class OmniAuth::AuthenticityTokenProtection

def self.call(env)
  new.call!(env)
end

def call!(env)
  return if accepts?(env)
  instrument env
  react env
end

def deny(_env)
  OmniAuth.logger.send(:warn, "Attack prevented by #{self.class}")
  raise AuthenticityError.new(options[:message])
end

def initialize(options = {})
  @options = default_options.merge(options)
end