ui/src/app/api/auth/hf/validate/route.ts

import { NextRequest, NextResponse } from 'next/server';
import { whoAmI } from '@huggingface/hub';

export async function POST(request: NextRequest) {
  try {
    const body = await request.json().catch(() => ({}));
    const token = (body?.token || '').trim();

    if (!token) {
      return NextResponse.json({ error: 'Token is required' }, { status: 400 });
    }

    const info = await whoAmI({ accessToken: token });
    return NextResponse.json({
      name: info?.name || info?.username || 'user',
      email: info?.email || null,
      orgs: info?.orgs || [],
    });
  } catch (error: any) {
    return NextResponse.json({ error: error?.message || 'Invalid token' }, { status: 401 });
  }
}