DigiExpert8 Forms File Uploader for OneDrive

DigiExpert8 Forms File Uploader for OneDrive is an independent plugin and is not affiliated with, endorsed by, or sponsored by Microsoft.

The plugin provides:

• Microsoft OAuth2 connection flow for OneDrive.
• Gravity Forms, WPForms, and Contact Form 7 file upload support.
• Form ID and Field ID filtering per provider.
• Folder templates always control the OneDrive folder path and support placeholders: {form_title}, {provider}, {form_id}, {entry_id}, {date}, {submission_folder}.
• Field placeholders are supported, including Gravity Forms and WPForms values like {field_3}, Gravity sub-inputs like {field_1_3}, and name-based placeholders like {passport_number}, {full_name}, or {applicant_name}.
• Optional Gravity Forms entry PDF summary upload.
• Optional local file deletion after successful upload.
• Encrypted storage for client secret and tokens.

External Services

This plugin connects to Microsoft OneDrive through Microsoft Graph.

It sends data to Microsoft only when:
* an administrator clicks Connect OneDrive and completes OAuth authorization
* a configured form submission triggers a file upload to OneDrive
* optional Gravity Forms PDF summary upload is enabled and a PDF summary is uploaded

Data sent to Microsoft may include:
* OAuth authorization data required to obtain access and refresh tokens
* uploaded file contents
* remote folder and file names built from plugin settings and form submission context

Folder template examples:
* {form_title}_{field_3}_{field_48}_{entry_id}
* IDLV_Alex Smith_A1234567_987
* {form_title}_{full_name}_{passport_number}_{entry_id}
* {provider}/{form_id}/{field_3}/{entry_id}
* {provider}/{form_id}/{field_1_3}-{field_1_6}/{entry_id}
* {provider}/{form_id}/{submission_folder}

Service provider:
* Microsoft OneDrive / Microsoft Graph

Service documentation and terms:
* Microsoft Graph: https://learn.microsoft.com/graph/overview
* Microsoft Terms of Use: https://www.microsoft.com/servicesagreement
* Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement

Troubleshooting

• AADSTS50011 redirect mismatch:
  • The Redirect URI in Entra must exactly match the plugin value, including protocol (https://), domain, path, and trailing slash behavior.
• OneDrive connection failed after clicking Connect:
  • Save settings first and confirm Tenant ID, Client ID, and Client Secret are not empty.
  • If secret is regenerated in Entra, paste new secret Value in plugin and save again.
• Permission errors from Graph:
  • Confirm Files.ReadWrite is delegated permission (not application permission).
  • Confirm consent was granted in the same tenant/account you sign in with.
• Upload size issues:
  • Current upload call uses Microsoft Graph simple upload (PUT .../content), which supports up to 250 MB per file.
  • Resumable/chunked upload sessions are not implemented in this plugin version.

Security Notes

• Only users with manage_options can configure or connect OneDrive.
• OAuth state is validated to prevent CSRF.
• Settings forms and actions use WordPress nonces.
• Secrets and tokens are encrypted at rest using site salts.
• Upload path building sanitizes all path segments.
• Local path resolution is restricted to the WordPress uploads directory.

Known Limits

• This version uploads immediately on form completion.
• Large/resumable upload sessions are not yet implemented.
• Upload retries/queue management are not yet implemented.