feat: implement full authentication system with CSRF protection and email verification flow

app/api/auth/register/route.ts

@@ -3,7 +3,20 @@ import prisma from '@/lib/prisma';
 import bcrypt from 'bcryptjs';
 import crypto from 'crypto';
 
+import { verifyCsrfToken, verifyOrigin } from '@/lib/csrf';
+
 export async function POST(request: NextRequest) {
+    // CSRF Protection
+    const isOriginValid = verifyOrigin(request);
+    const isCsrfValid = await verifyCsrfToken(request);
+
+    if (!isOriginValid || !isCsrfValid) {
+        return NextResponse.json(
+            { error: 'Protection CSRF : Requête invalide' },
+            { status: 403 }
+        );
+    }
+
     try {
         const { name, email, password } = await request.json();