Connect Microsoft OneDrive
PratikYedek uses OneDrive's App Folder scope (Files.ReadWrite.AppFolder). We can only access a dedicated folder at the root of your OneDrive — your personal files are not accessible to us.
Prerequisites
- A personal or SME plan (tax-advisor plan is restricted)
- A personal Microsoft account (consumer) or Microsoft 365 (work/school)
- At least 1 GB free
Step 1 — Open Storage settings
- Sign in to PratikYedek
- Navigate to Settings → Storage
- Click Connect OneDrive
Step 2 — Microsoft OAuth consent
A new browser tab opens with Microsoft's consent screen:
- App: PratikYedek Yazılım (Azure AD multi-tenant)
- Permission: "Have full access to its own files" (
Files.ReadWrite.AppFolder) - Sign-in: Use your existing Microsoft account or sign up
Approve to continue. Microsoft creates a folder named "PratikYedek" at your OneDrive root the first time.
Step 3 — KVKK § 9 consent
OneDrive may store data in EU regions:
- Consent modal lists region (EU primary)
- Explicit cross-border transfer acceptance (KVKK § 9)
- Logged with timestamp + IP
Step 4 — Token rotation (mandatory)
Microsoft mandates token rotation every 24 hours. PratikYedek handles this automatically:
- Refresh token rotated on every API call (in-memory)
- Rotated refresh token persisted via Drizzle (encrypted at rest)
- If rotation fails (account locked, MFA challenge), banner appears: "Reauthorize OneDrive"
Step 5 — Connection test
Same as Google Drive — write/read/delete probe → green checkmark.
Step 6 — First BYOS snapshot
Encrypted chunks are uploaded to your OneDrive's "PratikYedek" App Folder. Only metadata stays on our servers.
Disconnect
Settings → Storage → Disconnect revokes the token. The "PratikYedek" folder remains in your OneDrive — delete it manually if you wish.
Troubleshooting
- "401 InvalidAuthenticationToken" — token rotation failed; reconnect
- "429 TooManyRequests" — Microsoft Graph throttling; PratikYedek retries with exponential backoff
- MFA challenge — Microsoft sometimes requires reauthentication after a security event; just reconnect
Differences from Google Drive
| Google Drive | OneDrive | |
|---|---|---|
| Scope | drive.appdata (hidden folder) | Files.ReadWrite.AppFolder (visible "PratikYedek" folder) |
| Token rotation | Every 6 months | Every 24h (mandatory) |
| Region | US/EU multi | EU primary |
| Free tier | 15 GB | 5 GB |
See also:

