Improve invalid CSRF token logging + add explicit dependency

composer.json

@@ -89,11 +89,12 @@
         "symfony/runtime": "7.1.*",
         "symfony/scheduler": "7.1.*",
         "symfony/security-bundle": "7.1.*",
+        "symfony/security-csrf": "7.1.*",
         "symfony/serializer": "7.1.*",
         "symfony/string": "7.1.*",
         "symfony/translation": "7.1.*",
-        "symfony/type-info": "7.1.*",
         "symfony/twig-bundle": "7.1.*",
+        "symfony/type-info": "7.1.*",
         "symfony/uid": "7.1.*",
         "symfony/ux-autocomplete": "^2.18.0",
         "symfony/ux-chartjs": "^2.18.0",

src/Controller/AbstractController.php

@@ -36,7 +36,7 @@ protected function getUserOrThrow(): User
     protected function validateCsrf(string $id, $token): void
     {
         if (!\is_string($token) || !$this->isCsrfTokenValid($id, $token)) {
-            throw new BadRequestHttpException('Invalid CSRF token');
+            throw new BadRequestHttpException("Invalid CSRF token, with ID: $id.");
         }
     }