eZ\Publish\Core\REST\Server\Controller\SessionController::checkCsrfToken PHP Method

    private function checkCsrfToken(Request $request)
    {
        if ($this->csrfTokenManager === null) {
            return;
        }
        $exception = new UnauthorizedException('Missing or invalid CSRF token', $request->getMethod() . ' ' . $request->getPathInfo());
        if (!$request->headers->has('X-CSRF-Token')) {
            throw $exception;
        }
        $csrfToken = new CsrfToken($this->csrfTokenIntention, $request->headers->get('X-CSRF-Token'));
        if (!$this->csrfTokenManager->isTokenValid($csrfToken)) {
            throw $exception;
        }
    }