diff --git a/src/__tests__/lib/auth.test.ts b/src/__tests__/lib/auth.test.ts
index 282c672..f5b0248 100644
--- a/src/__tests__/lib/auth.test.ts
+++ b/src/__tests__/lib/auth.test.ts
@@ -22,6 +22,7 @@ import { checkRateLimit, recordFailedAttempt, clearAttempts } from '@/lib/rate-l
 const mockFindUnique = prisma.user.findUnique as jest.Mock
 
 describe('NextAuth authorize', () => {
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
   const authorize = (authOptions.providers[0] as any).options.authorize
 
   beforeEach(() => jest.clearAllMocks())
diff --git a/src/lib/auth.ts b/src/lib/auth.ts
index b08629f..d833b00 100644
--- a/src/lib/auth.ts
+++ b/src/lib/auth.ts
@@ -45,8 +45,8 @@ export const authOptions: NextAuthOptions = {
 
         // NextAuth v4 : req est un RequestInternal partiel sans typings complets.
         // Le cast est nécessaire pour accéder à x-forwarded-for.
-        const ip =
-          (req as any)?.headers?.['x-forwarded-for']?.split(',')[0]?.trim() ?? 'unknown'
+        // eslint-disable-next-line @typescript-eslint/no-explicit-any
+        const ip = (req as any)?.headers?.['x-forwarded-for']?.split(',')[0]?.trim() ?? 'unknown'
         const key = `${ip}:${credentials.email}`
 
         if (!checkRateLimit(key)) {