Sharing link

A sharing link in Omniscol is a signed URL granting access to a resource without prior login:

• the timetable of a class or a teacher,
• a targeted entry screen, for example for availability,
• the Absence management module in read-only mode,
• a specific view for an external team (audit, communication).

For public timetables, access is read-only. Some internal sharing links can however allow a limited action, such as filling in a specific form. The typical case is the link for entering teacher availability: the school can send it to a teacher with a deadline, without creating an Omniscol login for them.

Security

Each link embeds a signed JWT. For web and API links, the signature depends on the account that generated the link and on the hash of its password. For iCal links, the verification hash is built on the same principle. Four consequences:

1. Mandatory expiration date — the link expires automatically on the chosen date. This is an important safeguard: no eternal links.
2. Invalidation on password change — if the bearer account changes its password (or resets it to the same value, which changes the random salt), all the links it generated are invalidated immediately.
3. Invalidation through the bearer account — if that account is deactivated or deleted, the links it carried stop working.
4. Limited scope — the link only opens the intended view or action. Do not describe it as global access to the account.

For collective distribution, use a clearly identified service account rather than a personal account. The service account becomes the administrative bearer of the issued links and can be rotated or deactivated if a sharing campaign must be invalidated.

Difference with an API token

Creating a link

The Sharing button appears on shareable screens (timetables, availability, absences). Click it, choose an expiration date, then copy the URL in the format you need.