fix(oauth): trim Atlassian OAuth scopes to fix CloudFront 414

Author: waleedlatif1

apps/sim/lib/oauth/oauth.ts

@@ -438,10 +438,8 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
         icon: ConfluenceIcon,
         baseProviderIcon: ConfluenceIcon,
         scopes: [
-          'read:confluence-content.all',
           'read:confluence-space.summary',
           'read:space:confluence',
-          'read:space-details:confluence',
           'write:confluence-content',
           'write:confluence-space',
           'write:confluence-file',
@@ -451,7 +449,6 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'write:comment:confluence',
           'delete:comment:confluence',
           'delete:attachment:confluence',
-          'read:content:confluence',
           'delete:page:confluence',
           'read:label:confluence',
           'write:label:confluence',
@@ -460,21 +457,14 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'search:confluence',
           'read:me',
           'offline_access',
-          'read:blogpost:confluence',
-          'write:blogpost:confluence',
-          'delete:blogpost:confluence',
-          'read:content.property:confluence',
-          'write:content.property:confluence',
           'read:hierarchical-content:confluence',
           'read:content.metadata:confluence',
           'read:user:confluence',
+          'read:confluence-user',
           'read:task:confluence',
           'write:task:confluence',
           'write:space:confluence',
           'delete:space:confluence',
-          'read:space.property:confluence',
-          'write:space.property:confluence',
-          'read:space.permission:confluence',
         ],
       },
     },
@@ -500,16 +490,12 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'read:me',
           'offline_access',
           'read:issue-meta:jira',
-          'read:issue-security-level:jira',
-          'read:issue.vote:jira',
           'read:issue.changelog:jira',
           'read:avatar:jira',
           'read:issue:jira',
           'read:status:jira',
           'read:user:jira',
-          'read:field-configuration:jira',
           'read:issue-details:jira',
-          'read:issue-event:jira',
           'delete:issue:jira',
           'write:comment:jira',
           'read:comment:jira',
@@ -522,12 +508,6 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'delete:issue-worklog:jira',
           'write:issue-link:jira',
           'delete:issue-link:jira',
-          'manage:jira-webhook',
-          'read:webhook:jira',
-          'write:webhook:jira',
-          'delete:webhook:jira',
-          'read:issue.property:jira',
-          'read:comment.property:jira',
           'read:jql:jira',
           'read:field:jira',
           // Jira Service Management scopes
@@ -537,20 +517,12 @@ export const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {
           'write:request:jira-service-management',
           'read:request.comment:jira-service-management',
           'write:request.comment:jira-service-management',
-          'read:customer:jira-service-management',
-          'write:customer:jira-service-management',
           'read:servicedesk.customer:jira-service-management',
           'write:servicedesk.customer:jira-service-management',
           'read:organization:jira-service-management',
           'write:organization:jira-service-management',
           'read:servicedesk.organization:jira-service-management',
           'write:servicedesk.organization:jira-service-management',
-          'read:organization.user:jira-service-management',
-          'write:organization.user:jira-service-management',
-          'read:organization.property:jira-service-management',
-          'write:organization.property:jira-service-management',
-          'read:organization.profile:jira-service-management',
-          'write:organization.profile:jira-service-management',
           'read:queue:jira-service-management',
           'read:request.sla:jira-service-management',
           'read:request.status:jira-service-management',

apps/sim/lib/oauth/utils.ts

@@ -70,6 +70,7 @@ export const SCOPE_DESCRIPTIONS: Record<string, string> = {
   'read:hierarchical-content:confluence': 'View page hierarchy (children and ancestors)',
   'read:content.metadata:confluence': 'View content metadata (required for ancestors)',
   'read:user:confluence': 'View Confluence user profiles',
+  'read:confluence-user': 'View Confluence user profiles (v1 API)',
   'read:task:confluence': 'View Confluence inline tasks',
   'write:task:confluence': 'Update Confluence inline tasks',
   'delete:blogpost:confluence': 'Delete Confluence blog posts',