feat: implement authentication system with email verification, user management dashboard, and administrative business controls

app/api/auth/register/route.ts

@@ -1,6 +1,7 @@
 import { NextRequest, NextResponse } from 'next/server';
 import prisma from '@/lib/prisma';
 import bcrypt from 'bcryptjs';
+import crypto from 'crypto';
 
 export async function POST(request: NextRequest) {
     try {
@@ -36,16 +37,60 @@ export async function POST(request: NextRequest) {
         // Hash password
         const hashedPassword = await bcrypt.hash(password, 12);
 
+        // Generate verification token
+        const verificationToken = crypto.randomBytes(32).toString('hex');
+
         // Create user
         const user = await prisma.user.create({
             data: {
                 name,
                 email,
                 password: hashedPassword,
-                role: 'VISITOR' // Default role
+                role: 'VISITOR', // Default role
+                verificationToken,
+                emailVerified: false,
             }
         });
 
+        // Send verification email
+        try {
+            const settings = await prisma.siteSetting.findUnique({
+                where: { id: 'singleton' }
+            });
+
+            const siteName = settings?.siteName || 'Afrohub';
+            const subject = settings?.verifyEmailSubject || 'Vérification de votre compte - Afrohub';
+            const verifyUrl = `${process.env.NEXT_PUBLIC_APP_URL || 'http://localhost:3000'}/api/auth/verify?token=${verificationToken}`;
+
+            let html = settings?.verifyEmailTemplate || `
+                <div style="font-family: sans-serif; max-width: 600px; margin: 0 auto; padding: 20px; border: 1px solid #e5e7eb; border-radius: 8px;">
+                    <h2 style="color: #0d9488; text-align: center;">${siteName}</h2>
+                    <p>Bonjour ${name},</p>
+                    <p>Merci de vous être inscrit sur ${siteName}. Veuillez vérifier votre adresse email en cliquant sur le bouton ci-dessous :</p>
+                    <div style="text-align: center; margin: 30px 0;">
+                        <a href="${verifyUrl}" style="background-color: #0d9488; color: white; padding: 12px 24px; text-decoration: none; border-radius: 6px; font-weight: bold;">Vérifier mon compte</a>
+                    </div>
+                </div>
+            `;
+
+            // Replace placeholders
+            html = html
+                .replace(/{name}/g, name)
+                .replace(/{verifyUrl}/g, verifyUrl)
+                .replace(/{siteName}/g, siteName);
+
+            const { sendEmail } = await import('@/lib/mail');
+            await sendEmail({
+                to: email,
+                subject,
+                html,
+            });
+        } catch (mailError) {
+            console.error('Failed to send verification email:', mailError);
+            // We don't fail registration if mail fails, but maybe we should?
+            // For now, just log it.
+        }
+
         // Omit password from response
         const { password: _, ...userWithoutPassword } = user;