feat: IAM impersonation support — isImpersonated flag + banner

- src/auth.js: fetchIamUser extract isImpersonated from response - src/routes/oidc.js: save isImpersonated to session - ui/index.js: isImpersonated in req.user - ui/routes/entries.js: pass isImpersonated to render - views/index.ejs: banner 'Режим имперсонации' - docs/PLAN-impersonation.md: план дальнейших шагов (двойной аудит)
2026-06-11 15:34:19 +04:00
parent 7b3dd8b4b3
commit a2cfd2c10f
6 changed files with 13 additions and 1 deletions
@@ -73,6 +73,7 @@ function createRouter({ auth, doubleCsrfProtection, generateCsrfToken, authLimit
          companyId:      iamData.companyId,
          companyName:    iamData.companyName,
          isAdmin:        iamData.isAdmin,
+          isImpersonated: iamData.isImpersonated,
          fio:            iamData.fio,
          profiles:       iamData.profiles,
        };