[RELEASE] v3.2.2-beta (#270)

Co-authored-by: Tommy Johnston <tommy@timmygstudios.com>

LICENSE

@@ -1,40 +1,190 @@
-Kyantech-Permissive License (Based on BSD 2-Clause)
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
 
-Copyright (c) 2025, Daniel Luiz Alves (danielalves96) - Kyantech Solutions
-All rights reserved.
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
-Redistribution and use in source and binary forms, with or without
-modification, are permitted for any purpose — private, commercial,
-educational, governmental — **fully free and unrestricted**, provided
-that the following conditions are met:
+   1. Definitions.
 
-1. Redistributions of source code must retain the above copyright
-   notice, this list of conditions, and the following disclaimer.
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
 
-2. Redistributions in binary form must reproduce the above copyright
-   notice, this list of conditions, and the following disclaimer in the
-   documentation and/or other materials provided with the distribution.
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
 
-3. **If this software (or derivative works) is used in any public-facing
-   interface** — such as websites, apps, dashboards, admin panels, or
-   similar — a **simple credit** must appear in the footer or similar
-   location. The credit text should read:
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
 
-      > “Powered by Kyantech Solutions · https://kyantech.com.br”
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
 
-   This credit must be reasonably visible but **must not interfere** with
-   your UI, branding, or user experience. You may style it to match your
-   own design and choose its size, placement, or color.
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
 
----
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
 
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
-ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
-OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2025 Daniel Luiz Alves (danielalves96) - Kyantech Solutions, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

README.md

@@ -6,6 +6,17 @@
 
 **Palmr.** is a **flexible** and **open-source** alternative to file transfer services like **WeTransfer**, **SendGB**, **Send Anywhere**, and **Files.fm**.
 
+<div align="center">
+  <div style="background: linear-gradient(135deg, #ff4757, #ff3838); padding: 20px; border-radius: 12px; margin: 20px 0; box-shadow: 0 4px 15px rgba(255, 71, 87, 0.3); border: 2px solid #ff3838;">
+    <h3 style="color: white; margin: 0 0 10px 0; font-size: 18px; font-weight: bold;">
+      ⚠️ BETA VERSION
+    </h3>
+    <p style="color: white; margin: 0; font-size: 14px; opacity: 0.95;">
+      <strong>This project is currently in beta phase.</strong><br>
+      Not recommended for production environments.
+    </p>
+  </div>
+</div>
 
 🔗 **For detailed documentation visit:** [Palmr. - Documentation](https://palmr.kyantech.com.br)
 

apps/docs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palmr-docs",
-  "version": "3.2.1-beta",
+  "version": "3.2.2-beta",
   "description": "Docs for Palmr",
   "private": true,
   "author": "Daniel Luiz Alves <daniel@kyantech.com.br>",

apps/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palmr-api",
-  "version": "3.2.1-beta",
+  "version": "3.2.2-beta",
   "description": "API for Palmr",
   "private": true,
   "author": "Daniel Luiz Alves <daniel@kyantech.com.br>",

apps/server/src/modules/file/controller.ts

@@ -1,3 +1,4 @@
+import bcrypt from "bcryptjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 import { env } from "../../env";
@@ -183,6 +184,7 @@ export class FileController {
         objectName: string;
       };
       const objectName = decodeURIComponent(encodedObjectName);
+      const { password } = request.query as { password?: string };
 
       if (!objectName) {
         return reply.status(400).send({ error: "The 'objectName' parameter is required." });
@@ -193,6 +195,51 @@ export class FileController {
       if (!fileRecord) {
         return reply.status(404).send({ error: "File not found." });
       }
+
+      let hasAccess = false;
+
+      console.log("Requested file with password " + password);
+
+      const shares = await prisma.share.findMany({
+        where: {
+          files: {
+            some: {
+              id: fileRecord.id,
+            },
+          },
+        },
+        include: {
+          security: true,
+        },
+      });
+
+      for (const share of shares) {
+        if (!share.security.password) {
+          hasAccess = true;
+          break;
+        } else if (password) {
+          const isPasswordValid = await bcrypt.compare(password, share.security.password);
+          if (isPasswordValid) {
+            hasAccess = true;
+            break;
+          }
+        }
+      }
+
+      if (!hasAccess) {
+        try {
+          await request.jwtVerify();
+          const userId = (request as any).user?.userId;
+          if (userId && fileRecord.userId === userId) {
+            hasAccess = true;
+          }
+        } catch (err) {}
+      }
+
+      if (!hasAccess) {
+        return reply.status(401).send({ error: "Unauthorized access to file." });
+      }
+
       const fileName = fileRecord.name;
       const expires = parseInt(env.PRESIGNED_URL_EXPIRATION);
       const url = await this.fileService.getPresignedGetUrl(objectName, expires, fileName);

apps/server/src/modules/file/routes.ts

@@ -108,7 +108,6 @@ export async function fileRoutes(app: FastifyInstance) {
   app.get(
     "/files/:objectName/download",
     {
-      preValidation,
       schema: {
         tags: ["File"],
         operationId: "getDownloadUrl",
@@ -117,6 +116,9 @@ export async function fileRoutes(app: FastifyInstance) {
         params: z.object({
           objectName: z.string().min(1, "The objectName is required"),
         }),
+        querystring: z.object({
+          password: z.string().optional().describe("Share password if required"),
+        }),
         response: {
           200: z.object({
             url: z.string().describe("The download URL"),

apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palmr-web",
-  "version": "3.2.1-beta",
+  "version": "3.2.2-beta",
   "description": "Frontend for Palmr",
   "private": true,
   "author": "Daniel Luiz Alves <daniel@kyantech.com.br>",

apps/web/src/app/(shares)/s/[alias]/components/files-table.tsx

@@ -30,6 +30,7 @@ interface ShareFilesTableProps {
   onDownloadFolder?: (folderId: string, folderName: string) => Promise<void>;
   onNavigateToFolder?: (folderId: string) => void;
   enableNavigation?: boolean;
+  sharePassword?: string;
 }
 
 export function ShareFilesTable({
@@ -39,6 +40,7 @@ export function ShareFilesTable({
   onDownloadFolder,
   onNavigateToFolder,
   enableNavigation = false,
+  sharePassword,
 }: ShareFilesTableProps) {
   const t = useTranslations();
   const [isPreviewOpen, setIsPreviewOpen] = useState(false);
@@ -213,7 +215,14 @@ export function ShareFilesTable({
         </Table>
       </div>
 
-      {selectedFile && <FilePreviewModal isOpen={isPreviewOpen} onClose={handleClosePreview} file={selectedFile} />}
+      {selectedFile && (
+        <FilePreviewModal
+          isOpen={isPreviewOpen}
+          onClose={handleClosePreview}
+          file={selectedFile}
+          sharePassword={sharePassword}
+        />
+      )}
     </div>
   );
 }

apps/web/src/app/(shares)/s/[alias]/components/share-details.tsx

@@ -46,7 +46,7 @@ interface Folder {
   };
 }
 
-interface ShareDetailsPropsExtended extends Omit<ShareDetailsProps, "onBulkDownload" | "password"> {
+interface ShareDetailsPropsExtended extends Omit<ShareDetailsProps, "onBulkDownload"> {
   onBulkDownload?: () => Promise<void>;
   onSelectedItemsBulkDownload?: (files: File[], folders: Folder[]) => Promise<void>;
   folders: Folder[];
@@ -60,6 +60,7 @@ interface ShareDetailsPropsExtended extends Omit<ShareDetailsProps, "onBulkDownl
 
 export function ShareDetails({
   share,
+  password,
   onDownload,
   onBulkDownload,
   onSelectedItemsBulkDownload,
@@ -186,6 +187,7 @@ export function ShareDetails({
             setSelectedFile(null);
           }}
           file={selectedFile}
+          sharePassword={password}
         />
       )}
     </>

apps/web/src/app/(shares)/s/[alias]/hooks/use-public-share.ts

@@ -232,6 +232,7 @@ export function usePublicShare() {
       await downloadShareFolderWithQueue(folderId, folderName, share.files || [], share.folders || [], {
         silent: true,
         showToasts: false,
+        sharePassword: password,
       });
     } catch (error) {
       console.error("Error downloading folder:", error);
@@ -253,6 +254,7 @@ export function usePublicShare() {
           downloadFileWithQueue(objectName, fileName, {
             silent: true,
             showToasts: false,
+            sharePassword: password,
           }),
           {
             loading: t("share.messages.downloadStarted"),
@@ -320,9 +322,15 @@ export function usePublicShare() {
       }
 
       toast.promise(
-        bulkDownloadShareWithQueue(allItems, share.files || [], share.folders || [], zipName, undefined, true).then(
-          () => {}
-        ),
+        bulkDownloadShareWithQueue(
+          allItems,
+          share.files || [],
+          share.folders || [],
+          zipName,
+          undefined,
+          true,
+          password
+        ).then(() => {}),
         {
           loading: t("shareManager.creatingZip"),
           success: t("shareManager.zipDownloadSuccess"),
@@ -387,9 +395,15 @@ export function usePublicShare() {
       const zipName = `${share.name || t("shareManager.defaultShareName")}-selected.zip`;
 
       toast.promise(
-        bulkDownloadShareWithQueue(allItems, share.files || [], share.folders || [], zipName, undefined, false).then(
-          () => {}
-        ),
+        bulkDownloadShareWithQueue(
+          allItems,
+          share.files || [],
+          share.folders || [],
+          zipName,
+          undefined,
+          false,
+          password
+        ).then(() => {}),
         {
           loading: t("shareManager.creatingZip"),
           success: t("shareManager.zipDownloadSuccess"),

apps/web/src/app/(shares)/s/[alias]/page.tsx

@@ -43,6 +43,7 @@ export default function PublicSharePage() {
           {share && (
             <ShareDetails
               share={share}
+              password={password}
               onDownload={handleDownload}
               onBulkDownload={handleBulkDownload}
               onSelectedItemsBulkDownload={handleSelectedItemsBulkDownload}

apps/web/src/app/api/(proxy)/files/download/[...objectPath]/route.ts

@@ -8,7 +8,9 @@ export async function GET(req: NextRequest, { params }: { params: Promise<{ obje
   const { objectPath } = await params;
   const cookieHeader = req.headers.get("cookie");
   const objectName = objectPath.join("/");
-  const url = `${API_BASE_URL}/files/${encodeURIComponent(objectName)}/download`;
+  const searchParams = req.nextUrl.searchParams;
+  const queryString = searchParams.toString();
+  const url = `${API_BASE_URL}/files/${encodeURIComponent(objectName)}/download${queryString ? `?${queryString}` : ""}`;
 
   const apiRes = await fetch(url, {
     method: "GET",

apps/web/src/components/modals/file-preview-modal.tsx

@@ -20,11 +20,18 @@ interface FilePreviewModalProps {
     description?: string;
   };
   isReverseShare?: boolean;
+  sharePassword?: string;
 }
 
-export function FilePreviewModal({ isOpen, onClose, file, isReverseShare = false }: FilePreviewModalProps) {
+export function FilePreviewModal({
+  isOpen,
+  onClose,
+  file,
+  isReverseShare = false,
+  sharePassword,
+}: FilePreviewModalProps) {
   const t = useTranslations();
-  const previewState = useFilePreview({ file, isOpen, isReverseShare });
+  const previewState = useFilePreview({ file, isOpen, isReverseShare, sharePassword });
 
   return (
     <Dialog open={isOpen} onOpenChange={onClose}>

apps/web/src/hooks/use-file-preview.ts

@@ -27,9 +27,10 @@ interface UseFilePreviewProps {
   };
   isOpen: boolean;
   isReverseShare?: boolean;
+  sharePassword?: string;
 }
 
-export function useFilePreview({ file, isOpen, isReverseShare = false }: UseFilePreviewProps) {
+export function useFilePreview({ file, isOpen, isReverseShare = false, sharePassword }: UseFilePreviewProps) {
   const t = useTranslations();
   const [state, setState] = useState<FilePreviewState>({
     previewUrl: null,
@@ -181,7 +182,17 @@ export function useFilePreview({ file, isOpen, isReverseShare = false }: UseFile
         url = response.data.url;
       } else {
         const encodedObjectName = encodeURIComponent(file.objectName);
-        const response = await getDownloadUrl(encodedObjectName);
+        const params: Record<string, string> = {};
+        if (sharePassword) params.password = sharePassword;
+
+        const response = await getDownloadUrl(
+          encodedObjectName,
+          Object.keys(params).length > 0
+            ? {
+                params: { ...params },
+              }
+            : undefined
+        );
         url = response.data.url;
       }
 
@@ -218,6 +229,7 @@ export function useFilePreview({ file, isOpen, isReverseShare = false }: UseFile
     file.id,
     file.objectName,
     fileType,
+    sharePassword,
     loadVideoPreview,
     loadAudioPreview,
     loadPdfPreview,
@@ -236,13 +248,14 @@ export function useFilePreview({ file, isOpen, isReverseShare = false }: UseFile
         });
       } else {
         await downloadFileWithQueue(file.objectName, file.name, {
+          sharePassword,
           onFail: () => toast.error(t("filePreview.downloadError")),
         });
       }
     } catch (error) {
       console.error("Download error:", error);
     }
-  }, [isReverseShare, file.id, file.objectName, file.name, t]);
+  }, [isReverseShare, file.id, file.objectName, file.name, sharePassword, t]);
 
   useEffect(() => {
     const fileKey = isReverseShare ? file.id : file.objectName;

apps/web/src/utils/download-queue-utils.ts

@@ -7,6 +7,7 @@ interface DownloadWithQueueOptions {
   useQueue?: boolean;
   silent?: boolean;
   showToasts?: boolean;
+  sharePassword?: string;
   onStart?: (downloadId: string) => void;
   onComplete?: (downloadId: string) => void;
   onFail?: (downloadId: string, error: string) => void;
@@ -89,7 +90,7 @@ export async function downloadFileWithQueue(
   fileName: string,
   options: DownloadWithQueueOptions = {}
 ): Promise<void> {
-  const { useQueue = true, silent = false, showToasts = true } = options;
+  const { useQueue = true, silent = false, showToasts = true, sharePassword } = options;
   const downloadId = `${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
 
   try {
@@ -98,7 +99,18 @@ export async function downloadFileWithQueue(
     }
 
     const encodedObjectName = encodeURIComponent(objectName);
-    const response = await getDownloadUrl(encodedObjectName);
+
+    const params: Record<string, string> = {};
+    if (sharePassword) params.password = sharePassword;
+
+    const response = await getDownloadUrl(
+      encodedObjectName,
+      Object.keys(params).length > 0
+        ? {
+            params: { ...params },
+          }
+        : undefined
+    );
 
     if (response.status === 202 && useQueue) {
       if (!silent && showToasts) {
@@ -181,7 +193,8 @@ export async function downloadFileAsBlobWithQueue(
   objectName: string,
   fileName: string,
   isReverseShare: boolean = false,
-  fileId?: string
+  fileId?: string,
+  sharePassword?: string
 ): Promise<Blob> {
   try {
     let downloadUrl: string;
@@ -196,7 +209,18 @@ export async function downloadFileAsBlobWithQueue(
       }
     } else {
       const encodedObjectName = encodeURIComponent(objectName);
-      const response = await getDownloadUrl(encodedObjectName);
+
+      const params: Record<string, string> = {};
+      if (sharePassword) params.password = sharePassword;
+
+      const response = await getDownloadUrl(
+        encodedObjectName,
+        Object.keys(params).length > 0
+          ? {
+              params: { ...params },
+            }
+          : undefined
+      );
 
       if (response.status === 202) {
         downloadUrl = await waitForDownloadReady(objectName, fileName);
@@ -345,7 +369,7 @@ export async function downloadShareFolderWithQueue(
   shareFolders: any[],
   options: DownloadWithQueueOptions = {}
 ): Promise<void> {
-  const { silent = false, showToasts = true } = options;
+  const { silent = false, showToasts = true, sharePassword } = options;
   const downloadId = `share-folder-${Date.now()}-${Math.random().toString(36).substring(2, 11)}`;
 
   try {
@@ -373,7 +397,7 @@ export async function downloadShareFolderWithQueue(
 
     for (const file of folderFiles) {
       try {
-        const blob = await downloadFileAsBlobWithQueue(file.objectName, file.name);
+        const blob = await downloadFileAsBlobWithQueue(file.objectName, file.name, false, undefined, sharePassword);
         zip.file(file.zipPath, blob);
       } catch (error) {
         console.error(`Error downloading file ${file.name}:`, error);
@@ -515,7 +539,8 @@ export async function bulkDownloadShareWithQueue(
   shareFolders: any[],
   zipName: string,
   onProgress?: (current: number, total: number) => void,
-  wrapInFolder?: boolean
+  wrapInFolder?: boolean,
+  sharePassword?: string
 ): Promise<void> {
   try {
     const JSZip = (await import("jszip")).default;
@@ -562,7 +587,7 @@ export async function bulkDownloadShareWithQueue(
     for (let i = 0; i < allFilesToDownload.length; i++) {
       const file = allFilesToDownload[i];
       try {
-        const blob = await downloadFileAsBlobWithQueue(file.objectName, file.name);
+        const blob = await downloadFileAsBlobWithQueue(file.objectName, file.name, false, undefined, sharePassword);
         zip.file(file.zipPath, blob);
         onProgress?.(i + 1, allFilesToDownload.length);
       } catch (error) {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "palmr-monorepo",
-  "version": "3.2.1-beta",
+  "version": "3.2.2-beta",
   "description": "Palmr monorepo with Husky configuration",
   "private": true,
   "packageManager": "pnpm@10.6.0",