C

CaspiaDrop

Loading

Google Drive connection

One quiet gateway.

This gateway lets CaspiaDrop place files into your Google Drive without a server. Set it up once — it takes about a minute.

  1. 01

    Open a new script

    Visit script.new and create a standalone Apps Script project.

  2. 02

    Paste the gateway

    Replace the contents of Code.gs with the script below, then save.

  3. 03

    Deploy as a web app

    • Deploy → New deployment → Web app.
    • Execute as Me · Who has access Anyone.
    • Click Deploy, then approve Google’s permission prompt.
    • Copy the Web app URL ending in /exec.

This is where most setups pause: choosing “Anyone” does not publish the app yet. You still need to click the final Deploy button, complete Google’s authorization flow, and then copy the /exec URL from “Deployment successfully created”. If that panel closes after authorization, retrieve the URL from Deploy → Manage deployments.

Code.gs

Troubleshooting & CORS notes

Use the /exec URL. The /dev URL only works while you are signed in to the script editor.

Access must be “Anyone”. “Anyone with a Google Account” adds an authentication redirect that can break browser delivery.

Redeploy after edits. Apps Script only serves a code change after Deploy → Manage deployments → Edit → New version.

Authorize during deployment. After clicking Deploy, Google may show “Authorization required”. Sign in, approve access, and if “Google hasn’t verified this app” appears choose Advanced → Go to [your project] (unsafe) → Allow. This is expected for your own script. If the URL panel disappears, open Deploy → Manage deployments to retrieve it.

No “Anyone” option? A Google Workspace admin policy may be blocking anonymous web apps. Use a personal Google account or ask the admin. “Anyone with a Google Account” is not equivalent and will break guest uploads.

CORS is handled by a simple request. CaspiaDrop sends JSON as text/plain so the browser skips the preflight that Apps Script cannot answer. The gateway still replies with JSON via ContentService.

Large files are welcome. Files are sent in 4 MiB chunks and written to Drive with a resumable upload. Keep the guest tab open until delivery completes.

A note on privacy. The password feature is a friendly front-door deterrent, not encryption. The gateway URL is inside the share link and could be inspected by a technical recipient.

First-time deployment will ask you to authorize Drive access. That permission is used only to create the CaspiaDrop_Uploads folder and save incoming files and notes.