使用JWT时在SecurityContext中设置身份验证

import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContext;
import org.springframework.security.core.context.SecurityContextHolder;

// 自定义的用户身份信息类
public class CustomUserDetails implements Authentication {
    private String username;
    private List<GrantedAuthority> authorities;

    // 构造函数和其他方法省略...

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return authorities;
    }

    @Override
    public Object getCredentials() {
        return null;
    }

    @Override
    public Object getDetails() {
        return null;
    }

    @Override
    public Object getPrincipal() {
        return username;
    }

    @Override
    public boolean isAuthenticated() {
        return true;
    }

    @Override
    public void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException {
        // 设置身份验证状态
    }

    @Override
    public String getName() {
        return username;
    }
}

// 在进行身份验证时设置身份信息到SecurityContext中
public void authenticateWithJWT(String jwtToken) {
    // 解析JWT获取用户身份信息
    CustomUserDetails userDetails = parseJWT(jwtToken);

    // 创建Authentication对象
    Authentication authentication = new UsernamePasswordAuthenticationToken(userDetails, null, userDetails.getAuthorities());

    // 将Authentication对象设置到SecurityContext中
    SecurityContext securityContext = SecurityContextHolder.getContext();
    securityContext.setAuthentication(authentication);
}