code: @Override
      public boolean isValidRequest(Context context) {
          // Check if we are executing an unsafe method
          if (!isUnsafe(context)) {
              return true;
          }
  
          if (checkCsrfBypass(context)) {
              LOGGER.debug("Bypassing CSRF check for {} {}", context.route().getHttpMethod(), context.route().getUrl());
              return true;
          } else {
              String tokenFromRequest = extractTokenFromRequest(context);
              if (tokenFromRequest == null) {
                  LOGGER.error("CSRF Check failed because there is no token in the incoming request headers");
                  return false;
              }
              String tokenFromContent = extractTokenFromContent(context);
              if (tokenFromContent == null) {
                  LOGGER.error("CSRF Check failed because we are unable to find a token in the incoming request query " +
                          "string or body");
                  return false;
              }
  
              if (compareTokens(tokenFromRequest, tokenFromContent)) {
                  return true;
              } else {
                  LOGGER.error("CSRF Check failed because the given token is invalid");
                  return false;
              }
          }
      }
docs: Checks whether or not the request is valid (not by passed, valid token).
  
  @param context the context
  @return {@code true} if the request if valid, {@code false} otherwise.