Validation of public links with security code

Smart OSH incorporates security code validation in the public links of MySmartOSH for anonymous pages. This improvement allows link rotation and invalidates old URLs when the code is changed, while also maintaining backwards compatibility with existing links if no code has been configured.

How it works

1. Anonymous pages allow access with or without a code in the URL, depending on their configuration.
2. When opening the link, the application queries the tenant’s anonymous configuration to obtain the expected code for that page.
3. If no code is configured, access with the old URL is allowed.
4. If a code is configured and matches exactly the one in the URL, the page is displayed normally.
5. If the code does not match or is missing from the URL when mandatory, access is blocked and redirected to an expired or invalid link page.
6. This validation is consistently applied in:
   1. Participation
   2. Accident notification
   3. Claim
   4. Satisfaction survey

Note

The code validation is performed in the Angular application and allows hiding or rotating the public link, but does not replace server-side access control.