@Bean
        @ConditionalOnMissingBean(name = "oidcProtocolEndpointConfigurer")
        @RefreshScope(proxyMode = ScopedProxyMode.DEFAULT)
        @CanIgnoreReturnValue
        @SuppressWarnings("UnnecessaryMethodReference")
        public CasWebSecurityConfigurer<HttpSecurity> oidcProtocolEndpointConfigurer(
            @Qualifier("oidcCsrfTokenRepository")
            final CsrfTokenRepository oidcCsrfTokenRepository,
            @Qualifier(OidcIssuerService.BEAN_NAME)
            final OidcIssuerService oidcIssuerService,
            final CasConfigurationProperties casProperties) {
            val baseEndpoint = getOidcBaseEndpoint(oidcIssuerService, casProperties);
            return new CasWebSecurityConfigurer<>() {
                @Override
                public List<String> getIgnoredEndpoints() {
                    return List.of(baseEndpoint);
                }

                @Override
                public CasWebSecurityConfigurer<HttpSecurity> configure(final HttpSecurity http) throws Exception {
                    http.authorizeHttpRequests(customizer -> {
                        val authEndpoints = PathPatternRequestMatcher.withDefaults().matcher('/' + OidcConstants.CIBA_URL + "/**");
                        customizer.requestMatchers(authEndpoints).anonymous();
                    });
                    http.csrf(customizer -> {
                        val path = '/' + OidcConstants.CIBA_URL + "/{clientId}/{cibaRequestId}";
                        val pattern = PathPatternRequestMatcher.withDefaults().matcher(HttpMethod.POST, path);
                        val requestHandler = new XorCsrfTokenRequestAttributeHandler();
                        requestHandler.setCsrfRequestAttributeName(null);
                        requestHandler.setSecureRandom(RandomUtils.getNativeInstance());
                        customizer.requireCsrfProtectionMatcher(pattern)
                            .csrfTokenRequestHandler(requestHandler)
                            .csrfTokenRepository(oidcCsrfTokenRepository);
                    });
                    return this;
                }
            };
        }
This is {@link OidcEndpointsConfiguration}.

@author Misagh Moayyed
@since 5.0.0
support/cas-server-support-oidc/src/main/java/org/apereo/cas/config/OidcEndpointsConfiguration.java