Secure public access and e-signing

Understand public token routes and compatibility

Know which public paths are implemented and why the generated helper URL should be preferred.

Audience: Administrators and technical supportPermission: Delivery Note: ViewModule v1.0.0
Exact navigationUse the secure link generated on the Delivery Note admin page, email or PDF

What this guide covers

Know which public paths are implemented and why the generated helper URL should be preferred. This guide follows the supplied Delivery Note module’s live hooks, controller actions, model rules, views and stored side effects.

Exact step-by-step process

  1. Copy the generated secure link from the note detail page.
  2. Test it in a private browser session.
  3. Confirm the public view loads and the signing form posts to the supported sign route.
  4. Use configured route options only through an authorised deployment process.

Fields, choices and supported possibilities

  • Default view route option: delivery_note/public_view
  • Default sign route option: delivery_note/public_sign
  • Compatibility hyphen and controller aliases in routes.php
  • Query-token controller form used by current email/sign view

Code-backed validations and workflow rules

  • Public-route helper rejects unsafe aliases and values containing `admin/`, then falls back to defaults.
  • The live README notes underscore URLs are preferred for the target SaaS router.
  • Do not use `dead_public_*` methods as active endpoints.

Expected result and verification

  • Generated links resolve through the route/controller arrangement supported by the installed build.

Checks, security and troubleshooting

  • Do not hand-build a URL that exposes an incorrect controller path or drops the token.
Stay within the supported flowDo not force database values, expose secure tokens, bypass permission checks, replace a stored signature or invent a status or interface that the supplied code does not implement.