Understand QR public token generation
This guide explains that how the 64-character public URL token is created and checked.
Where to goAutomatic record creation → Public signing URL
Before you start
- Use an authorised account and confirm the source CRM record or setting is correct.
- Follow the exact route shown above; do not force database values to imitate a completed action.
What this guide helps you do
Know how the 64-character public URL token is created and checked. These instructions follow the supplied module’s live hooks, controller, model, view and validation flow.
Follow these steps
- Generate a supported PDF.
- Go to the admin record.
- Use the public URL provided by the module; do not construct a token manually.
Fields and options
Action scopeKnow how the 64-character public URL token is created and checked.
Module version2.1.0
NavigationAutomatic record creation → Public signing URL
EvidenceVerify the stored record, status, output, email, event or log produced by the code path.
Rules and limits
- The model creates a lowercase 64-hex token from secure random bytes with a fallback and up to five uniqueness attempts.
- The public controller rejects tokens not matching exactly 64 lowercase hexadecimal characters.
Check it worked
- The requested record, output or setting is created or updated through the supported module flow.
- Any related status, count, email, audit/event, PDF/file or queue evidence agrees with the source action.
- An error message is investigated rather than bypassed.
Security, privacy and operational checks
- Apply least privilege and verify the correct customer, lead, sales document or recipient before processing.
- Protect public tokens, recipient data, IP/browser evidence, templates and exported files according to organisational policy.
- Test configuration changes with controlled records before production-wide use.
- Retain or delete evidence only under an authorised retention process.
Related guides
Was this guide useful?Your response is stored only in this browser.