栞Cloud storage (Google Drive, OneDrive, sync folder)
Connect Google Drive, OneDrive or a sync folder for game cloud saves, the exact permissions GalShelf asks for, status and errors, encryption, and why a provider can show "Not configured".
- Desktop appAvailable in 0.2.8
- WebsiteNot applicable
The desktop app can store game cloud saves in a cloud location you choose. Connections are managed in the new interface under Settings → 账号与同步 / Accounts & Sync → 云端连接 / Cloud connections, and are stored on this computer only. Library sync doesn't use these providers; it runs through your GalShelf account (see Sync).
Providers#
- Desktop appNot available yet
- WebsiteNot applicable
- Implemented; connecting directly needs a Google OAuth app registration, which the public 0.2.7 build does not include, so it cannot connect yet. Use a sync folder instead.
- Desktop appNot available yet
- WebsiteNot applicable
- Implemented; connecting directly needs a Microsoft OAuth app registration, which the public 0.2.7 build does not include, so it cannot connect yet. Use a sync folder instead.
- Desktop appAvailable in 0.2.8
- WebsiteNot applicable
| Provider | Where GalShelf stores data |
|---|---|
| Google Drive | A hidden app-data area in Google Drive that only GalShelf can see; it doesn't appear in My Drive. |
| OneDrive | The Apps › GalShelf folder in your OneDrive, which you can see in OneDrive. |
| 同步文件夹 / Sync folder | A GalShelf-Cloud subfolder of a folder you choose, for example a folder mirrored by sync software or a NAS. No registration or sign-in is involved. |
Connect and disconnect#
- 连接 / Connect opens the provider's own sign-in and consent page in your browser; GalShelf never sees your password. The browser returns to a temporary address on this computer (
127.0.0.1orlocalhost) that exists only while you connect. Come back to GalShelf when the page says you're done. - Only a refresh token is stored, encrypted for your Windows user (DPAPI) on this computer; access tokens stay in memory.
- 测试连接 / Test connection writes, reads, lists and deletes a small test item.
- 断开 / Disconnect removes the authorisation stored on this computer; data already in the cloud stays. For Google, GalShelf also asks Google to revoke the authorisation. For OneDrive, remove GalShelf under Privacy › Apps and services in your Microsoft account to revoke it completely.
Permissions#
GalShelf asks only for the smallest access its storage location needs:
| Provider | Permission requested | What it allows |
|---|---|---|
| Google Drive | https://www.googleapis.com/auth/drive.appdata | Only GalShelf's own hidden app-data area; it can't see or change your other files. |
| OneDrive | Files.ReadWrite.AppFolder and offline_access | Only the Apps › GalShelf folder; offline access lets backups continue while you're away. |
| Sync folder | none | Writes only to the GalShelf-Cloud subfolder of the chosen folder. |
OneDrive works with personal Microsoft accounts only; work or school accounts would need a broader permission, which GalShelf doesn't request.
Status and errors#
For each provider the panel shows 已连接 / Connected, 未连接 / Not connected, 尚未配置 / Not configured or 当前不可用 / Unavailable, plus the account, the last success, the last error, the number of items waiting to upload and storage:
- Google Drive: used and total storage.
- OneDrive: the size of the app folder only (the total quota would need a broader permission).
- Sync folder: free space on that drive.
Errors are shown in plain words with what to do next, for example an expired authorisation ("Please reconnect"), full storage, too many requests or an unreachable network. A backup is only reported as done after it was actually uploaded and verified. The Google Drive API has no conditional writes: if two computers upload at exactly the same moment, both versions are kept and shown as a conflict, and no save is lost.
Encryption#
- Google and Microsoft encrypt stored data on their servers, but that isn't end-to-end encryption: the provider and anyone who can sign in to your account can read the files.
- Saves in a sync folder are not encrypted by GalShelf; they are only as protected as your sync software or disk.
- For cloud saves you can turn on optional end-to-end encryption with a passphrase only you know. If you lose the passphrase, nobody can recover those saves. See Cloud saves.
"Not configured"#
Google and Microsoft let an application connect only after it has been registered with them. Until the owner of this GalShelf installation has registered the app and set its client id, the provider shows 尚未配置 / Not configured ("This installation has no … app registration yet, so it cannot connect") and Connect stays unavailable. Nothing else is affected: the sync folder, library sync and local backups keep working.
For the administrator#
The registration belongs to the desktop app, not to the website. The app lists these steps under Activation steps for the administrator:
- Google Drive: create a Google Cloud project and enable the Google Drive API; configure the OAuth consent screen with only the scope
drive.appdata(publish it, or add test users); create an OAuth client ID of type Desktop app; setGALSHELF_GDRIVE_CLIENT_ID(the client secret is optional) in the environment or inprivate\cloud-oauth.envin the GalShelf data folder; restart GalShelf and choose Connect. - OneDrive: register an app in the Microsoft Entra admin center with account types that include personal Microsoft accounts; add the Mobile and desktop applications platform with the redirect URI
http://localhost; allow public client flows; add the delegated Microsoft Graph permissionsFiles.ReadWrite.AppFolderandoffline_access; setGALSHELF_ONEDRIVE_CLIENT_IDin the same places; restart GalShelf and choose Connect.
Keep client secrets and tokens out of documents and messages you share.