csrfProtection
Configures CSRF protection for routes authenticated with this provider's typed session capability.
By default, CSRF protection is enabled with CSRFConfig.originMatchesHost. CSRF checks are applied to plugin-managed POST routes (refresh, logout) and user-defined non-safe HTTP methods under authenticateWith for this provider's OidcProvider.session scheme.