用JWT调用资源服务器，通过Spring Cloud Gateway返回HTTP 403

@Component
public class JwtAuthenticationFilter implements GlobalFilter, Ordered {

    private static final String AUTHORIZATION_HEADER = "Authorization";
    private static final String BEARER_PREFIX = "Bearer ";

    @Override
    public Mono<Void> filter(ServerWebExchange exchange, GatewayFilterChain chain) {
        String token = extractTokenFromHeader(exchange.getRequest().getHeaders().getFirst(AUTHORIZATION_HEADER));
        if (token != null && validateToken(token)) {
            // 验证通过，将用户身份信息添加到请求中
            Authentication authentication = new JwtAuthentication(token);
            ServerHttpRequest request = exchange.getRequest().mutate()
                    .header("X-User-Id", authentication.getUserId())
                    .header("X-User-Name", authentication.getUserName())
                    .build();
            exchange = exchange.mutate().request(request).build();
            return chain.filter(exchange);
        } else {
            // 验证失败，返回HTTP 403禁止访问
            exchange.getResponse().setStatusCode(HttpStatus.FORBIDDEN);
            return exchange.getResponse().setComplete();
        }
    }

    private String extractTokenFromHeader(String header) {
        if (header != null && header.startsWith(BEARER_PREFIX)) {
            return header.substring(BEARER_PREFIX.length());
        }
        return null;
    }

    private boolean validateToken(String token) {
        // TODO: 验证JWT令牌的有效性
        return true;
    }

    @Override
    public int getOrder() {
        return Ordered.HIGHEST_PRECEDENCE;
    }
}