Searching...
;\n\n return tracks?.map((track) => (\n{track.title} — {track.user.username}
\nWelcome, {user?.username}
\n \nAuthenticating...
;\n}\n```\n\n### Authenticated Hooks\n\nAvailable after login. Automatically pass the user's access token.\n\n| Hook | Description |\n|------|-------------|\n| `useMe()` | Current user profile |\n| `useMeTracks()` | Your tracks |\n| `useMeLikes()` | Your liked tracks |\n| `useMePlaylists()` | Your playlists |\n| `useMeFollowings()` | Who you follow |\n| `useMeFollowers()` | Your followers |\n| `useMeFeed()` | Current activity feed |\n| `useMeRecentlyPlayed()` | Last 25 recently played tracks |\n\n### Actions\n\nMutation hooks for authenticated users.\n\n| Hook | Methods |\n|------|---------|\n| `useLike()` | `likeTrack(id)`, `unlikeTrack(id)` |\n| `useFollow()` | `follow(userId)`, `unfollow(userId)` |\n| `useRepost()` | `repostTrack(id)`, `unrepostTrack(id)` |\n\n```tsx\nimport { useLike, useFollow } from \"soundcloud-api-ts-next\";\n\nfunction TrackActions({ trackId, artistId }) {\n const { likeTrack } = useLike();\n const { follow } = useFollow();\n\n return (\n <>\n \n \n \n );\n}\n```\n\n---\n\n## Server-Side Auth Manager\n\nFor apps that need custom logic after token exchange — NextAuth JWT minting, database user creation, account linking — use `SCAuthManager` directly instead of the HTTP auth routes.\n\n```ts\n// lib/sc-auth.ts — one module-level instance, shared across all routes\nimport { createSCAuthManager } from \"soundcloud-api-ts-next/server\";\n\nexport const scAuth = createSCAuthManager({\n clientId: process.env.SC_CLIENT_ID!,\n clientSecret: process.env.SC_CLIENT_SECRET!,\n redirectUri: process.env.SC_REDIRECT_URI!,\n});\n```\n\n### `initLogin()` — generate PKCE URL + CSRF state\n\n```ts\n// app/api/auth/sc-login/route.ts\nimport { NextResponse } from \"next/server\";\nimport { scAuth } from \"@/lib/sc-auth\";\n\nexport async function GET() {\n const { url, state } = await scAuth.initLogin();\n\n // Persist state in a short-lived httpOnly cookie for CSRF verification\n const res = NextResponse.redirect(url);\n res.cookies.set(\"sc-state\", state, { httpOnly: true, maxAge: 600, sameSite: \"lax\" });\n return res;\n}\n```\n\n`initLogin()` generates a PKCE `code_verifier` + `code_challenge` (S256) and a random CSRF `state` token, stores the verifier server-side, and returns the SoundCloud authorize URL. The PKCE verifier lives in-memory — no cookie or database needed.\n\n### `exchangeCode(code, state)` — verify CSRF + exchange tokens\n\n```ts\n// app/api/auth/sc-callback/route.ts\nimport { NextRequest, NextResponse } from \"next/server\";\nimport { scAuth } from \"@/lib/sc-auth\";\n\nexport async function GET(req: NextRequest) {\n const code = req.nextUrl.searchParams.get(\"code\")!;\n const state = req.nextUrl.searchParams.get(\"state\")!;\n\n // Verify CSRF state matches cookie\n const cookieState = req.cookies.get(\"sc-state\")?.value;\n if (!cookieState || cookieState !== state) {\n return NextResponse.json({ error: \"Invalid state\" }, { status: 400 });\n }\n\n // Exchange code + PKCE verifier for tokens\n const tokens = await scAuth.exchangeCode(code, state);\n // tokens: { access_token, refresh_token, expires_in, ... }\n\n // Your app-specific logic here: create user, mint session, etc.\n return NextResponse.json({ ok: true });\n}\n```\n\n`exchangeCode` verifies `state` against the stored PKCE entry (CSRF check), then calls SoundCloud's token endpoint with the `code_verifier`. The entry is deleted after use (one-time).\n\n### `refreshToken(refreshToken)` — refresh an expired token\n\n```ts\nconst newTokens = await scAuth.refreshToken(expiredRefreshToken);\n```\n\n### API Reference\n\n```ts\nimport { createSCAuthManager, type SCAuthManagerConfig, type SCLoginResult, type SoundCloudToken } from \"soundcloud-api-ts-next/server\";\n\nconst scAuth = createSCAuthManager({\n clientId: string,\n clientSecret: string,\n redirectUri: string,\n});\n\nscAuth.initLogin(): Promise