8784: Add token to path (not query string) in download links.

Arvados-DCO-1.1-Signed-off-by: Tom Clegg <tom@curoverse.com>

diff --git a/apps/workbench/app/controllers/collections_controller.rb b/apps/workbench/app/controllers/collections_controller.rb
index 3752bec7bef1e4ee9f6c59f5d999d66b4e016af5..625a6a8f61792fd5f6f92fb0ffb8c3293dce0ec7 100644 (file)
--- a/apps/workbench/app/controllers/collections_controller.rb
+++ b/apps/workbench/app/controllers/collections_controller.rb
@@ -285,7 +285,7 @@ class CollectionsController < ApplicationController
   def download_link
     token = @search_sharing.first.api_token
     if Rails.configuration.keep_web_url || Rails.configuration.keep_web_download_url
-      keep_web_url(@object.uuid, nil, {query_token: token})
+      keep_web_url(@object.uuid, nil, {path_token: token})
     else
       collections_url + "/download/#{@object.uuid}/#{token}/"
     end