NoorFile – Digital File Delivery with Google Drive for WooCommerce

NoorFile connects your WooCommerce store to Google Drive. Attach a Google Drive file or folder to a product, then share it with the buyer’s Google address straight from the WooCommerce order screen — and take that access away again just as easily.

Because the files stay on Google Drive, large videos, course material and design bundles never touch your hosting bandwidth or upload limits, and customers open them in Drive with their own Google account instead of downloading an unprotected file.

How delivery works

NoorFile does not act on an order by itself. You decide when a customer gets their files:

1. Open the order in WooCommerce.
2. Choose NoorFile: grant Google Drive access from the Order actions box, or grant one item at a time from the NoorFile panel on the same screen.
3. Google shares the file or folder with the customer’s billing email address, and NoorFile records the result.

Removing access works the same way, with NoorFile: revoke Google Drive access.

Features

• Attach as many files or folders to a product as you need — a whole course folder, a single file, or several of each, every one with the permission level you choose.
• Paste a link, not an ID — paste any Google Drive address and NoorFile reads the file or folder ID out of it.
• Grant and revoke from the order screen — for a whole order at once, or one resource at a time.
• Google service account integration — connect with a Google Cloud service account JSON key. Your customers never sign in to anything but Google Drive itself.
• Encrypted credentials — the service account JSON is encrypted with AES-256-GCM before it is written to the database and is never printed back into the screen once saved.
• Customer delivery email — a WooCommerce-styled email tells the buyer their Drive access is ready, with a link to open it.
• Drive Access tab in My Account — customers see everything they hold from a completed order, with a link to open each item in Drive.
• Activity log — every grant, revoke and failure is recorded, together with the message Google returned.

External services

NoorFile’s purpose is granting Google Drive access, so it connects to Google’s own APIs using the service account credentials you provide. Nothing else is contacted, and nothing is sent anywhere during checkout or on a front-end page load.

• Google OAuth2 (oauth2.googleapis.com) — used to authenticate your Google service account. NoorFile sends a signed JWT built from the service account key you provide, and receives a short-lived access token which it caches. No customer data is sent. This happens as a prerequisite for any of the Drive requests below.

• Google Drive API (www.googleapis.com) — used to create and remove permissions on the Drive files and folders you configure. NoorFile contacts it in five situations, all of them the direct result of somebody acting:

  • you press Test connection on the NoorFile → Google accounts screen (nothing is sent but the access token);
  • you grant or revoke access on a WooCommerce order, from the Order actions box or the NoorFile panel;
  • a queued delivery job runs in the background, or you press Run queue now;
  • a customer presses Restore access in their My Account → Drive Access tab;
  • a customer corrects the Google address a failed delivery was sent to, in the same place.

  What is sent when a permission is created: the access token, the Drive file or folder ID you configured, and the customer’s email address. When a permission is removed, the token, the file ID and Google’s own permission ID — no email address. The contents of your files never pass through NoorFile, and nothing is sent during checkout or on a front-end page load.

  See Google’s Privacy Policy and Terms of Service.

  Third-party libraries

• Chart.js 4.5.1, MIT licence — bundled unmodified at assets/admin/vendor/chart.umd.min.js and used for the dashboard activity chart. Source: https://github.com/chartjs/Chart.js/releases/tag/v4.5.1