Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Release: Opensolr Search 4.5.0 Minor update available for module opensolr_search (4.5.0). Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Usage Milestone: Simplify Module simplify crossed 10,000 active installs. Usage Milestone: Views Reference Filter Module entityreference_filter crossed 10,000 active installs. Usage Milestone: Dropdown Language Module dropdown_language crossed 10,000 active installs. Usage Milestone: Paragraphs Browser Module paragraphs_browser crossed 10,000 active installs. Usage Milestone: OpenAPI Module openapi crossed 10,000 active installs. Usage Milestone: Decoupled Router Module decoupled_router crossed 10,000 active installs. Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

Node Authorize Link

711 sites Security covered Drupal 9–11
View on drupal.org

This module generates links that allow users, even anonymous ones, to view, edit, or delete content without logging in by using a special authorization key in the URL. It's particularly useful for providing access to content that requires moderation or for users who don't have site accounts.

Generates links for view, edit, or delete content without login.

Module maintains authorization key for every node and gives additional grants (view/edit/delete) to every user (anonymous too) who accesses page with correct key in URL. Module offers function node_authlink_get_url($node, $op = 'view') for generate absolute URL to selected operation (e.g. for e-mail notifications).

Authkeys are generated for every node (in configured content type) once for all operations. In content type form you can configure which operations to allow and automatic expiration of keys.

Limitations

Currently, the module decorates the "access_check.entity" to allow access if auth key is detected. This works well for viewing operations, but it can fail when editing or removing when other entities or permissions are involved. For example, editing nodes with media or with Content Moderation may fail.

This module works specially well to give access to content that's being moderated to people that don't even have a user in the site.

How to get keys?

Keys are stored in database, you can get them by these functions:

 131 /**
 132  * Loads key from NID.
 133  */
 134 function node_authlink_load_authkey($nid)

 140 /**
 141  * Get edit URL of specified node.
 142  * @param $node Node object or NID.
 143  * @param $op Operation to do with node. view, edit (default) or delete.
 144  */
 145 function node_authlink_get_url($node, $op = 'update')

If you want to use Rules (such as send auth URL to e-mail) you have to use PHP snippet with one of functions above.

Depends on

Dependencies of the latest stable release

  • node Drupal core

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
4
Tracked since
Jan 2025
Latest release
1 month ago
Releases (12 mo)
2
Maintenance
Active

Release Timeline

Releases

Version Type Core Release date
2.2.2 Stable 9–11 Jul 24, 2026
2.2.1 Stable 9–11 Nov 5, 2025
2.2.0 Stable 9–11 Mar 27, 2025
2.1.0 Stable 9–11 Jan 31, 2025