Skip to main content
Drupal is a registered trademark of Dries Buytaert
Release: OpenID Connect / OAuth client 3.0.0-alpha9 New alpha version released for module openid_connect (3.0.0-alpha9). Usage Milestone: Google Analytics Module google_analytics crossed 1,000 active installs. Release: Timelinr 1.0.1 Minor update available for module timelinr (1.0.1). Release: GraphQL Compose Codegen 1.1.2 Minor update available for module graphql_compose_codegen (1.1.2). Release: Mapy.com 1.1.3 Minor update available for module mapycom (1.1.3). Release: Ckeditor5 entity browser 3.0.3 Minor update available for module ckeditor5_entity_browser (3.0.3). Release: Ckeditor5 entity browser 3.0.1 Minor update available for module ckeditor5_entity_browser (3.0.1). Release: Ckeditor5 entity browser 3.0.2 Minor update available for module ckeditor5_entity_browser (3.0.2). Release: Teamleader Integration 4.0.2 Minor update available for module teamleader (4.0.2). Module Revived: Entityqueue Buttons 1.1.2 Module entityqueue_buttons updated after 8 months of inactivity (1.1.2).

Query Auth Params

No security coverage Drupal 9–11
View on drupal.org

This module allows you to share specific pages on your Drupal site with others by providing them with a unique URL containing secret query parameters. It acts as a basic access control to hide content from public view without requiring users to log in.

Sometimes you are working on an update to a views page, an article or a new feature on a page that you only want to share with a fellow developer, the customer or a friend. The catch here is that you don't want to give them access as registered users. You don’t want them to have access as authenticated users, you want them to have access only as anonymous users.

You simply want to share a secure link so they can review and comment on the update.

The Query Auth Params module does exactly that. It provides access to anonymous users by using specific query parameter values that you can use to "protect" the page(s) you want to hide from public view.

Let’s say you want to protect example.com/new-awesome-feature or example.com/new-awesome-page. With Query Auth Params you can add example.com/some-page?my_param_key=my_param_value and this page won’t be displayed unless the user has the full url with the correct query params.

You can even use it as a "mini" scheduling module or a user page firewall (/user/login, /user/password) as long as you know what you are doing.

Warning: This is not a security access module and should not be used as such. It provides basic access control for hiding simple pages from your website. Do not use this for advanced access scenarios etc.

Instructions:

  1. Install with composer as usual.
  2. Go to /admin/config/development/query_auth_params
  3. Add the page(s) you want to protect.
  4. Choose between 3 options: forever, once, until a specific datetime.

Depends on

Dependencies of the latest stable release

No dependencies recorded for this project.

Required by

Tracked projects that depend on this one

No tracked projects depend on this one yet.

Activity

Tracked releases
2
Tracked since
Oct 2025
Latest release
10 months ago
Releases (12 mo)
2 ▲ from 0
Maintenance
Slowing

Releases

Version Type Core Release date
1.2.2 Stable 9–11 Oct 16, 2025
1.2.x-dev Dev 9 Oct 16, 2025