Stop suspicious logins before they hit.

// Install: npm install loginllama
import { LoginLlama } from 'loginllama';
import { NextRequest } from 'next/server';

const loginllama = new LoginLlama({
  apiKey: process.env.LOGINLLAMA_API_KEY!
});

export async function POST(req: NextRequest) {
  const { email, password } = await req.json();

  // Check with LoginLlama BEFORE authenticating
  const result = await loginllama.check(email, {
    request: req  // Auto-detects IP & User-Agent
  });

  if (result.risk_score > 5) {
    return Response.json(
      { error: 'Suspicious login detected' },
      { status: 403 }
    );
  }

  // Continue with your existing auth logic...
  return Response.json({ success: true });
}