I'm using JWTs for authentication. It would be good as a means of double checking the user's experience if an admin user could log in as a regular user.
One way I thought to implement this could be to test the hash of the login password against a master password hash when authenticating in addition to the user's password hash. Obviously, since you're entering this password into the browser, it's far less secure than the JWT secret key that you store on your server for signing. So, I'm guessing that this master password might want to be only enabled for a small set of users and only enabled for certain periods when this testing need be done.
Are there any standard ways of allowing an admin to log in as a regular user to view things from their perspective within a JWT auth setup? I can't seem to find any googling for them.