I tried different ways to generate the masquerade link programmatically, but they always lead to the correct url, but with an 'Access denied' error.
e.g.:
$user->toUrl('masquerade')->toString();
If i print this url on a page where there is also the masquerade link for the same user, (e.g. on the user/{uid} page), i notice that the link generated by the module has a different token than the link I created.
What am I doing wrong? It must be something stupid, as the link from the module does work as expected.
My Drupal core is at 8.6.4.
Thanks
Pieter
Active
2.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
If you are creating the link programmaticaly, include the CSFR token generated for that path as a token parameter.
This snipped below worked for me:
$csfr_token = \Drupal::getContainer()->get('csrf_token')->get("unmasquerade");
$url = Url::fromRoute('masquerade.unmasquerade', [], ['query' => ['token' => $csfr_token]]);
$output = Link::fromTextAndUrl(t('Unmasquerade'), $url)->toString();
Hope that helps.