mohammadr3z

Storage for EDD via OneDrive is a powerful extension for Easy Digital Downloads that allows you to store and deliver your digital products using Microsoft OneDrive cloud storage. This plugin provides seamless integration with Microsoft Graph API, featuring OAuth2 authentication and secure download links.
<h4>Key Features</h4>
<ul>
<li>OneDrive Integration: Store your digital products securely in Microsoft OneDrive</li>
<li>OAuth2 Authentication: Secure and easy connection to your Microsoft account</li>
<li>Temporary Download Links: Generates secure temporary download URLs via @microsoft.graph.downloadUrl</li>
<li>Easy File Management: Upload files directly to OneDrive through WordPress admin</li>
<li>Media Library Integration: Browse and select files from your OneDrive within WordPress</li>
<li>Folder Support: Navigate and organize files in folders</li>
<li>Security First: Built with WordPress security best practices</li>
<li>Developer Friendly: Clean, well-documented code with hooks and filters</li>
</ul>
<h3>Configuration</h3>
<ol>
<li>Register an Azure AD Application at <a href="https://portal.azure.com/#blade/Microsoft_AAD_RegisteredApps/ApplicationsListBlade" rel="nofollow ugc">Azure App Registrations</a></li>
<li>Add API permissions for Microsoft Graph (Files.Read, Files.ReadWrite, User.Read, offline_access)</li>
<li>Set Redirect URI to: <code>https://your-site.com/odse-oauth-callback/</code></li>
<li>Create a Client Secret and copy the value</li>
<li>Go to Downloads > Settings > Extensions > OneDrive Storage</li>
<li>Enter your Application (client) ID and Client Secret</li>
<li>Save settings and click “Connect to OneDrive”</li>
</ol>
<h3>Usage</h3>
<h4>Browsing and Selecting Files</h4>
<ol>
<li>When creating or editing a download in Easy Digital Downloads</li>
<li>Click the “Browse OneDrive” button next to the file URL field</li>
<li>Browse your OneDrive storage using the folder navigation</li>
<li>Use the breadcrumb navigation bar to quickly jump to parent folders</li>
<li>Use the search box in the header to filter files by name</li>
<li>Click “Select” to use an existing file for your download</li>
</ol>
<h4>Uploading New Files</h4>
<ol>
<li>In the OneDrive browser, click the “Upload” button in the header row</li>
<li>The upload form will appear above the file list</li>
<li>Choose your file and click “Upload”</li>
<li>After a successful upload, the file URL will be automatically set with the OneDrive prefix</li>
<li>Click the button again to hide the upload form</li>
</ol>
<h3>External services</h3>
This plugin connects to Microsoft Graph API (OneDrive) to manage files, create download links, and handle authentication.
It sends the necessary authentication tokens and file requests to Microsoft servers. This happens when you browse your OneDrive files in the dashboard, upload files, or when a customer downloads a file.
<ul>
<li>Service: Microsoft Graph API (OneDrive)</li>
<li>Used for: Authentication, file browsing, uploading, and generating download links.</li>
<li>Data sent: OAuth tokens, file metadata, file content (during upload).</li>
<li>URLs:
<ul>
<li><code>https://graph.microsoft.com</code> (API calls)</li>
<li><code>https://login.microsoftonline.com</code> (Authentication)</li>
</ul>
</li>
<li>Legal: <a href="https://www.microsoft.com/en-us/legal/terms-of-use" rel="nofollow ugc">Terms of Service</a>, <a href="https://privacy.microsoft.com/en-us/privacystatement" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
<h3>Support</h3>
For support and bug reports, please use the WordPress.org plugin support forum.
If you find this plugin helpful, please consider leaving a review on WordPress.org.
<h3>Other Storage Providers</h3>
Looking for a different storage provider? Check out our other plugins:
<ul>
<li><a href="https://wordpress.org/plugins/storage-for-edd-via-box/" rel="ugc">Storage for EDD via Box</a> – Use Box for your digital product storage</li>
<li><a href="https://wordpress.org/plugins/storage-for-edd-via-dropbox/" rel="ugc">Storage for EDD via Dropbox</a> – Use Dropbox for your digital product storage</li>
<li><a href="https://wordpress.org/plugins/storage-for-edd-via-s3-compatible/" rel="ugc">Storage for EDD via S3-Compatible</a> – Use S3-compatible services like MinIO, DigitalOcean Spaces, Linode, Wasabi, and more</li>
</ul>
<h3>Privacy Policy</h3>
This plugin requires authorization to access your Microsoft OneDrive account for file storage and retrieval. It does not collect or store any personal data beyond the OAuth tokens needed to maintain the connection. All file storage and delivery is handled through Microsoft’s secure infrastructure.

Storage for EDD via OneDrive

Enable secure cloud storage and delivery of your digital products through Microsoft OneDrive for Easy Digital Downloads.

Tormod Seljenes

This plugin lets you embed a OneDrive folder in WordPress using a shortcode.
Account support:
<ul>
<li>This plugin supports OneDrive Personal (consumer Microsoft accounts) via Microsoft Graph.</li>
</ul>
Features:
<ul>
<li>Embed a shared OneDrive folder as a browsable document library</li>
<li>Breadcrumb navigation</li>
<li>Search within the folder</li>
<li>Open and download actions (configurable)</li>
<li>Optional thumbnails/icons</li>
<li>Access control modes (public, logged-in, roles)</li>
</ul>
Related links:
<ul>
<li>SeljeDrive for Google Drive: https://wordpress.org/plugins/seljedrive-document-library-for-google-drive/</li>
<li>seljeVisitorsFlags: https://wordpress.org/plugins/seljevisitorsflags/</li>
<li>Support Discord: https://discord.gg/CAdgskTt6Q</li>
</ul>
<h3>Third-Party Services</h3>
This plugin connects to external services operated by Microsoft. These services are required for the plugin to function. No data is sent to the plugin author or any other party.
<h4>Microsoft Identity Platform (OAuth 2.0)</h4>
What it is: Microsoft’s authentication service, used to obtain an access token so the plugin can read OneDrive on behalf of the connected Microsoft account.
When it is used:
<ul>
<li>When a site administrator clicks “Connect Microsoft” on the plugin settings page, the browser is redirected to Microsoft’s login page to complete the OAuth flow.</li>
<li>When the stored access token expires, the plugin silently exchanges the refresh token for a new access token in the background. This happens during a REST API request from a site visitor if the token has expired.</li>
</ul>
Data sent:
<ul>
<li>OAuth authorization code (exchanged for tokens; issued by Microsoft and sent back to Microsoft only).</li>
<li>Client ID and client secret (your Azure App Registration credentials; sent to Microsoft to identify your app).</li>
<li>Refresh token (sent to Microsoft when refreshing an expired access token).</li>
</ul>
No visitor data (IP addresses, user accounts, browsing behaviour) is sent to Microsoft through the OAuth endpoints.
Service endpoint: <code>https://login.microsoftonline.com/</code>
Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement 
Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement
<h4>Microsoft Graph API</h4>
What it is: Microsoft’s REST API for accessing OneDrive files and folders.
When it is used:
<ul>
<li>When a visitor views a page containing the <code>[so_doc_library]</code> shortcode, the plugin calls the Graph API to list the contents of the configured OneDrive folder.</li>
<li>When a visitor searches, browses into a subfolder, or requests a file download or open link, additional Graph API calls are made.</li>
<li>When a new library is saved and its share URL is first resolved, the plugin calls the Graph API to look up the folder identity.</li>
</ul>
Data sent:
<ul>
<li>The OneDrive folder share URL configured by the site administrator (sent to resolve the shared folder identity).</li>
<li>Access token (sent as a Bearer token in the Authorization header to authenticate each request).</li>
<li>Folder and file identifiers (sent to navigate folder contents, retrieve items, and generate download links).</li>
<li>Search query strings entered by visitors (sent to the Graph API search endpoint).</li>
</ul>
No personally identifiable visitor information is sent to Microsoft through the Graph API. Search queries and folder identifiers are functional data needed solely to retrieve the requested files.
Service endpoint: <code>https://graph.microsoft.com/</code>
Microsoft Privacy Statement: https://privacy.microsoft.com/en-us/privacystatement 
Microsoft Services Agreement: https://www.microsoft.com/en-us/servicesagreement 
Microsoft Graph terms of use: https://learn.microsoft.com/en-us/legal/microsoft-apis/terms-of-use
<h4>Data storage</h4>
The plugin stores the following in the WordPress database:
<ul>
<li>Your Azure App Registration Client ID (plain text WordPress option).</li>
<li>Your client secret value (AES-256 encrypted WordPress option; never exposed in the admin UI after saving).</li>
<li>The OAuth access token and refresh token (AES-256 encrypted WordPress option).</li>
<li>Library configuration (folder share URLs, access settings, display options) as a WordPress option.</li>
</ul>
All stored data is removed automatically when the plugin is uninstalled.
<h4>User tracking</h4>
This plugin does not track, profile, or fingerprint site visitors. No analytics, telemetry, or third-party tracking scripts are loaded. The plugin applies server-side rate limiting (based on IP address, stored as a short-lived WordPress transient) solely to protect the REST API endpoints from abuse; IP addresses are hashed and never logged or transmitted externally.
<h3>Plugin settings</h3>
<h4>Microsoft OAuth</h4>
Client ID 
The Application (client) ID from your Azure App Registration (a GUID). Found in Azure Portal under App registrations → your app → Overview. The plugin validates that this looks like a GUID before allowing you to connect.
Client secret value 
The client secret VALUE from Azure Portal → Certificates & secrets → New client secret. Paste the VALUE column — not the Secret ID column. Microsoft only shows the value once, so copy it immediately after creation. Leave blank when saving to keep an existing secret. The value is stored AES-256 encrypted and is never shown again in the admin UI after saving.
Redirect URI 
A read-only field showing the callback URL you must register in Azure Portal under your App Registration → Authentication → Platform: Web → Redirect URI. Use the Copy button to copy it.
Connect Microsoft / Disconnect 
After a valid Client ID and secret are saved, Connect Microsoft starts the OAuth authorization flow — you will be redirected to Microsoft to sign in and approve access. Disconnect removes the stored access and refresh tokens.
<h4>Libraries</h4>
Name 
A label for this library shown only in the WordPress admin. Not visible to front-end visitors.
Folder Share URL 
The OneDrive sharing link for the folder to display. Create it in OneDrive by right-clicking a folder → Share → Anyone with the link → Copy link. The link typically starts with https://1drv.ms/… The Microsoft account connected in the plugin must have access to this link.
Access 
Controls who can view the library on the front end:
<ul>
<li>Public — visible to all visitors, no login required.</li>
<li>Logged-in users — only visible to WordPress users who are currently signed in.</li>
<li>Specific roles — only visible to users whose WordPress role is in the Allowed roles list.</li>
</ul>
Allowed roles 
Only shown when Access is set to Specific roles. Check every WordPress user role that should be permitted to view this library. If no roles are checked, the library is not accessible to anyone.
Hide Open button 
Removes the button that opens the file inside OneDrive in a new browser tab. Download is still available unless that button is also hidden.
Hide Download button 
Removes the direct download button. The Open button is still available unless that is also hidden.
Remove header from frontend 
Removes the library title and breadcrumb navigation bar above the file list. Useful for minimal or fully custom embed layouts.
Icon is preview of file content 
When checked, image files show a small thumbnail fetched from OneDrive instead of a generic file icon. This may slightly increase loading time for large folders.
Frontend language 
The language used for UI text (button labels, date formats, breadcrumbs) in the embedded library. Defaults to the WordPress site language. Only languages that are both installed in WordPress and available as translation files for this plugin appear in the list.
Root folder label 
A custom display name for the top-level folder shown in the breadcrumb. Leave blank to use the actual folder name from OneDrive.
Allowed file extensions 
A comma-separated list of extensions to display (e.g. pdf,docx,xlsx). Files with other extensions are hidden. Leave blank to show all file types. Do not include dots. Folders are always visible regardless of this filter.

seljeDrive Document Library for OneDrive

Displays a OneDrive folder (shared link) as an explorer-style document library via shortcode.

Storage for EDD via OneDrive vs seljeDrive Document Library for OneDrive