coffee-8.x-1.x-dev/tests/modules/coffee_test/coffee_test.routing.yml

coffee_test.csrf:
  path: '/coffee-test-csrf'
  defaults:
    _controller: '\Drupal\coffee_test\Controller\CoffeeTestController::csrf'
  requirements:
    _access: 'TRUE'
    _csrf_token: 'TRUE'