WPO365 | MICROSOFT 365 GRAPH MAILER

Change log

v2.17

• Fix: The built-in Microsoft Graph Mailer for WordPress will now exclude any custom headers that do not start with x- or X-, to prevent Microsoft Graph from not sending the message and reporting the following error instead: “The internet message header name […] should start with ‘x-‘ or ‘X-‘.”. [LOGIN, MICROSOFT GRAPH MAILER]

v2.16

• Improvement: The WPO365 | MICROSOFT GRAPH MAILER plugin can now also log remotely to ApplicationInsights, allowing administrators to configure Azure’s Monitoring / Alerts feature e.g. to send an SMS whenever an exception is logged.
• Fix: The Microsoft Graph Mailer for WordPress no longer “unauthorizes” itself, after it fails to retrieve an access token. Instead, WPO365 Health Messages are created and administrators should regularly check for errors.
• Fix: Refactored the flow when sending emails from a different account than the one submitting the request to send an email to Microsoft Graph (= the default “From” account) to improve consistency, even when the alternative sending-from account is a Shared Mailbox, a Distribution List or Group or normal User Mailbox. [PREMIUM]

v2.15

• Feature: Administrators can now enable Mail Staging Mode. If enabled, the WPO365 plugin will not send emails using Microsoft Graph anymore but instead will write them to the central Mail Log. This makes especially sense for a staging environment. [PREMIUM]
• Improvement: The WPO365 plugin will now handle forms (e.g. Contact Form 7) that propose to send emails from a different account than the “default from” mail account, after it handles any other option (e.g Shared Mailbox or Send as / Send on behalf of). The proposed “alternative from” therefore always prevail. It can also be any type of mailbox e.g. User Mailbox, Shared Mailbox or Distributionlist. But it’s up to the adminstrator to ensure that the “default from” mail account is a either a member (e.g. of the Shared Mailbox) or has sufficient permissions to send emails as / on behalf of an alternative account (e.g. the Distributionlist). [PREMIUM]
• Fix: The initial OpenID Connect authorization request will now always include https://graph.microsoft.com/User.Read.
• Fix: A public property $ErrorInfo has been added to the PHPMailer object to support integration with Gravity Forms.
• Fix: The plugin now better understands – in the context of WordPress Multisite installations – whether the configuration must be retrieved / stored at site or at network level.

v2.14

• Fix: ID Token validation now also validates audiences that are defined using an Application ID URI instead of the Application ID (e.g. this is the case for Microsoft Teams). [LOGIN, MICROSOFT GRAPH MAILER]
• Fix: The plugin does no longer rely on the HTTP_HOST key of the global $_SERVER variable, which – if not initialized – may cause a critical error on the website. [LOGIN, MICROSOFT GRAPH MAILER]
• Fix: The link to launch the Mail Log Viewer would return “false” for FireFox users. [MAIL]

v2.13

• Improvement: The Microsoft Graph Mailer for WordPress will notify the administrator in the form of a WPO365 Health Message when another plugin with mail-sending capabilities is detected.
• Fix: An alternative system for nonces has been introduced to work around the fact that some browsers would not send the WordPress auth cookie along with HTTP 302 redirect requests, causing WordPress nonce verification to fail unexpectedly, in which case the plugin would then log the warning “Could not successfully validate oidc nonce with value xyz”.

v2.12

• Fix: The recently added ID token verification did not take the mail-authorization flow into account.
• Improvement: Administrators can now re-configure the WPO365 | LOGIN plugin to skip the ID token verification altogether, on the plugin’s Miscellaneous configuration page (but this is not recommended for production environments).

v2.11

• Fix: Various issues with the builtin license and update checker for premium extensions and bundles.

v2.10

• Fix: License check for WPO365 | MAIL extension would show “unknown error occurred” for valid licenses.
• Fix: Update check for WPO365 | MAIL extension now better aligned with the recently updated license management service.

v2.9

• Fix: The Allow forms to override “From” address was only enabled for application-level Mail.Send permissions.
• Fix: Overriding the “From” address was sometimes ignored.
• Fix: Sending from a Shared Mailbox was sometimes ignored.

v2.8

v2.7

• Fix: The mail authorization may falsely indicate that the plugin is not authorized to send emails using Microsoft Graph due to how the plugin compared permissions.

v2.6

• Feature: Websites that are using the [Mail Integration for Office 365/Outlook](https://wordpress.org/plugins/mail-integration-365/] are now urged to switch to WPO365 | MICROSOFT GRAPH MAILER or configure the builtin Microsoft Graph mail function of the WPO365 | LOGIN plugin. Consult the online migration guide for further details. [ALL]

v2.5

• Feature: The (premium version of the) Microsoft Graph Mailer can now send attachments larger than 3 MB.
• Feature: The (premium version of the) Microsoft Graph Mailer can now send emails from a Shared Mailbox.
• Improvement: Some parts of the source code have been updated to improve compatibility with PHP 8.1.

v2.4

• Fix: Mail authorization would fail with the error “Could not retrieve a tenant and application specific JSON Web Key Set and thus the JWT token cannot be verified successfully”.

v2.3

• Fix: The delegated mail authorization feature would – under circumstances – fail to get the mail specific tenant ID and as a result an attempt to refresh the access token may fail.

v2.2

• Fix: The Redirect URL field for the mail authorization is no longer greyed out and can be changed by administrators. [LOGIN]

2.1

• Fix: Added missing files.

2.0

• Change: Sending WordPress emails using Microsoft Graph can now also be configured with delegated permissions. Administrators are urged to review the documentation and to update their configuration. [LOGIN, MICROSOFT GRAPH MAILER]
• Feature: Azure Active Directory secrets can now be stored in the website’s WP-Config.php and removed from the database. [MAIL]

1.8

• Fix: If the plugin is configured to send WordPress emails using Microsoft Graph then it will now always replace the “from” email address if WordPress tries to sent emails from “wordpress@[sitename]”. WordPress will propose this email address is no email is set by the plugin sending the email (e.g. Contact Form 7). This email may pass checks as a valid email address but in reality this email address most likely does not exist. The option to fix the “localhost” issue has been removed since this fix improves the behavior for all hosts (incl. localhost). [ALL]

1.7

• Improvement: When specified in – for example – an email form the “From” address will be used to send the email from (instead of the configured “From” address and if the address specified in the form appears to be valid). This behavior is a premium feature and not enabled by default.

1.6

• Change: Sending mail as HTML is no longer a premium feature.
• Change: Saving a sent mail in the Sent Items folder is no longer a premium feature.
• Improvement: The Graph Mailer components have been refactored for improved logging / auditing.
• Fix: Sending a test email with attachment is now supported by all versions.
• Fix: The plugin will not try and send attachments larger than 3 Mb (the prevent the mail being refused by the Microsoft Graph API).

1.5

• Fix: Several issues related to PHP 8.x have been fixed.

1.4

• Updated README.txt

1.3

• Improvement: The plugin will now honor a reply-to email address defined “externally” e.g. when using Contact Form 7.
• Fix: Activating the plugin would case a critical error due to a class-loading error.

1.2

• Fix: Compatibility update.

1.1

• Fix: Some minor code issues were fixed after review.

1.0

• Initial version.