElement("div", {
+  }, "Sign in")))), /*#__PURE__*/_react["default"].createElement("div", {
     style: _styles.s.body
   }, vertical && nav.length ? /*#__PURE__*/_react["default"].createElement("aside", {
-    style: _styles.s.sidebar
+    style: _objectSpread(_objectSpread({}, _styles.s.sidebar), {}, {
+      top: chromeOffset,
+      height: "calc(100vh - ".concat(chromeOffset, "px)")
+    })
   }, /*#__PURE__*/_react["default"].createElement(_parts.NavList, {
     items: nav,
     pathname: pathname,
@@ -281,6 +315,13 @@ function Shell(_ref) {
     open: settingsOpen,
     onClose: closeSettings,
     host: syncThemeWithHost && session.token ? themeHost : null
+  }), /*#__PURE__*/_react["default"].createElement(_impersonate.PowrLoginAsDialog, {
+    open: loginAsOpen,
+    onClose: function onClose() {
+      return setLoginAsOpen(false);
+    },
+    apiUrl: apiUrl,
+    projectId: projectId
   }));
   if (onboarding === false || !session.user) return content;
   return /*#__PURE__*/_react["default"].createElement(_PowrOnboardingProvider["default"], _extends({

package/dist/shell/parts.js

@@ -99,6 +99,7 @@ function ProfileMenu(_ref3) {
     adminHref = _ref3.adminHref,
     Link = _ref3.Link,
     onOpenSettings = _ref3.onOpenSettings,
+    onLoginAs = _ref3.onLoginAs,
     onLogout = _ref3.onLogout,
     _ref3$extraItems = _ref3.extraItems,
     extraItems = _ref3$extraItems === void 0 ? [] : _ref3$extraItems;
@@ -171,7 +172,17 @@ function ProfileMenu(_ref3) {
     }, item.icon ? /*#__PURE__*/_react["default"].createElement("span", {
       "aria-hidden": true
     }, item.icon) : null, " ", item.label);
-  }), onOpenSettings ? /*#__PURE__*/_react["default"].createElement("button", {
+  }), onLoginAs ? /*#__PURE__*/_react["default"].createElement("button", {
+    type: "button",
+    role: "menuitem",
+    onClick: function onClick() {
+      setOpen(false);
+      onLoginAs();
+    },
+    style: _styles.s.menuItem(false)
+  }, /*#__PURE__*/_react["default"].createElement("span", {
+    "aria-hidden": true
+  }, "\u21AA"), " Login as") : null, onOpenSettings ? /*#__PURE__*/_react["default"].createElement("button", {
     type: "button",
     role: "menuitem",
     onClick: function onClick() {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "powr-sdk-web",
-    "version": "6.2.0",
+    "version": "6.3.0",
     "main": "dist/index.js",
     "files": [
         "dist"