/** * @inheritdoc */ public function run(Router $router, \Closure $next) { $this->validateToken($router); $response = $next(); if (is_string($response)) { $response = new Response($response); } if ($response instanceof ResponseInterface && $response->getStatusCode() === 200) { $response->addHeader('X-CSRF-Token', $this->getCSRFToken()); } return $response; }