Laravel Jetstream/Fortify/Inertia: Impersonate a user (Basic implementation)

EventServiceProvider.php

public function boot(): void
    {
        // Build out the impersonation event listeners - Otherwise we get a redirect to login if not setting the password_hash_sanctum when using sanctum.
        Event::listen(function (TakeImpersonation $event) {
            session()->put([
                'password_hash_sanctum' => $event->impersonated->getAuthPassword(),
            ]);
        });

        Event::listen(function (LeaveImpersonation $event) {
            session()->remove('password_hash_web');
            session()->put([
                'password_hash_sanctum' => $event->impersonator->getAuthPassword(),
            ]);
            Auth::setUser($event->impersonator);
        });
    }

gistfile1.txt

Composer package: https://github.com/404labfr/laravel-impersonate
Follow the installation instructions.

ImpersonateController.php

<?php

namespace App\Http\Controllers;

use App\Models\User;
use Illuminate\Http\Request;

class ImpersonateController extends Controller
{
    public function startImpersonating(Request $request)
    {
        if(! auth()->user()?->isAdmin()){
            abort(403);
        }

        $user = User::findOrFail($request->input('user_id'));

        auth()->user()->impersonate($user);

        return to_route('dashboard');
    }

    public function stopImpersonating(Request $request)
    {
        auth()->user()->leaveImpersonation();

        return to_route('dashboard');
    }
}

web.php

Route::post('start-impersonating', [ImpersonateController::class, 'startImpersonating'])->name('impersonating.start');
Route::post('stop-impersonating', [ImpersonateController::class, 'stopImpersonating'])->name('impersonating.stop');