Is your feature request related to a problem? Please describe.

The description of the useCSRFPrevention plugins claims it would mimic the Apollo Server functionality. But actually Apollo does a lot more checks incl. checking the value of the content-type header. So when migrating from Apollo the plugin is not usable as a replacement.

Describe the solution you'd like

If would be great if you could replicate the functionality of the Apollo Server: See

• https://www.apollographql.com/docs/router/configuration/csrf/
• https://github.com/apollographql/apollo-server/blob/main/packages/server/src/preventCsrf.ts

Describe alternatives you've considered

I am writing a my own plugin at moment