如何在Spring Framework中检查某些端点的HTTP请求头

import org.springframework.web.servlet.HandlerInterceptor;
import org.springframework.web.servlet.ModelAndView;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;

public class AuthorizationInterceptor implements HandlerInterceptor {
    
    @Override
    public boolean preHandle(HttpServletRequest request, HttpServletResponse response, Object handler) throws Exception {
        String authorizationHeader = request.getHeader("Authorization");
        
        if (authorizationHeader == null || authorizationHeader.isEmpty()) {
            // 检查失败，返回自定义的错误响应
            response.sendError(HttpServletResponse.SC_UNAUTHORIZED, "Missing Authorization header");
            return false;
        }
        
        // 检查通过，继续执行后续的拦截器、处理器、过滤器或其他中间件
        return true;
    }
    
    // 可选的，用于在处理器执行后执行操作
    @Override
    public void postHandle(HttpServletRequest request, HttpServletResponse response, Object handler, ModelAndView modelAndView) throws Exception {
        // 在请求处理完成后的操作
    }
    
    // 可选的，用于在整个请求完成后执行操作
    @Override
    public void afterCompletion(HttpServletRequest request, HttpServletResponse response, Object handler, Exception ex) throws Exception {
        // 在请求完成后的操作
    }
}

<!-- 配置拦截器 -->
<mvc:interceptors>
    <mvc:interceptor>
        <mvc:mapping path="/api/**"/> <!-- 拦截的路径 -->
        <bean class="com.example.AuthorizationInterceptor"/> <!-- 自定义拦截器类 -->
    </mvc:interceptor>
</mvc:interceptors>

@Configuration
public class WebConfig extends WebMvcConfigurerAdapter {
    
    @Autowired
    private AuthorizationInterceptor authorizationInterceptor;
    
    @Override
    public void addInterceptors(InterceptorRegistry registry) {
        registry.addInterceptor(authorizationInterceptor).addPathPatterns("/api/**"); // 拦截的路径
    }
}