NEXT JS and CSRF

I'm using next js along with iron-session for authentication as a full stack application.

How can I implement Anti CSRF to protect state changing routes (delete, edit, create etc).