Feature Request: cancellation of impersonation return to original user

[lostsnow]

Feature Request

Is your feature request related to a problem? Please describe.

Currently User A(admin) can impersonate user B(normal user), but after impersonation can not return to original user A

Describe the solution you'd like

Remeber the original user(session/cookie) for cancellation of impersonation

[clarkwinkelmann]

That would be nice, but this won't be possible without reworking how the extension works.

Right now it starts a completely new session as the target user, and there's no difference between an impersonation or regular session.

An ideal implementation would be one where we don't actually start a new session and just override the actor with a special flag. This could also solve the other issue that currently the impersonated user is shown online and the account owner could kick the impersonator out by terminating all sessions or changing password. But that's a bit more complicated to implement than the current solution.