feat: atproto oauth session refresh, testing, and edgecase handling

[fatfingers23]

We need to do some more testing and error handling of atproto OAuth Sessions to make sure they are solid.

• Test to see how we handle oauth session expired/invalidation. Can revoke oauth via your pds at a url like https://bsky.social/account and wait a bit to test
• make sure oauth sessions are refreshing access tokens as expected. Access tokens are 30mins. (Maybe fix: small oauth fixes to extend sessions (hopefully) #905 should hopefully resolve this)
• On login make sure we are handling and showing errors for the user if they type in an invalid URL or OAuth returns an error (fix: small oauth fixes to extend sessions (hopefully) #905 has basic errors on a error page, but in the auth modal would be better)
• Decide what to do if the OAuth session is no longer valid. Do we just redirect them back to the PDS to relogin?

Can access the oauth client and session from this event handler

npmx.dev/server/utils/atproto/oauth.ts

Line 63 in 07ce0e4

export function eventHandlerWithOAuthSession<T extends EventHandlerRequest, D>(

[shi-gg]

access tokens are 60 minutes
https://github.com/bluesky-social/atproto/blob/7b9a98a763636c5f66a06da11fe6013f29dd9157/packages/oauth/oauth-provider/src/constants.ts#L36

[fatfingers23]

ahhh was going by the docs

https://atproto.com/specs/oauth#tokens-and-session-lifetime