Fixed #4303

Author: lukeholder

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 - Fixed a bug where fulfilling an order with purchasables in different inventory locations would only fulfil items from one location. ([#4299](https://github.com/craftcms/commerce/issues/4299))
 - Fixed a PHP error that could occur when applying project config changes after updating.
+- PDF download URLs now use the `code` query param instead of `token`. Existing URLs with `token` can be redirected via a server rewrite rule (see [upgrade notes](https://gist.github.com/lukeholder/7605ee8dbb0cbde305ba86bc05747315) [#4303](https://github.com/craftcms/commerce/issues/4303)).
 
 ## 5.6.5 - 2026-05-14
 

src/controllers/DownloadsController.php

@@ -82,7 +82,7 @@ public function actionPdf(): Response
         $pdfHandle = $this->request->getQueryParam('pdfHandle');
         $option = $this->request->getQueryParam('option', '');
         $inline = (bool) $this->request->getQueryParam('inline', false);
-        $token = $this->request->getQueryParam('token');
+        $token = $this->request->getQueryParam('code');
 
         if (!$number) {
             throw new BadRequestHttpException('Order number required');

src/services/Pdfs.php

@@ -493,7 +493,7 @@ public function getPdfUrl(Order $order, string $option = null, string $pdfHandle
         // Build the URL parameters
         $params = [
             'number' => $order->number,
-            'token' => $token,
+            'code' => $token,
         ];
 
         if ($pdfHandle !== null) {