feat: enhance security by implementing HttpOnly refresh tokens and in-memory access token management

- Added isomorphic-dompurify for improved XSS protection
- Refactored token storage to use in-memory management for access tokens
- Implemented server-side route handlers for OAuth token management
- Introduced security headers in next.config.js
- Removed client-side exposure of client_secret and sensitive tokens
- Updated API interceptors to handle token refresh logic
- Cleaned up cookie management for refresh tokens

package.json

@@ -27,6 +27,7 @@
     "dayjs": "^1.11.19",
     "html2canvas": "^1.4.1",
     "i": "^0.3.7",
+    "isomorphic-dompurify": "^3.18.0",
     "jalaali-js": "^1.2.8",
     "jalali-moment": "^3.3.11",
     "js-cookie": "^3.0.5",
@@ -35,6 +36,7 @@
     "next": "^15.5.7",
     "next-themes": "^0.4.6",
     "npm": "^11.7.0",
+    "postcss": "^8.5.6",
     "qrcode": "^1.5.4",
     "qrcode.react": "^4.2.0",
     "react": "^18.3.1",
@@ -49,7 +51,6 @@
     "stylis-plugin-rtl": "^2.1.1",
     "swiper": "^12.0.3",
     "tailwindcss": "^3.4.19",
-    "postcss": "^8.5.6",
     "uninstall": "^0.0.0"
   },
   "devDependencies": {
@@ -60,4 +61,4 @@
     "react": "^18.3.1",
     "react-dom": "^18.3.1"
   }
-}
+}