@Override
                public CasWebSecurityConfigurer<HttpSecurity> configure(final HttpSecurity http) throws Exception {
                    http.authorizeHttpRequests(customizer -> {
                        val authEndpoints = PathPatternRequestMatcher.withDefaults().matcher('/' + OidcConstants.CIBA_URL + "/**");
                        customizer.requestMatchers(authEndpoints).anonymous();
                    });
                    http.csrf(customizer -> {
                        val path = '/' + OidcConstants.CIBA_URL + "/{clientId}/{cibaRequestId}";
                        val pattern = PathPatternRequestMatcher.withDefaults().matcher(HttpMethod.POST, path);
                        val requestHandler = new XorCsrfTokenRequestAttributeHandler();
                        requestHandler.setCsrfRequestAttributeName(null);
                        requestHandler.setSecureRandom(RandomUtils.getNativeInstance());
                        customizer.requireCsrfProtectionMatcher(pattern)
                            .csrfTokenRequestHandler(requestHandler)
                            .csrfTokenRepository(oidcCsrfTokenRepository);
                    });
                    return this;
                }
This is {@link OidcEndpointsConfiguration}.

@author Misagh Moayyed
@since 5.0.0
support/cas-server-support-oidc/src/main/java/org/apereo/cas/config/OidcEndpointsConfiguration.java