Drupal is a registered trademark of Dries Buytaert
drupal 11.3.7 Update released for Drupal core (11.3.7)! drupal 11.2.11 Update released for Drupal core (11.2.11)! drupal 10.6.7 Update released for Drupal core (10.6.7)! drupal 10.5.9 Update released for Drupal core (10.5.9)! cms 2.1.1 Update released for Drupal core (2.1.1)! drupal 11.3.6 Update released for Drupal core (11.3.6)! drupal 10.6.6 Update released for Drupal core (10.6.6)! cms 2.1.0 Update released for Drupal core (2.1.0)! bootstrap 8.x-3.40 Minor update available for theme bootstrap (8.x-3.40). menu_link_attributes 8.x-1.7 Minor update available for module menu_link_attributes (8.x-1.7). eca 3.1.1 Minor update available for module eca (3.1.1). layout_paragraphs 2.1.3 Minor update available for module layout_paragraphs (2.1.3). ai 1.3.3 Minor update available for module ai (1.3.3). ai 1.2.14 Minor update available for module ai (1.2.14). node_revision_delete 2.0.3 Minor update available for module node_revision_delete (2.0.3). moderated_content_bulk_publish 2.0.52 Minor update available for module moderated_content_bulk_publish (2.0.52). klaro 3.0.10 Minor update available for module klaro (3.0.10). klaro 3.0.9 Minor update available for module klaro (3.0.9). layout_paragraphs 2.1.2 Minor update available for module layout_paragraphs (2.1.2). geofield_map 11.1.8 Minor update available for module geofield_map (11.1.8).

Sometimes you are working on an update to a views page, an article or a new feature on a page that you only want to share with a fellow developer, the customer or a friend. The catch here is that you don't want to give them access as registered users. You don’t want them to have access as authenticated users, you want them to have access only as anonymous users.

You simply want to share a secure link so they can review and comment on the update.

The Query Auth Params module does exactly that. It provides access to anonymous users by using specific query parameter values that you can use to "protect" the page(s) you want to hide from public view.

Let’s say you want to protect example.com/new-awesome-feature or example.com/new-awesome-page. With Query Auth Params you can add example.com/some-page?my_param_key=my_param_value and this page won’t be displayed unless the user has the full url with the correct query params.

You can even use it as a "mini" scheduling module or a user page firewall (/user/login, /user/password) as long as you know what you are doing.

Warning: This is not a security access module and should not be used as such. It provides basic access control for hiding simple pages from your website. Do not use this for advanced access scenarios etc.

Instructions:

  1. Install with composer as usual.
  2. Go to /admin/config/development/query_auth_params
  3. Add the page(s) you want to protect.
  4. Choose between 3 options: forever, once, until a specific datetime.

Activity

Total releases
2
First release
Oct 2025
Latest release
6 months ago
Release cadence
0 days
Stability
50% stable

Releases

Version Type Release date
1.2.2 Stable Oct 16, 2025
1.2.x-dev Dev Oct 16, 2025