{% comment %}
  Admin/reseller impersonation banner.

  Standalone include -- maintainer-wired into
  baseTemplate/templates/baseTemplate/index.html (see other_integration).
  Needs "userManagement.context_processors.impersonation" registered in
  TEMPLATES[0]["OPTIONS"]["context_processors"]; renders nothing without it,
  because "impersonating" is then simply absent from every context.
{% endcomment %}
{% if impersonating %}
<div class="cp-impersonation-banner alert alert-warning d-flex flex-wrap align-items-center
            justify-content-center gap-2 mb-0 rounded-0 py-2 px-3 text-center" role="alert"
     id="cpImpersonationBanner">
  <i class="fas fa-user-secret" aria-hidden="true"></i>
  <span>
    You are logged in as <strong>{{ impersonationTargetName }}</strong>
    &mdash; return to your own account, <strong>{{ impersonatorName }}</strong>.
  </span>
  <button type="button" class="btn btn-sm btn-dark ms-2" id="cpStopImpersonation">
    Return to your account
  </button>
</div>
<script>
(function () {
  "use strict";
  var btn = document.getElementById("cpStopImpersonation");
  if (!btn) { return; }

  function csrfToken() {
    var meta = document.querySelector('meta[name="csrf-token"]');
    return meta ? meta.getAttribute("content") : "";
  }

  btn.addEventListener("click", function () {
    btn.disabled = true;
    var finish = function () { window.location.href = "/"; };
    fetch("/users/stopImpersonation", {
      method: "POST",
      credentials: "same-origin",
      headers: {
        "Content-Type": "application/json",
        "X-CSRFToken": csrfToken(),
        "X-Requested-With": "XMLHttpRequest"
      },
      body: "{}"
    }).then(finish, finish);
  });
}());
</script>
{% endif %}