genealabs/laravel-impersonator

Impersonate users in your Laravel and Nova apps.

13.0.0 2026-03-29 23:24 UTC

Requires

• php: ^8.2
• illuminate/config: ^11.0|^12.0|^13.0
• illuminate/console: ^11.0|^12.0|^13.0
• illuminate/contracts: ^11.0|^12.0|^13.0
• illuminate/http: ^11.0|^12.0|^13.0
• illuminate/routing: ^11.0|^12.0|^13.0
• illuminate/session: ^11.0|^12.0|^13.0
• illuminate/support: ^11.0|^12.0|^13.0
• illuminate/view: ^11.0|^12.0|^13.0

Requires (Dev)

• orchestra/testbench: ^9.0|^10.0|^11.0
• phpunit/phpunit: ^10.0|^11.0|^12.0

MIT

• GeneaLabs, LLC

README

Impersonator for Laravel

Supporting This Package

This is an MIT-licensed open source project with its ongoing development made possible by the support of the community. If you'd like to support this, and our other packages, please consider becoming a backer or sponsor on Patreon.

Pre-requisites

• Laravel 10.0+
• PHP 8.2+

Version Support Matrix

Laravel	PHP
10.x	8.2, 8.3, 8.4, 8.5
11.x	8.2, 8.3, 8.4, 8.5
12.x	8.2, 8.3, 8.4, 8.5
13.x	8.3, 8.4, 8.5

Installation

composer require genealabs/laravel-impersonator

Configuration

• genealabs-laravel-impersonator.layout: master blade layout view for your application (default layouts.app).
• genealabs-laravel-impersonator.content-section: name of content section in master layout blade view (default content).
• genealabs-laravel-impersonator.user-model: user model of your application (default config('auth.providers.users.model')).
• genealabs-laravel-impersonator.middleware: the middleware to use for the impersonatee routes (default: ['web', 'auth']). You may specify only or except parameters. E.g. ['web', 'auth', 'password.confirm' => ['except' => 'destroy']]

If you need to customize these settings:

php artisan impersonator:publish --config

Usage

1. Add trait GeneaLabs\LaravelImpersonator\Traits\Impersonatable to your user model.
2. Override trait method public function getCanImpersonateAttribute() : bool that determines if a given user can impersonate other users.
3. (optional) Override trait method public function getCanBeImpersonatedAttribute() : bool that determines if a given user can be impersonated.
4. Use route('impersonatees.index') to view a list of all impersonatable users. You could add something like the following to your menu:

@if ((auth()->user()->canImpersonate ?? false) && ! session('impersonator'))
    <a class="dropdown-item" href="{{ route('impersonatees.index') }}">Impersonator</a>
@endif

1. (optional) Add something like the following to your menu view to allow imporsonator to stop impersonating:

@if (session('impersonator'))
    <a href="{{ url('/logout') }}"
        class="dropdown-item"
        onclick="event.preventDefault(); document.getElementById('end-personation-session-form').submit();"
    >
        End Impersonation Session
    </a>
    <form action="{{ route('impersonatees.destroy', auth()->user()) }}"
        method="POST"
        style="display: none;"
        id="end-personation-session-form"
    >
        {{ csrf_field () }}
        {{ method_field ('DELETE') }}
    </form>
@else
    <a href="{!! route('logout') !!}"
        class="dropdown-item"
        onclick="event.preventDefault(); document.getElementById('logout-form').submit();">
        Logout
    </a>
    <form method="POST"
        action="{{ route('logout') }}"
        accept-charset="UTF-8"
        id="logout-form"
        style="display:none;"
    >
        {{ csrf_field () }}
    </form>
@endif

Customization

php artisan impersonator:publish --views

Credits

In large part prodded and inspired by LaraCasts' tutorial: https://laracasts.com/series/how-do-i/episodes/17. Thank you @JeffreyWay!