Add impersonation feature to user management

- Introduced an ImpersonationBar component for admin users to impersonate other users, enhancing user management capabilities.
- Updated the ProfileForm to include an option for allowing impersonation, with a description for clarity.
- Modified the DashboardLayout to conditionally display the impersonation bar based on user roles and cloud settings.
- Added database schema changes to support the new impersonation feature, including a new column for allowImpersonation in the user table.
- Implemented necessary API updates to handle impersonation actions and user data retrieval.

packages/server/src/lib/auth.ts

@@ -3,7 +3,7 @@ import * as bcrypt from "bcrypt";
 import { betterAuth } from "better-auth";
 import { drizzleAdapter } from "better-auth/adapters/drizzle";
 import { APIError } from "better-auth/api";
-import { apiKey, organization, twoFactor } from "better-auth/plugins";
+import { apiKey, organization, twoFactor, admin } from "better-auth/plugins";
 import { and, desc, eq } from "drizzle-orm";
 import { IS_CLOUD } from "../constants";
 import { db } from "../db";
@@ -187,6 +187,11 @@ const { handler, api } = betterAuth({
 				// required: true,
 				input: false,
 			},
+			allowImpersonation: {
+				fieldName: "allowImpersonation",
+				type: "boolean",
+				defaultValue: false,
+			},
 		},
 	},
 
@@ -214,12 +219,20 @@ const { handler, api } = betterAuth({
 				}
 			},
 		}),
+		...(IS_CLOUD
+			? [
+					admin({
+						adminUserIds: [process.env.USER_ADMIN_ID as string],
+					}),
+				]
+			: []),
 	],
 });
 
 export const auth = {
 	handler,
 	createApiKey: api.createApiKey,
+	listUsers: api.listUsers,
 };
 
 export const validateRequest = async (request: IncomingMessage) => {