feat: implement admin authentication services and tenant impersonation logic

2026-06-16 22:33:02 +08:00
parent 5cdbd36999
commit c09d3723c3
2 changed files with 4 additions and 2 deletions
--- a/src/impersonate/impersonate.service.ts
+++ b/src/impersonate/impersonate.service.ts
@@ -15,7 +15,7 @@ export class ImpersonateService {
    private readonly audit: AuditService,
  ) {
    // Use the MAIN API's JWT secret so the token works with the tenant API
-    this.mainJwtSecret = this.config.get<string>('JWT_SECRET', 'dev-jwt-secret-not-for-production');
+    this.mainJwtSecret = this.config.get<string>('MAIN_API_JWT_SECRET', 'your-secret-key');
  }

  async startImpersonation(tenantId: string, adminId: string, adminName: string) {