feat: implement full authentication system with CSRF protection and email verification flow

app/api/auth/login/route.ts

@@ -2,7 +2,20 @@ import { NextRequest, NextResponse } from 'next/server';
 import prisma from '@/lib/prisma';
 import bcrypt from 'bcryptjs';
 
+import { verifyCsrfToken, verifyOrigin } from '@/lib/csrf';
+
 export async function POST(request: NextRequest) {
+    // CSRF Protection
+    const isOriginValid = verifyOrigin(request);
+    const isCsrfValid = await verifyCsrfToken(request);
+
+    if (!isOriginValid || !isCsrfValid) {
+        return NextResponse.json(
+            { error: 'Protection CSRF : Requête invalide' },
+            { status: 403 }
+        );
+    }
+
     try {
         const { email, password } = await request.json();