DigiExpert8 Forms File Uploader for OneDrive

DigiExpert8 Forms File Uploader for OneDrive is an independent plugin and is not affiliated with, endorsed by, or sponsored by Microsoft.

The plugin provides:

• Microsoft OAuth2 connection flow for OneDrive.

• Gravity Forms, WPForms, and Contact Form 7 file upload support.

• Form ID and Field ID filtering per provider.

• Folder templates always control the OneDrive folder path and support placeholders: {form_title}, {provider}, {form_id}, {entry_id}, {date}, {submission_folder}.

• Field placeholders are supported, including Gravity Forms and WPForms values like {field_3}, Gravity sub-inputs like {field_1_3}, and name-based placeholders like {passport_number}, {full_name}, or {applicant_name}.

• Optional Gravity Forms entry PDF summary upload.

• Optional local file deletion after successful upload.

• Encrypted storage for client secret and tokens.

External Services

This plugin connects to Microsoft OneDrive through Microsoft Graph.

It sends data to Microsoft only when:

* an administrator clicks Connect OneDrive and completes OAuth authorization

* a configured form submission triggers a file upload to OneDrive

* optional Gravity Forms PDF summary upload is enabled and a PDF summary is uploaded

Data sent to Microsoft may include:

* OAuth authorization data required to obtain access and refresh tokens

* uploaded file contents

* remote folder and file names built from plugin settings and form submission context

Folder template examples:

* {form_title}_{field_3}_{field_48}_{entry_id}

* IDLV_Alex Smith_A1234567_987

* {form_title}_{full_name}_{passport_number}_{entry_id}

* {provider}/{form_id}/{field_3}/{entry_id}

* {provider}/{form_id}/{field_1_3}-{field_1_6}/{entry_id}

* {provider}/{form_id}/{submission_folder}

Service provider:

* Microsoft OneDrive / Microsoft Graph

Service documentation and terms:

com/graph/overview

com/servicesagreement

com/privacystatement

Troubleshooting

• AADSTS50011 redirect mismatch:

• The Redirect URI in Entra must exactly match the plugin value, including protocol ( https:// ), domain, path, and trailing slash behavior.

• OneDrive connection failed after clicking Connect:

• Save settings first and confirm Tenant ID, Client ID, and Client Secret are not empty.

• If secret is regenerated in Entra, paste new secret Value in plugin and save again.

• Permission errors from Graph:

• Confirm Files.ReadWrite is delegated permission (not application permission).

• Confirm consent was granted in the same tenant/account you sign in with.

• Upload size issues:

• Current upload call uses Microsoft Graph simple upload ( PUT.../content ), which supports up to 250 MB per file.

• Resumable/chunked upload sessions are not implemented in this plugin version.

Security Notes

• Only users with manage_options can configure or connect OneDrive.

• OAuth state is validated to prevent CSRF.

• Settings forms and actions use WordPress nonces.

• Secrets and tokens are encrypted at rest using site salts.

• Upload path building sanitizes all path segments.

• Local path resolution is restricted to the WordPress uploads directory.

Known Limits

• This version uploads immediately on form completion.

• Large/resumable upload sessions are not yet implemented.

• Upload retries/queue management are not yet implemented.