Show HN: Prudent – Manage user impersonation requests for your support team
I built an app that helps to manage user impersonation requests. Think of it as the ability to create tickets like Jira, but with tighter integration with your auth system.
After talking to many developers, I realized many companies either have a user impersonation feature or plan to build one. The impersonation part is not complicated. What's tedious is the parts around impersonation - for e.g. managing and approving requests, logging user actions. Even though the idea of user impersonation sounds like a risk, but it is "a necessary evil". By having a proper app to track these requests, we mitigate the risks.
Currently, we support 2 types of auth integration: Supabase or Custom. For detailed information on integration, you can refer to https://getprudent.co/guides.
We plan to add more features including logging user actions when an impersonation session is in progress, more conditions more ticket approval, etc.
Regards, Prudent
Also, are there any plans to integrate with other popular auth systems like firebase? Understand there's custom auth option for that but it'd be better if firebase-auth users can just do minimal set up.
Once you've set up auth integration, in each approved ticket, the user can start a session by clicking a button. The subsequent flow depends on the type of integration. - If it is supabase, we will mint the token and redirect to the url specified in your settings with the token. - If it is custom integration, we will pass the ticket id to the url that you have specified. In your backend, you should handle the request by fetching the impersonation request details, authenticate the user accordingly, and return a redirect.