anchor.diff:  
   .Log out with HTTP GET
   ====
  -[source,java]
  +.Java
  +[source,java,role="primary"]
   ----
   @Bean
   public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
positive.code: 
  .`CsrfToken` as `@ModelAttribute`
  ====
  [source,java]
  ----
  @ControllerAdvice
  public class SecurityControllerAdvice {
  
negative.code: 	}
  }
  ----
  
  .Kotlin
  [source,kotlin,role="secondary"]
  ----
  @ControllerAdvice
  class SecurityControllerAdvice {
      @ModelAttribute
      fun csrfToken(exchange: ServerWebExchange): Mono<CsrfToken> {
          val csrfToken: Mono<CsrfToken>? = exchange.getAttribute(CsrfToken::class.java.name)
          return csrfToken!!.doOnSuccess { token ->
              exchange.attributes[CsrfRequestDataValueProcessor.DEFAULT_CSRF_ATTR_NAME] = token
          }
      }
  }
  ----
  ====
  
  Fortunately, Thymeleaf provides <<webflux-csrf-include-form-auto,integration>> that works without any additional work.
  