Since this code is security related (and quite complicated) I'm going to shoot for 100% coverage.

pip install pytest-cov
pytest --cov=asgi_csrf --cov-report=html
open htmlcov/index.html

https://asgi-csrf-htmlcov.simonw.vercel.app/asgi_csrf_py.html 92% covered.