refactor: use atcute oauth client

[ghostdevv]

🔗 Linked issue

🧭 Context

Updating @atproto/oauth-client-node breaks stuff, so I thought instead of trying to figure that out we could switch fully to atcute libraries - this being the first step of that

📚 Description

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
npmx.dev	Error		Jul 24, 2026 2:54pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
docs.npmx.dev	Ignored	Preview	Jul 24, 2026 2:54pm
npmx-lunaria	Ignored		Jul 24, 2026 2:54pm

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 9a670cad-fdc7-4c8e-89ef-29ce8924b7a4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch w/atcute-oauth

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​atcute/​identity-resolver-node@​2.0.1
	@​atcute/​tid@​1.1.4
	@​atcute/​bluesky-richtext-segmenter@​3.0.2
	@​atcute/​identity-resolver@​2.0.1
	@​atcute/​oauth-node-client@​2.0.1
	@​atcute/​lexicons@​2.0.3

View full report

[github-actions]

e18e dependency analysis

No dependency warnings found.

[codecov]

Codecov Report

❌ Patch coverage is 4.44444% with 43 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
server/utils/atproto/oauth.ts	0.00%	12 Missing and 5 partials ⚠️
server/api/auth/atproto.get.ts	0.00%	6 Missing and 3 partials ⚠️
server/routes/.well-known/jwks.json.get.ts	0.00%	4 Missing and 1 partial ⚠️
server/utils/atproto/oauth-session-store.ts	0.00%	3 Missing ⚠️
server/api/social/like.delete.ts	0.00%	2 Missing ⚠️
server/api/social/like.post.ts	0.00%	2 Missing ⚠️
...erver/api/social/profile/[identifier]/index.put.ts	0.00%	2 Missing ⚠️
server/utils/atproto/oauth-state-store.ts	0.00%	2 Missing ⚠️
server/routes/oauth-client-metadata.json.get.ts	0.00%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[fatfingers23]

Looks good to me! Only thing I had to flag was migration of OAuth session store

[fatfingers23]

Are the types the same here from @atproto to @ATCUTE? Do we want to do some kind of translate layer or just have everyone login again?

[ghostdevv]

I'm happy to make everyone login again xD the sessions are already pretty short, and it reduces the amount of complexity and code we have to remove later