ExtractStateSubstring extract the initial state characters, to add it to the CSRF cookie name.

GenerateCookieName in case cookie options state that CSRF cookie has fixed name then set fixed name, otherwise build name based on the state.

GetCookieDomain returns the correct cookie domain given a list of domains by checking the X-Fowarded-Host and host header of an an http request.

LoadCSRFCookie loads a CSRF object from a request's CSRF cookie.

MakeCookieFromOptions constructs a cookie based on the given *options.CookieOptions, value and creation time.

NewCSRF creates a CSRF with random nonces.

Parse a valid http.SameSite value from a user supplied string for use of making cookies.

CSRF manages various nonces stored in the CSRF cookie during the initial authentication flows.