@Test
    void verifyCsrfOperation() throws Throwable {
        val webAuthnFlow = (Flow) flowDefinitionRegistry.getFlowDefinition(WebAuthnMultifactorWebflowConfigurer.FLOW_ID_MFA_WEBAUTHN);
        webAuthnFlow.setApplicationContext(applicationContext);
        val context = MockRequestContext.create(applicationContext);
        context.setActiveFlow(webAuthnFlow);
        WebUtils.putAuthentication(RegisteredServiceTestUtils.getAuthentication(), context);
        MultifactorAuthenticationWebflowUtils.putMultifactorAuthenticationProvider(context, webAuthnMultifactorAuthenticationProvider);

        val registration = (ViewState) webAuthnFlow.getState(CasWebflowConstants.STATE_ID_WEBAUTHN_VIEW_REGISTRATION);
        registration.enter(context);
        assertNotNull(context.getFlowScope().get("_csrf"));
    }
This is {@link WebAuthnMultifactorWebflowConfigurerTests}.

@author Misagh Moayyed
@since 6.3.0
support/cas-server-support-webauthn/src/test/java/org/apereo/cas/webauthn/web/flow/WebAuthnMultifactorWebflowConfigurerTests.java