Skip to content

Connect Microsoft OneDrive

PratikYedek uses OneDrive's App Folder scope (Files.ReadWrite.AppFolder). We can only access a dedicated folder at the root of your OneDrive — your personal files are not accessible to us.

Prerequisites

  • A personal or SME plan (tax-advisor plan is restricted)
  • A personal Microsoft account (consumer) or Microsoft 365 (work/school)
  • At least 1 GB free

Step 1 — Open Storage settings

  1. Sign in to PratikYedek
  2. Navigate to Settings → Storage
  3. Click Connect OneDrive

A new browser tab opens with Microsoft's consent screen:

  • App: PratikYedek Yazılım (Azure AD multi-tenant)
  • Permission: "Have full access to its own files" (Files.ReadWrite.AppFolder)
  • Sign-in: Use your existing Microsoft account or sign up

Approve to continue. Microsoft creates a folder named "PratikYedek" at your OneDrive root the first time.

OneDrive may store data in EU regions:

  • Consent modal lists region (EU primary)
  • Explicit cross-border transfer acceptance (KVKK § 9)
  • Logged with timestamp + IP

Step 4 — Token rotation (mandatory)

Microsoft mandates token rotation every 24 hours. PratikYedek handles this automatically:

  • Refresh token rotated on every API call (in-memory)
  • Rotated refresh token persisted via Drizzle (encrypted at rest)
  • If rotation fails (account locked, MFA challenge), banner appears: "Reauthorize OneDrive"

Step 5 — Connection test

Same as Google Drive — write/read/delete probe → green checkmark.

Step 6 — First BYOS snapshot

Encrypted chunks are uploaded to your OneDrive's "PratikYedek" App Folder. Only metadata stays on our servers.

Disconnect

Settings → Storage → Disconnect revokes the token. The "PratikYedek" folder remains in your OneDrive — delete it manually if you wish.

Troubleshooting

  • "401 InvalidAuthenticationToken" — token rotation failed; reconnect
  • "429 TooManyRequests" — Microsoft Graph throttling; PratikYedek retries with exponential backoff
  • MFA challenge — Microsoft sometimes requires reauthentication after a security event; just reconnect

Differences from Google Drive

Google DriveOneDrive
Scopedrive.appdata (hidden folder)Files.ReadWrite.AppFolder (visible "PratikYedek" folder)
Token rotationEvery 6 monthsEvery 24h (mandatory)
RegionUS/EU multiEU primary
Free tier15 GB5 GB

See also:

KVKK + TTK + VUK uyumlu yedekleme platformu