Google

export const auth = new Radon({
  adapter: postgresAdapter(pool),
  session: { secret: process.env.RADON_SECRET! },
  providers: {
    google: {
      clientId: process.env.RADON_GOOGLE_CLIENT_ID!,
      clientSecret: process.env.RADON_GOOGLE_CLIENT_SECRET!,
      redirectUri: "https://acme.com/api/auth/google/callback",
    },
  },
});

<a href="/api/auth/google/start">Sign in with Google</a>

// 1. Build the consent URL and redirect the user to it.
const url = auth.google.getAuthUrl({ state: csrfToken });
// → returns a string. `redirect(url)`.

// 2. On your callback route, exchange the `code` query param:
const { user, created, profile } = await auth.google.handleCallback(code);
const { token } = auth.createSessionToken(user.id); // issue a session yourself

auth.google.getAuthUrl({
  state: "csrf-token",          // echoed back on the callback — use it for CSRF
  scopes: ["openid", "email"],  // override the default scopes
  accessType: "offline",        // request a refresh token
  prompt: "consent",            // force the consent screen
  loginHint: "sam@acme.com",    // pre-fill the account chooser
});