Verbb

Changelog

3.1.0 2026-08-14

{warning} Anonymous downloads that pass raw asset IDs (files[]) will stop working until you mint a signed token in Twig. Update frontend templates before upgrading — see Upgrading to signed downloads.

Added

  • Added access control for downloads: anonymous requests require a signed token; raw asset IDs are only allowed for logged-in users who can view each asset.
  • Added allowedVolumes and defaultTokenDuration settings (CP and config/squeeze.php).
  • Added signed download tokens via craft.squeeze.createToken() and craft.squeeze.getDownloadUrl() (accept asset IDs or Asset elements).

Changed

  • Archive filenames are now sanitized before use.
  • Security: the legacy anonymous files[]=<id> download URL no longer authorizes downloads on its own.

3.0.0 2024-10-25

Changed

  • Now requires Craft 5.0+.