One Folder Gallery For OneDrive Wordpress Plugin - Rating, Reviews, Demo & Download
Plugin Description
One Folder Gallery for OneDrive shows the photos from a single, isolated folder in your Microsoft OneDrive on your WordPress site.
The point of this plugin is what it cannot do. It asks Microsoft for access to one app folder and nothing else. It cannot read your documents, your other photos, or anything else in your OneDrive — not because it chooses not to, but because Microsoft never grants it the permission. Most other OneDrive plugins ask for access to all your files.
How it works
- Connect your Microsoft account. You get a short code to type on a Microsoft sign-in page. There is no app registration to create and no client secret to manage.
- Microsoft creates a folder called
Apps/One Folder Galleryin your OneDrive. - Make a subfolder per album and upload your photos there. Photos put straight into
Apps/One Folder Galleryare not shown: an album is a subfolder. - Add the gallery block to a page, or use the shortcode.
Naming and order
The name of a subfolder is the album title your visitors see. Name it the way you want it to read on your site; you can rename it in OneDrive at any time and the gallery follows.
Albums are listed by name. Photos within an album are ordered by the date the photo was taken, and by file name where that is unknown — which is the case for images that are not camera photos, such as screenshots or logos.
Numbers in names are compared as numbers, so photo 2 comes before photo 10. There is no need to pad names with zeroes.
Block editor
Add the One Folder Gallery block (under Media, or search for “onedrive”). Its sidebar lists the albums in your OneDrive folder, so you can pick one without copying an id from anywhere, and set the layout and the number of columns. Choose All albums to let visitors pick an album themselves.
The block previews the real gallery while you edit, and the editor’s own Advanced panel, alignment and spacing controls apply to it like to any other block. An existing [one_folder_gallery] shortcode can be converted into the block.
Shortcodes
The shortcode stays available for the classic editor, widgets and page builders.
[one_folder_gallery]— a list of all albums, photos load when one is clicked.[one_folder_gallery folder_id="..."]— the photos of one album.[one_folder_gallery folder_id="..." cols="4"]— set the number of columns, 1 to 6.[one_folder_gallery class="before-after"]— add your own class so you can style this gallery on its own.[one_folder_gallery layout="justified"]— pick a layout:grid,justifiedormasonry.
The classic editor has a Choose OneDrive folder button that browses your albums and inserts the shortcode for you.
Layouts
Three layouts ship with the plugin. Pick one in the block sidebar, or with the layout attribute on the shortcode. None of them uses JavaScript to position anything, so the gallery does not shift around while the photos load.
- Grid — equal tiles in a fixed number of columns. Photos are cropped to the same shape. This is the default.
- Justified rows — rows of equal height in which every photo keeps its own proportions, the way a contact sheet reads. There is no column count: how many photos fit in a row depends on their shapes and the width available.
- Masonry — columns of uneven photos that slot together, and nothing is cropped at all. One thing to know: the photos fill each column downwards, so they are read from top to bottom in the first column, then top to bottom in the second, rather than left to right across the page. If the order of your photos means something, as in a before-and-after, choose grid or justified rows instead.
Justified rows and masonry only come into their own when your photos have different shapes. If everything in the album is the same size, all three layouts look much the same.
The height of a justified row is 220 pixels by default, and 150 on a phone. You can change that with --onefg-row-height; see Matching your theme below.
Matching your theme
The gallery ships deliberately plain and takes its colours, fonts, shapes and spacing from CSS custom properties, so a designer can make it match your site without fighting the plugin’s own styling. Set the properties you want in your theme’s custom CSS, on :root for every gallery on the site, or on a class you gave one gallery:
:root {
--onefg-album-min: 240px;
--onefg-album-gap: 24px;
--onefg-album-radius: 20px;
--onefg-album-ratio: 4 / 3;
--onefg-album-card-bg: #fff;
--onefg-album-card-padding: 12px;
--onefg-album-card-radius: 20px;
--onefg-album-card-shadow: 0 2px 12px rgba(0, 0, 0, .08);
--onefg-album-name-family: "Anton", sans-serif;
--onefg-photo-radius: 12px;
--onefg-gap: 16px;
--onefg-row-height: 260px;
--onefg-spinner-color: #c1614a;
}
There are around fifty of these properties, covering the album tiles, the photo grid, the loading spinner, the messages and the lightbox. The complete list, with the default of each one, is written out in the comment at the top of the plugin’s assets/style.css.
Two are worth knowing about up front: --onefg-photo-ratio and --onefg-album-ratio take any shape, so your photos do not have to be square, and --onefg-photo-fit: contain shows whole photos instead of cropping them to fill the tile.
One exception: the lightbox is attached to the end of the page rather than to the gallery, so its properties, such as --onefg-lightbox-bg, only take effect when you set them site-wide and not on a single gallery’s class.
The gallery also respects the visitor’s reduce motion setting: the hover zoom and the loading shimmer stop, and the spinner slows down.
Developers who want to add a layout of their own to the block’s Layout dropdown will find the one filter the plugin offers documented in the source repository.
Important: everything in the app folder can become public
[one_folder_gallery] without a folder lists **every** album in the app folder, and anyone visiting that page can open them. Only put photos in the app folder that you are comfortable showing publicly. The plugin does not add password protection or per-album access control.
Photos stay in OneDrive
Nothing is copied to your web server. Visitors’ browsers load the images directly from Microsoft’s servers, which is also why Microsoft sees your visitors’ IP addresses. See the Privacy section below.
Work and school accounts
Personal Microsoft accounts work out of the box. For a Microsoft 365 work or school account it depends on how your organisation is configured. Three things can get in the way:
- The publisher is not verified. Microsoft shows a warning on the sign-in screen saying the application comes from an unverified publisher. Organisations that only accept applications from verified publishers will not let you sign in on your own.
- Your organisation may require approval. Many organisations only let an administrator approve a new application. The administrator approves it once, after which everyone can use it.
- The sign-in method may be blocked. Some organisations block this type of code-based sign-in outright.
In all three cases there are two ways forward: ask your administrator to approve the application, or register your own application in Microsoft Entra and enter its Application (client) ID under Advanced in the settings. No client secret is needed for either.
None of this affects what the plugin can reach. The permission it asks for is limited to a single folder whichever route you take.
External services
This plugin connects to the Microsoft Graph API, operated by Microsoft, to sign you in and to read the contents of one OneDrive folder. Without this connection the plugin has nothing to show.
What is sent, and when:
- When an administrator connects an account: the plugin’s application id and the requested permissions are sent to
login.microsoftonline.comto start the sign-in, and again to obtain and later renew the access token. This happens when the administrator clicks Connect, and afterwards roughly twice a day in the background to keep the connection alive. - When a gallery page is viewed: the plugin asks
graph.microsoft.comfor the names of the folders and for the file names and thumbnail links inside the folder being shown, using the stored access token. Results are cached for a few minutes, so this does not happen on every page view. - When a visitor loads a page with a gallery: the visitor’s own browser requests the image files directly from Microsoft’s servers. Microsoft therefore receives the visitor’s IP address, the time of the request, and technical details such as the browser being used. This is a direct request from the visitor to Microsoft; it does not pass through this website.
No photos, visitor details, page content or site data are sent to any other third party, and the plugin author does not operate any server involved in this.
Microsoft’s terms and privacy policy apply to this data:
- Microsoft Services Agreement: https://www.microsoft.com/servicesagreement
- Microsoft Privacy Statement: https://privacy.microsoft.com/privacystatement
Privacy
The plugin stores an access token and a refresh token for the connected Microsoft account. These are kept in the WordPress database, encrypted with the PHP sodium extension using a key derived from your site’s own security salts. They are never sent to the browser and never leave your server except to Microsoft, to renew the connection.
The plugin sets no cookies and stores nothing about visitors.
Because visitors load images straight from Microsoft, their IP addresses reach Microsoft. If your site serves visitors in a jurisdiction with disclosure requirements, mention this in your privacy policy. The plugin adds suggested wording to Settings Privacy Privacy Policy Guide that you can copy.
If you use the application bundled with the plugin rather than your own, the plugin author is the owner of that Azure application registration and can see sign-in telemetry for it in the Azure portal: which accounts signed in and when. The author cannot see your files, your photos or your site’s visitors.
Deleting the plugin removes the stored tokens, settings and cached data from your database. Disconnecting removes the token and clears the cache but keeps your settings.
Screenshots
Albums appear as tiles with a cover and a photo count. Clicking one loads its photos below.
The same album in all three layouts: grid crops every photo to one shape, justified rows keep each photo’s proportions at an equal row height, and masonry crops nothing at all.
Clicking a photo opens it in a lightbox, with its name and position in the album.
The block in the editor. Its sidebar lists the albums in your OneDrive folder, so there is no folder id to copy anywhere.
Connecting an account: type the code on Microsoft’s own sign-in page. No app registration, no client secret.
The settings screen, with the shortcodes listed for use outside the block editor.
