Make Spot recordings public by default

Add an option to make Spot recordings public by default

Problem

We are running OpenReplay in a corporate environment behind an Identity-Aware Proxy (IAP) / firewall.

Since access to our OpenReplay instance is already restricted through the corporate authentication layer, Spot recordings are intended to be shared internally with other authenticated employees.

Currently, when creating/sharing a Spot recording, the recording needs to be made public explicitly. This adds an additional step to our internal workflow.

Current behavior

1. An employee accesses OpenReplay through the corporate IAP.
2. The employee creates a Spot recording.
3. The Spot recording is not public by default.
4. The employee needs to explicitly configure/share the recording as public before sharing the Spot link with other users.

Expected behavior

For self-hosted deployments, provide an administrator-controlled option to make Spot recordings public by default.

For example:

SPOT_PUBLIC_BY_DEFAULT=true

or an equivalent configuration option in the OpenReplay administration/settings UI.

When enabled:

1. An authenticated internal user creates a Spot recording.
2. The Spot recording is automatically created with public sharing enabled.
3. The user can immediately share the Spot link with other internal employees.

Use case

Our OpenReplay instance is deployed behind a corporate IAP/firewall. Users must authenticate through the corporate authentication layer before accessing the OpenReplay environment.

Because the OpenReplay instance is already protected at the network/authentication layer, requiring users to separately change the visibility of every Spot recording adds unnecessary friction to our internal workflow.

We would therefore like the ability for administrators to configure Spot recordings to be public by default.

Proposed configuration

Provide an administrator-controlled setting such as:

SPOT_PUBLIC_BY_DEFAULT=true

The default value should remain unchanged for existing installations.

Administrators who want this behavior can explicitly enable the setting.

Security consideration

This should not change the default behavior for OpenReplay installations.

The proposed setting should be opt-in and controlled by the administrator.

This is particularly useful for self-hosted deployments where OpenReplay is already protected by an organization's SSO, IAP, VPN, or corporate firewall.

Summary

Please consider adding an optional configuration that allows administrators of self-hosted OpenReplay deployments to make Spot recordings public by default.

This would simplify internal sharing workflows for organizations where access to the OpenReplay instance is already controlled by an external authentication/security layer.