feat: enhance security by implementing HttpOnly refresh tokens and in-memory access token management

- Added isomorphic-dompurify for improved XSS protection
- Refactored token storage to use in-memory management for access tokens
- Implemented server-side route handlers for OAuth token management
- Introduced security headers in next.config.js
- Removed client-side exposure of client_secret and sensitive tokens
- Updated API interceptors to handle token refresh logic
- Cleaned up cookie management for refresh tokens

utils/index.js

@@ -1,10 +1,12 @@
 import Cookies from "js-cookie";
+import { clearAccessToken } from "@/lib/tokenStore";
 
 const removeToken = () => {
-  Cookies.remove("access_token", { path: "/" });
-  Cookies.remove("refresh_token", { path: "/" });
   Cookies.remove("uuid", { path: "/" });
   Cookies.remove("userInfo", { path: "/" });
+  if (typeof window !== "undefined") {
+    clearAccessToken();
+  }
 };
 
 export { removeToken };