How Does Spring Boot Validate CSRF Tokens Stored in Cookies? Csrf is really confusing, im using an example on github to learn about it.