如何在Spring-security的SecurityContext中存储自定义信息？

public class CustomUser {
    private String username;
    private String email;
    
    // 省略getter和setter方法
}

public class CustomAuthentication implements Authentication {
    private CustomUser customUser;
    private boolean authenticated;
    
    // 构造方法和其他方法省略
    
    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return null;
    }
    
    @Override
    public Object getCredentials() {
        return null;
    }
    
    @Override
    public Object getDetails() {
        return null;
    }
    
    @Override
    public Object getPrincipal() {
        return null;
    }
    
    @Override
    public boolean isAuthenticated() {
        return authenticated;
    }
    
    @Override
    public void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException {
        this.authenticated = isAuthenticated;
    }
    
    @Override
    public String getName() {
        return customUser.getUsername();
    }
}

public class CustomAuthenticationProvider implements AuthenticationProvider {
    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // 获取用户输入的用户名和密码
        String username = authentication.getName();
        String password = authentication.getCredentials().toString();
        
        // 根据用户名和密码进行认证，这里省略具体的认证逻辑
        
        // 认证成功后，创建一个包含自定义信息的CustomUser对象
        CustomUser customUser = new CustomUser();
        customUser.setUsername(username);
        customUser.setEmail("example@example.com");
        
        // 创建一个CustomAuthentication对象，并设置为已认证
        CustomAuthentication customAuthentication = new CustomAuthentication();
        customAuthentication.setAuthenticated(true);
        customAuthentication.setCustomUser(customUser);
        
        return customAuthentication;
    }
    
    @Override
    public boolean supports(Class<?> authentication) {
        return authentication.equals(UsernamePasswordAuthenticationToken.class);
    }
}

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {
    @Autowired
    private CustomAuthenticationProvider customAuthenticationProvider;
    
    @Override
    protected void configure(AuthenticationManagerBuilder auth) throws Exception {
        auth.authenticationProvider(customAuthenticationProvider);
    }
    
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        // 配置其他的安全规则
    }
    
    @Bean
    public SecurityContextRepository securityContextRepository() {
        HttpSessionSecurityContextRepository repository = new HttpSessionSecurityContextRepository();
        repository.setAllowSessionCreation(false);
        return repository;
    }
    
    @Override
    public void configure(WebSecurity web) throws Exception {
        web.securityContextRepository(securityContextRepository());
    }
}

CustomAuthentication authentication = (CustomAuthentication) SecurityContextHolder.getContext().getAuthentication();
CustomUser customUser = authentication.getCustomUser();
String username = customUser.getUsername();
String email = customUser.getEmail();