src/app/api/auth/huggingface/start/route.ts

import { NextRequest, NextResponse } from "next/server";

import { createOAuthAuthorizationUrl } from "@/lib/huggingface";
import { createOpaqueToken, createPkcePair, setOAuthCookies } from "@/lib/session";

export const runtime = "nodejs";

export async function GET(request: NextRequest) {
  const state = createOpaqueToken(24);
  const { verifier, challenge } = createPkcePair();

  const response = NextResponse.redirect(
    createOAuthAuthorizationUrl({
      state,
      codeChallenge: challenge,
      request,
    }),
  );

  setOAuthCookies(response, state, verifier);

  return response;
}