Download Tokens
Secure, time-limited tokens that control access to your digital products and track download usage.
What are Download Tokens?
Download tokens are secure, cryptographically signed URLs that grant temporary access to your digital products. They act as digital keys that can be customized with expiration times, download limits, and customer metadata.
Example Token URL
https://continuata.io/download?token=ct_abc123def456ghi789Creating Tokens
Via Dashboard
- Navigate to your product page
- Click "Generate Download Token"
- Configure token settings (expiration, limits, customer info)
- Copy the generated download URL
- Share with your customer via email or customer portal
Via API
POST /api/products/{productId}/tokens
{
"customerEmail": "customer@example.com",
"expiresAt": "2025-02-01T00:00:00Z",
"maxDownloads": 3,
"metadata": {
"orderId": "order_123",
"customerName": "John Doe",
"licenseType": "standard"
}
}Token Configuration
Expiration Settings
24 Hours
Immediate downloads
30 Days
Default setting
1 Year
Long-term access
Download Limits
- Unlimited - Token can be used indefinitely until expiration
- Single Use - Token becomes invalid after one complete download
- Custom Limit - Specify exact number of allowed downloads
Customer Metadata
Attach custom data to tokens for analytics and customer service:
{
"customerEmail": "john@audiocompany.com",
"metadata": {
"orderId": "order_abc123",
"customerName": "John Doe",
"licenseType": "extended",
"source": "shopify_store",
"campaignId": "summer_sale_2025"
}
}Token Security
Cryptographic Signing
All tokens are cryptographically signed to prevent tampering and ensure authenticity.
Access Controls
Built-in Protection
- • Time-based expiration
- • Usage count tracking
- • Product version binding
- • Tamper detection
Optional Controls
- • IP address restrictions
- • Referrer validation
- • User agent filtering
- • Geographic restrictions
Token Management
Viewing Active Tokens
Monitor all active download tokens from your dashboard:
- View expiration dates and remaining uses
- Track download completion rates
- See customer information and metadata
- Monitor usage patterns and popular products
Token Revocation
Revoke tokens immediately if needed:
DELETE /api/tokens/{tokenId}Best Practices
✓ Recommended
- • Set reasonable expiration times (30 days default)
- • Include customer email for support
- • Add order ID for tracking
- • Use HTTPS for token delivery
- • Monitor token usage regularly
✗ Avoid
- • Sharing tokens publicly or in forums
- • Setting very long expiration times unnecessarily
- • Creating unlimited tokens for single purchases
- • Storing tokens in plain text logs
- • Reusing tokens across different customers
Automation Ready
Set up automated token generationvia platform integrations or build custom workflows with ourAPI.