code: public void verify(HttpServletRequest servletRequest, byte[] serializedRequestEnvelope, RequestEnvelope deserializedRequestEnvelope) {
          if (deserializedRequestEnvelope == null) {
              throw new SecurityException("Incoming request did not contain a request envelope");
          }
          Request request = deserializedRequestEnvelope.getRequest();
          if (request == null || request.getTimestamp() == null) {
              throw new SecurityException("Incoming request was null or did not contain a timestamp to evaluate");
          }
  
          long requestTimestamp = request.getTimestamp().toInstant().toEpochMilli();
          long delta = Math.abs(System.currentTimeMillis() - requestTimestamp);
          boolean withinTolerance = delta <= toleranceInMilliseconds;
  
          if (!withinTolerance) {
              throw new SecurityException(String.format("Request with id %s and timestamp %s failed timestamp validation" +
                      " with a delta of %s", request.getRequestId(), requestTimestamp, delta));
          }
      }
docs: Validates if the provided date is inclusively within the verifier tolerance, either in the
  past or future, of the current system time. This method will throw a {@link SecurityException} if the
  tolerance is not in the expected range, or if the request is null or does not contain a timestamp value.
  
  {@inheritDoc}