Console Redesign Batch 1: dark-chrome shell, Tenants list, Dashboard

backend/internal/handler/super_admin.go

@@ -394,6 +394,11 @@ func (h *Handler) setTenantStatus(c echo.Context, action string) error {
 	if err != nil {
 		return c.JSON(http.StatusBadRequest, map[string]string{"error": "Invalid tenant ID"})
 	}
+	var body struct {
+		Reason string `json:"reason"`
+	}
+	//nolint:errcheck
+	_ = c.Bind(&body) // optional body; malformed/absent JSON leaves body.Reason == ""
 	current, err := h.Store.GetTenantStatus(c.Request().Context(), tenantID)
 	if err != nil {
 		return c.JSON(http.StatusInternalServerError, map[string]string{"error": "Failed to load tenant"})
@@ -414,7 +419,11 @@ func (h *Handler) setTenantStatus(c echo.Context, action string) error {
 		return writeErr(c, err)
 	}
 	adminID := uuid.MustParse(claims.UserID)
-	if err := h.Store.LogAdminAction(c.Request().Context(), adminID, action+"_tenant", "tenant", tenantID, map[string]interface{}{"from": current, "to": tr.to}, c.RealIP(), c.Request().UserAgent()); err != nil {
+	changes := map[string]interface{}{"from": current, "to": tr.to}
+	if body.Reason != "" {
+		changes["reason"] = body.Reason
+	}
+	if err := h.Store.LogAdminAction(c.Request().Context(), adminID, action+"_tenant", "tenant", tenantID, changes, c.RealIP(), c.Request().UserAgent()); err != nil {
 		log.Printf("Failed to log admin action: %v", err)
 	}
 	return c.JSON(http.StatusOK, map[string]string{"status": tr.to})
@@ -438,6 +447,11 @@ func (h *Handler) ImpersonateTenant(c echo.Context) error {
 	if err != nil {
 		return c.JSON(http.StatusBadRequest, map[string]string{"error": "Invalid tenant ID"})
 	}
+	var body struct {
+		Reason string `json:"reason"`
+	}
+	//nolint:errcheck
+	_ = c.Bind(&body)
 	status, err := h.Store.GetTenantStatus(c.Request().Context(), tenantID)
 	if err != nil {
 		return c.JSON(http.StatusInternalServerError, map[string]string{"error": "Failed to load tenant"})
@@ -457,7 +471,11 @@ func (h *Handler) ImpersonateTenant(c echo.Context) error {
 		return c.JSON(http.StatusInternalServerError, map[string]string{"error": "Failed to mint impersonation token"})
 	}
 	adminID := uuid.MustParse(claims.UserID)
-	if err := h.Store.LogAdminAction(c.Request().Context(), adminID, "impersonate_tenant", "tenant", tenantID, map[string]interface{}{"expires_at": expiresAt}, c.RealIP(), c.Request().UserAgent()); err != nil {
+	changes := map[string]interface{}{"expires_at": expiresAt}
+	if body.Reason != "" {
+		changes["reason"] = body.Reason
+	}
+	if err := h.Store.LogAdminAction(c.Request().Context(), adminID, "impersonate_tenant", "tenant", tenantID, changes, c.RealIP(), c.Request().UserAgent()); err != nil {
 		log.Printf("Failed to log admin action: %v", err)
 	}
 	return c.JSON(http.StatusOK, map[string]interface{}{

backend/internal/handler/super_admin_test.go

@@ -0,0 +1,163 @@
+package handler
+
+import (
+	"bytes"
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"testing"
+
+	"idento/backend/internal/models"
+
+	"github.com/google/uuid"
+	"github.com/labstack/echo/v4"
+)
+
+func TestSetTenantStatus_ReasonPersistedToAuditChanges(t *testing.T) {
+	e := echo.New()
+	tenantID := uuid.New()
+	adminID := uuid.New()
+	var capturedChanges map[string]interface{}
+
+	fs := &fakeStore{
+		getTenantStatus: func(id uuid.UUID) (string, error) {
+			if id == tenantID {
+				return "active", nil
+			}
+			return "", nil
+		},
+		updateTenantStatus: func(id uuid.UUID, status string) error {
+			return nil
+		},
+		logAdminAction: func(audID uuid.UUID, action, targetType string, targetID uuid.UUID, changes interface{}, ip, userAgent string) error {
+			capturedChanges = changes.(map[string]interface{})
+			return nil
+		},
+	}
+
+	h := &Handler{Store: fs}
+	body, _ := json.Marshal(map[string]string{"reason": "Spring Summit 2026, approved by JR"})
+	req := httptest.NewRequest(http.MethodPost, "/api/super-admin/tenants/"+tenantID.String()+"/suspend", bytes.NewReader(body))
+	req.Header.Set("Content-Type", "application/json")
+	rec := httptest.NewRecorder()
+	c := e.NewContext(req, rec)
+	c.SetParamNames("id")
+	c.SetParamValues(tenantID.String())
+	c.Set("user", &models.JWTCustomClaims{
+		UserID:   adminID.String(),
+		TenantID: uuid.New().String(),
+		Role:     "admin",
+	})
+
+	if err := h.SuspendTenant(c); err != nil {
+		t.Fatalf("SuspendTenant returned error: %v", err)
+	}
+	if rec.Code != http.StatusOK {
+		t.Fatalf("expected 200, got %d: %s", rec.Code, rec.Body.String())
+	}
+	if capturedChanges == nil {
+		t.Fatalf("expected changes to be captured, got nil")
+	}
+	if capturedChanges["reason"] != "Spring Summit 2026, approved by JR" {
+		t.Fatalf("expected reason in audit changes, got %#v", capturedChanges)
+	}
+	if capturedChanges["from"] != "active" || capturedChanges["to"] != "suspended" {
+		t.Fatalf("expected from/to preserved alongside reason, got %#v", capturedChanges)
+	}
+}
+
+func TestSetTenantStatus_NoBodyStillWorks(t *testing.T) {
+	e := echo.New()
+	tenantID := uuid.New()
+	adminID := uuid.New()
+	var capturedChanges map[string]interface{}
+
+	fs := &fakeStore{
+		getTenantStatus: func(id uuid.UUID) (string, error) {
+			if id == tenantID {
+				return "suspended", nil
+			}
+			return "", nil
+		},
+		updateTenantStatus: func(id uuid.UUID, status string) error {
+			return nil
+		},
+		logAdminAction: func(audID uuid.UUID, action, targetType string, targetID uuid.UUID, changes interface{}, ip, userAgent string) error {
+			capturedChanges = changes.(map[string]interface{})
+			return nil
+		},
+	}
+
+	h := &Handler{Store: fs}
+	req := httptest.NewRequest(http.MethodPost, "/api/super-admin/tenants/"+tenantID.String()+"/reactivate", nil)
+	rec := httptest.NewRecorder()
+	c := e.NewContext(req, rec)
+	c.SetParamNames("id")
+	c.SetParamValues(tenantID.String())
+	c.Set("user", &models.JWTCustomClaims{
+		UserID:   adminID.String(),
+		TenantID: uuid.New().String(),
+		Role:     "admin",
+	})
+
+	if err := h.ReactivateTenant(c); err != nil {
+		t.Fatalf("ReactivateTenant returned error: %v", err)
+	}
+	if rec.Code != http.StatusOK {
+		t.Fatalf("expected 200, got %d: %s", rec.Code, rec.Body.String())
+	}
+	if capturedChanges == nil {
+		t.Fatalf("expected logAdminAction to be invoked with captured changes, got nil")
+	}
+	if _, hasReason := capturedChanges["reason"]; hasReason {
+		t.Fatalf("expected no reason key when body omits it, got %#v", capturedChanges)
+	}
+}
+
+func TestImpersonateTenant_ReasonPersistedToAuditChanges(t *testing.T) {
+	t.Setenv("JWT_SECRET", "test-secret")
+	e := echo.New()
+	tenantID := uuid.New()
+	adminID := uuid.New()
+	var capturedChanges map[string]interface{}
+
+	fs := &fakeStore{
+		getTenantStatus: func(id uuid.UUID) (string, error) {
+			if id == tenantID {
+				return "active", nil
+			}
+			return "", nil
+		},
+		logAdminAction: func(audID uuid.UUID, action, targetType string, targetID uuid.UUID, changes interface{}, ip, userAgent string) error {
+			capturedChanges = changes.(map[string]interface{})
+			return nil
+		},
+	}
+
+	h := &Handler{Store: fs}
+	body, _ := json.Marshal(map[string]string{"reason": "Reproduce badge-print bug for support ticket #4821"})
+	req := httptest.NewRequest(http.MethodPost, "/api/super-admin/tenants/"+tenantID.String()+"/impersonate", bytes.NewReader(body))
+	req.Header.Set("Content-Type", "application/json")
+	rec := httptest.NewRecorder()
+	c := e.NewContext(req, rec)
+	c.SetParamNames("id")
+	c.SetParamValues(tenantID.String())
+	c.Set("user", &models.JWTCustomClaims{
+		UserID:   adminID.String(),
+		TenantID: uuid.New().String(),
+		Role:     "admin",
+	})
+
+	if err := h.ImpersonateTenant(c); err != nil {
+		t.Fatalf("ImpersonateTenant returned error: %v", err)
+	}
+	if rec.Code != http.StatusOK {
+		t.Fatalf("expected 200, got %d: %s", rec.Code, rec.Body.String())
+	}
+	if capturedChanges == nil {
+		t.Fatalf("expected changes to be captured, got nil")
+	}
+	if capturedChanges["reason"] != "Reproduce badge-print bug for support ticket #4821" {
+		t.Fatalf("expected reason in audit changes, got %#v", capturedChanges)
+	}
+}