B

Connections

Microsoft Outlook Mail, Calendar and Teams. Tokens are encrypted server-side; the browser never sees them. Sync is bounded and pull-based.

Setup required
Checking…

Azure app registration

  1. Open Entra admin center → App registrations → New registration.
  2. Add a Web redirect URI matching MICROSOFT_REDIRECT_URI, e.g. https://your-app/api/public/microsoft/oauth/callback.
  3. Under Certificates & secrets, create a client secret and copy the value.
  4. Under API permissions, add delegated Microsoft Graph scopes (listed below) and grant consent.

Secrets — Project Settings → Secrets

  • MICROSOFT_TENANT_ID

    Directory (tenant) ID from Entra ID → App registration.

  • MICROSOFT_CLIENT_ID

    Application (client) ID from the same registration.

  • MICROSOFT_CLIENT_SECRET

    Client secret value (generated under Certificates & secrets).

  • MICROSOFT_REDIRECT_URI

    Must exactly match the Web redirect URI on the app registration (e.g. https://your-app/api/public/microsoft/oauth/callback).

  • MICROSOFT_TOKEN_ENCRYPTION_KEY

    32-byte AES key in base64. Generate with `openssl rand -base64 32`. Used to encrypt tokens at rest.

Database (Lovable Cloud)

  • SUPABASE_URL

    Provided by Lovable Cloud.

  • SUPABASE_SERVICE_ROLE_KEY

    Server-only. Never exposed to the browser.

Database is available. Encrypted-token schema is deployed.