如何配置GraphQL接口的spring-security？

<dependencies>
    <!-- Spring Security -->
    <dependency>
        <groupId>org.springframework.boot</groupId>
        <artifactId>spring-boot-starter-security</artifactId>
    </dependency>
    
    <!-- GraphQL -->
    <dependency>
        <groupId>com.graphql-java-kickstart</groupId>
        <artifactId>graphql-spring-boot-starter</artifactId>
        <version>{version}</version>
    </dependency>
</dependencies>

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .authorizeRequests()
                .antMatchers("/graphql").permitAll() // 允许所有用户访问GraphQL接口
                .anyRequest().authenticated() // 其他接口需要认证
                .and()
            .csrf().disable();
    }
}

@Component
public class CustomGraphQLContextBuilder implements GraphQLContextBuilder {

    @Override
    public GraphQLContext build(HttpServletRequest httpServletRequest, HttpServletResponse httpServletResponse) {
        Authentication authentication = SecurityContextHolder.getContext().getAuthentication();
        // 根据authentication获取用户信息并进行验证和授权操作
        // ...

        // 返回构建好的GraphQL上下文对象
        return new CustomGraphQLContext(authentication);
    }
}

public class CustomGraphQLContext extends DefaultGraphQLContext {

    public CustomGraphQLContext(Authentication authentication) {
        super(null, null, authentication);
    }

    // 可以在该类中添加自定义的上下文信息
    // ...
}

@Configuration
public class GraphQLConfig {

    @Bean
    public GraphQLSchemaProvider graphQLSchemaProvider(List<GraphQLSchemaProvider> providers) {
        return new DefaultGraphQLSchemaProvider(providers);
    }

    @Bean
    public GraphQLHttpServlet graphQLHttpServlet(GraphQLSchemaProvider schemaProvider, GraphQLContextBuilder contextBuilder) {
        return GraphQLHttpServlet.newBuilder(schemaProvider)
                .withGraphQLContextBuilder(contextBuilder)
                .build();
    }
}