Final Class Yiisoft\Csrf\CsrfTokenCookieMiddleware

                public function __construct(
    CsrfTokenInterface $token,
    string $cookieName = self::COOKIE_NAME,
    string $path = '/',
    ?string $domain = null,
    ?bool $secure = null,
    ?string $sameSite = self::SAME_SITE_LAX,
    $cacheControl = true
) {
    if (preg_match(self::PATTERN_HEADER_INJECTION, $cookieName)) {
        throw new InvalidArgumentException(
            sprintf('The cookie name "%s" contains invalid characters.', $cookieName),
        );
    }
    if (preg_match(self::PATTERN_HEADER_INJECTION, $path)) {
        throw new InvalidArgumentException(
            sprintf('The cookie path "%s" contains invalid characters.', $path),
        );
    }
    if ($domain !== null && preg_match(self::PATTERN_HEADER_INJECTION, $domain)) {
        throw new InvalidArgumentException(
            sprintf('The cookie domain "%s" contains invalid characters.', $domain),
        );
    }
    $allowedSameSite = [self::SAME_SITE_LAX, self::SAME_SITE_STRICT, self::SAME_SITE_NONE];
    if ($sameSite !== null && !in_array($sameSite, $allowedSameSite, true)) {
        throw new InvalidArgumentException(
            sprintf('The "SameSite" attribute value "%s" is not valid.', $sameSite),
        );
    }
    if ($sameSite === self::SAME_SITE_NONE && $secure === false) {
        throw new InvalidArgumentException(
            'The "secure" flag is required for cookies with "SameSite" attribute set to "None".',
        );
    }
    /**
     * The parameter has no native type because a `bool|string` union is not available on PHP 7.4, so a value of
     * any other type can still be passed at runtime. Once the minimum PHP version is 8.0+, type the parameter as
     * `bool|string` and remove this check together with the suppression below.
     *
     * @psalm-suppress DocblockTypeContradiction
     */
    if (!is_bool($cacheControl) && !is_string($cacheControl)) {
        throw new InvalidArgumentException(
            sprintf('The "cacheControl" argument must be a bool or a string, "%s" given.', gettype($cacheControl)),
        );
    }
    $this->token = $token;
    $this->cookieName = $cookieName;
    $this->path = $path;
    $this->domain = $domain;
    $this->secure = $secure;
    $this->sameSite = $sameSite;
    $this->cacheControl = $cacheControl;
}

            

                public function process(ServerRequestInterface $request, RequestHandlerInterface $handler): ResponseInterface
{
    $response = $handler->handle($request);
    $response = $response->withAddedHeader(Header::SET_COOKIE, $this->buildCookieHeaderValue($request));
    return $this->applyCacheControl($response);
}