Confluence
Create and manage knowledge base content in Confluence Cloud via Atlassian OAuth.
Auth Model
Installation + User OAuth
Dual-credential model. An App is first installed into an organization or workspace (yielding an installation credential), then individual users authorize within that installation context (yielding user credentials). Authpipe manages both lifecycles.
Connection Flow
// Get the bot/app token (installation-level) const { credential: botToken } = await authpipe.getCredential({ provider: 'confluence', tenantId: 'org_acme', credentialFor: 'installation', }); // Get a user-level token const { credential } = await authpipe.getCredential({ provider: 'confluence', tenantId: 'org_acme', userId: 'user_123', credentialFor: 'user', });
// Both credentials are always valid — Authpipe handles refresh // Install the App into a workspace <InstallButton provider="confluence" onInstall={(inst) => console.log('Installed!', inst)} />
Available Scopes
Permissions you can request when connecting to Confluence.
read:confluence-content.all Read all Confluence content including pages, blog posts, and comments
read:confluence-content.summary Read Confluence content summaries
write:confluence-content Create and update Confluence content
read:confluence-space.summary Read Confluence space summaries
read:confluence-user Read Confluence user information
search:confluence Search Confluence content
offline_access Access data when the user is not present via refresh tokens
read:confluence-content.all Read all Confluence content including pages, blog posts, and comments
write:confluence-content Create and update Confluence content
read:confluence-space.summary Read Confluence space summaries
read:confluence-user Read Confluence user information
search:confluence Search Confluence content
offline_access Access data when the user is not present via refresh tokens
What Authpipe handles for Confluence
OAuth Orchestration
PKCE, state validation, callback handling, and provider-specific quirks — all automatic.
Encrypted Vault
AES-256-GCM encryption with per-tenant key isolation. OAuth tokens, API keys, and webhook secrets — never exposed to the frontend.
Silent Refresh
Proactive token refresh before expiry. SDK returns from local cache with zero latency.
Health Monitoring
Scheduled checks detect revoked tokens and expired credentials before users notice.
More Productivity providers
Airtable
Connect to Airtable bases and records with PKCE-required OAuth and scoped permissions.
Baserow
Manage databases and tables on your Baserow instance.
Box
Store, share, and manage files and content with Box via OAuth authentication.
Clockify
Track time and generate reports with Clockify.
Ready to connect Confluence?
Get your first 100 connections free. Set up in minutes with our SDK.