如何使用OAuth1.0通过Spring boot定制的头对API进行身份验证

<dependency>
    <groupId>org.springframework.security.oauth</groupId>
    <artifactId>spring-security-oauth</artifactId>
    <version>2.4.1.RELEASE</version>
</dependency>

spring:
  security:
    oauth2:
      client:
        registration:
          custom-provider:
            client-id: your-client-id
            client-secret: your-client-secret
            authorization-grant-type: authorization_code
            redirect-uri: http://localhost:8080/login/oauth2/code/custom-provider
            scope: read,write
            client-authentication-method: basic
            client-name: Custom Provider
            client-alias: custom-provider
        provider:
          custom-provider:
            authorization-uri: https://custom-provider.com/oauth/authorize
            token-uri: https://custom-provider.com/oauth/token
            user-info-uri: https://custom-provider.com/oauth/userinfo
            user-name-attribute: sub

public class CustomOAuth1Filter extends AbstractAuthenticationProcessingFilter {

    public CustomOAuth1Filter(RequestMatcher requestMatcher) {
        super(requestMatcher);
    }

    @Override
    public Authentication attemptAuthentication(HttpServletRequest request, HttpServletResponse response) throws AuthenticationException, IOException, ServletException {
        // 在这里进行OAuth1.0的认证逻辑
        // 获取请求中的OAuth1.0相关参数，并进行验证
        // 如果验证通过，创建一个OAuth1.0的认证对象，并返回
        // 如果验证失败，抛出相应的异常
    }
}

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .addFilterBefore(customOAuth1Filter(), UsernamePasswordAuthenticationFilter.class)
            // 其他的安全配置
            .authorizeRequests()
                .antMatchers("/api/**").authenticated()
                .anyRequest().permitAll();
    }

    @Bean
    public CustomOAuth1Filter customOAuth1Filter() throws Exception {
        CustomOAuth1Filter filter = new CustomOAuth1Filter(new AntPathRequestMatcher("/api/**"));
        filter.setAuthenticationManager(authenticationManagerBean());
        return filter;
    }
}

@RestController
@RequestMapping("/api")
public class ApiController {

    @GetMapping("/data")
    public String getData() {
        // 在这里编写需要进行身份验证的API逻辑
        return "Data";
    }
}