$client = self::createClient();
$token = self::getContainer()->get('security.csrf.token_manager')->getToken('id')->getValue();
$client->request('POST', '/test', ['token' => $token]);
self::assertSame('valid', $client->getResponse()->getContent());

/**
 * @Route("/test")
 */
public function __invoke(Request $request): Response
{
    $tokenValid = $this->isCsrfTokenValid('id', $request->request->get('token'));

    return new Response($tokenValid ? 'valid' : 'invalid');
}