PublicAreaDelivery Controller

Introduction

The PublicAreaDelivery controller handles the delivery of public areas to end users. A public area (e.g. a press portal or mediahub) is served through this controller, which resolves the area's configuration and renders the appropriate content — including media assets, access controls, and any security restrictions.

This controller is not typically called directly by application code; instead it serves as the backend for the public-facing URL that AdmiralCloud generates for each public area. However, understanding its security model is important when configuring who can access your published content.

Security measures

Access to publicarea can be limited using different measures.

IP AllowList

You can define which IPs should have access to your publicarea. Requests from other IP addresses will be blocked. IP AllowList takes precedence and will not check any other security measure.

`securitySettings: { auth: { ipWhiteList: { enabled: true } }, ipWhiteList: [{ cidr: "1.2.3.4/32" }, ...] }`

OAuth

You can use OAuth2 with our Authentication platform to authenticate users for your publicarea.

`securitySettings: { auth: { oauth: { enabled: true, clientId: CLIENT_ID_FOR_YOUR_PUBLICAREA } } }`

ExtAuth

TBC