there also add a csrftrait to share parmater name bettewn view injection and csrfmiddleware

src/CsrfMiddleware.php

@@ -11,6 +11,7 @@
 use Psr\Http\Server\RequestHandlerInterface;
 use Yiisoft\Http\Method;
 use Yiisoft\Http\Status;
+use Yiisoft\Csrf\CsrfTrait;
 
 use function in_array;
 use function is_string;
@@ -21,12 +22,8 @@
  * @link https://www.php-fig.org/psr/psr-15/
  */
 final class CsrfMiddleware implements MiddlewareInterface
-{
-    public const PARAMETER_NAME = '_csrf';
-    public const HEADER_NAME = 'X-CSRF-Token';
-
-    private string $parameterName = self::PARAMETER_NAME;
-    private string $headerName = self::HEADER_NAME;
+{ 
+    use CsrfTrait;
 
     private ResponseFactoryInterface $responseFactory;
     private CsrfTokenInterface $token;
@@ -59,29 +56,7 @@
         return $response;
     }
 
-    public function withParameterName(string $name): self
-    {
-        $new = clone $this;
-        $new->parameterName = $name;
-        return $new;
-    }
-
-    public function withHeaderName(string $name): self
-    {
-        $new = clone $this;
-        $new->headerName = $name;
-        return $new;
-    }
-
-    public function getParameterName(): string
-    {
-        return $this->parameterName;
-    }
-
-    public function getHeaderName(): string
-    {
-        return $this->headerName;
-    }
+
 
     private function validateCsrfToken(ServerRequestInterface $request): bool
     {
@@ -98,7 +73,7 @@
     {
         $parsedBody = $request->getParsedBody();
 
-        $token = $parsedBody[$this->parameterName] ?? null;
+        $token = $parsedBody[$this->formParameterName] ?? null;
         if (empty($token)) {
             $headers = $request->getHeader($this->headerName);
             $token = reset($headers);

src/CsrfTrait

@@ -0,0 +1,46 @@
+<?php
+
+declare(strict_types=1);
+
+namespace Yiisoft\Csrf;
+
+
+
+/**
+ * CsrfTrait to share the parameter name bettewn middleware and view injection. 
+ */
+trait CsrfTrait
+{
+//    final const PARAMETER_NAME = '_csrf';
+//    final const HEADER_NAME = 'X-CSRF-Token';
+
+    protected string $formParameterName = '_csrf';
+    protected string $headerName = 'X-CSRF-Token';
+
+
+    public function withFormParameterName(string $name): self
+    {
+        $new = clone $this;
+        $new->formParameterName = $name;
+        return $new;
+    }
+
+    public function withHeaderName(string $name): self
+    {
+        $new = clone $this;
+        $new->headerName = $name;
+        return $new;
+    }
+
+    public function getFormParameterName(): string
+    {
+        return $this->formParameterName;
+    }
+
+    public function getHeaderName(): string
+    {
+        return $this->headerName;
+    }
+
+
+}