Filament impersonate user action with exit banner

<?php

namespace App\Filament\Actions;

use App\Models\User;
use Filament\Actions\Action;
use Illuminate\Support\Facades\Auth;
use Illuminate\Support\Facades\Log;
use Illuminate\Support\HtmlString;

class ImpersonateAction
{
    public const SESSION_KEY = 'impersonator_id';

    public static function make(): Action
    {
        return Action::make('impersonate')
            ->icon('heroicon-o-identification')
            ->requiresConfirmation()
            ->modalDescription('You will be signed in as this user until you click "Return to my account".')
            // Hide it for yourself, for other admins, and while already impersonating.
            ->visible(fn (User $record): bool => auth()->user()?->role->value === 'admin'
                && $record->isNot(auth()->user())
                && $record->role->value !== 'admin'
                && ! session()->has(self::SESSION_KEY))
            ->action(function (User $record) {
                $admin = auth()->user();

                Log::info('impersonation.started', ['admin' => $admin->getKey(), 'target' => $record->getKey()]);

                session()->put(self::SESSION_KEY, $admin->getKey());
                Auth::login($record);
                session()->regenerate();

                return redirect('/account');
            });
    }

    /** Render hook content: a red bar shown only while impersonating. */
    public static function banner(): HtmlString
    {
        if (! session()->has(self::SESSION_KEY)) {
            return new HtmlString('');
        }

        $name = e(auth()->user()?->name);
        $url = e(route('impersonate.leave'));

        return new HtmlString(
            "<div style=\"background:#b91c1c;color:#fff;padding:.5rem 1rem;text-align:center\">"
            ."Viewing as {$name}. <a href=\"{$url}\" style=\"color:#fff;font-weight:600;text-decoration:underline\">Return to my account</a></div>"
        );
    }
}

<?php

namespace App\Http\Controllers;

use App\Filament\Actions\ImpersonateAction;
use App\Models\User;
use Illuminate\Http\RedirectResponse;
use Illuminate\Support\Facades\Auth;

// routes/web.php (must be reachable while signed in as the target user):
//   Route::get('/impersonate/leave', StopImpersonatingController::class)
//       ->middleware('auth')->name('impersonate.leave');
//
// Panel provider:
//   ->renderHook(PanelsRenderHook::BODY_START, fn () => ImpersonateAction::banner())

class StopImpersonatingController extends Controller
{
    public function __invoke(): RedirectResponse
    {
        $adminId = session()->pull(ImpersonateAction::SESSION_KEY);

        abort_if($adminId === null, 404);

        Auth::login(User::findOrFail($adminId));
        session()->regenerate();

        return redirect('/admin');
    }
}