Constant FIELD_NAME 

pub const FIELD_NAME: &str = "_csrf_token";

The form field / query param name a template’s @csrf directive emits and this middleware checks - matches Laravel’s own _token convention closely enough to be recognizable, kept distinct (_csrf_token) so it doesn’t collide with an app’s own token field.