general bug fixes

cmd/appview/serve.go

@@ -151,6 +151,11 @@ func serveRegistry(cmd *cobra.Command, args []string) error {
 	// Create oauth token refresher
 	refresher := oauth.NewRefresher(oauthApp)
 
+	// Wire up UI session store to refresher so it can invalidate UI sessions on OAuth failures
+	if uiSessionStore != nil {
+		refresher.SetUISessionStore(uiSessionStore)
+	}
+
 	// Set global refresher for middleware
 	middleware.SetGlobalRefresher(refresher)
 

cmd/oauth-helper/main.go

@@ -11,6 +11,7 @@ import (
 	"os"
 	"time"
 
+	"atcr.io/pkg/atproto"
 	"atcr.io/pkg/auth/oauth"
 	indigo_oauth "github.com/bluesky-social/indigo/atproto/auth/oauth"
 )
@@ -108,8 +109,8 @@ func main() {
 
 	// Generate DPoP proof for deleteRecord endpoint if all params provided
 	if *repo != "" && *rkey != "" {
-		deleteURL := fmt.Sprintf("%s/xrpc/com.atproto.repo.deleteRecord?repo=%s&collection=%s&rkey=%s",
-			*holdURL, *repo, *collection, *rkey)
+		deleteURL := fmt.Sprintf("%s%s?repo=%s&collection=%s&rkey=%s",
+			*holdURL, atproto.RepoDeleteRecord, *repo, *collection, *rkey)
 
 		dpopProof, err := generateDPoPProof(result.Session, "POST", deleteURL)
 		if err != nil {