Confluence
Productivity Installation + User OAuth

Confluence

Create and manage knowledge base content in Confluence Cloud via Atlassian OAuth.

Auth Model

Installation + User OAuth

Dual-credential model. An App is first installed into an organization or workspace (yielding an installation credential), then individual users authorize within that installation context (yielding user credentials). Authpipe manages both lifecycles.

Connection Flow

1
Admin installs App
2
Installation credential stored
3
Users authorize
4
User credentials stored
@authpipe/node
// Get the bot/app token (installation-level)
const { credential: botToken } = await authpipe.getCredential({
  provider: 'confluence',
  tenantId: 'org_acme',
  credentialFor: 'installation',
});

// Get a user-level token
const { credential } = await authpipe.getCredential({
  provider: 'confluence',
  tenantId: 'org_acme',
  userId: 'user_123',
  credentialFor: 'user',
});
// Both credentials are always valid — Authpipe handles refresh
@authpipe/react
// Install the App into a workspace
<InstallButton
  provider="confluence"
  onInstall={(inst) => console.log('Installed!', inst)}
/>

Available Scopes

Permissions you can request when connecting to Confluence.

read:confluence-content.all

Read all Confluence content including pages, blog posts, and comments

read:confluence-content.summary

Read Confluence content summaries

write:confluence-content

Create and update Confluence content

read:confluence-space.summary

Read Confluence space summaries

read:confluence-user

Read Confluence user information

search:confluence

Search Confluence content

offline_access

Access data when the user is not present via refresh tokens

read:confluence-content.all

Read all Confluence content including pages, blog posts, and comments

write:confluence-content

Create and update Confluence content

read:confluence-space.summary

Read Confluence space summaries

read:confluence-user

Read Confluence user information

search:confluence

Search Confluence content

offline_access

Access data when the user is not present via refresh tokens

What Authpipe handles for Confluence

OAuth Orchestration

PKCE, state validation, callback handling, and provider-specific quirks — all automatic.

Encrypted Vault

AES-256-GCM encryption with per-tenant key isolation. OAuth tokens, API keys, and webhook secrets — never exposed to the frontend.

Silent Refresh

Proactive token refresh before expiry. SDK returns from local cache with zero latency.

Health Monitoring

Scheduled checks detect revoked tokens and expired credentials before users notice.

More Productivity providers

Ready to connect Confluence?

Get your first 100 connections free. Set up in minutes with our SDK.