Micronaut jwt-cookie身份验证:当身份验证失败(输入了错误的密码)时，如何在响应中保留用户名？

import io.micronaut.http.HttpRequest;
import io.micronaut.http.HttpResponse;
import io.micronaut.http.HttpStatus;
import io.micronaut.http.annotation.Controller;
import io.micronaut.http.annotation.Get;
import io.micronaut.security.authentication.AuthenticationException;
import io.micronaut.security.annotation.Secured;
import io.micronaut.security.rules.SecurityRule;

@Controller
@Secured(SecurityRule.IS_ANONYMOUS)
public class AuthController {

    @Get("/login")
    public HttpResponse<String> login(HttpRequest<?> request) {
        // 获取用户名和密码
        String username = request.getParameters().get("username");
        String password = request.getParameters().get("password");

        // 进行身份验证
        if (authenticate(username, password)) {
            // 身份验证成功，生成JWT并设置Cookie等操作
            return HttpResponse.ok("Login successful");
        } else {
            // 身份验证失败，抛出异常
            throw new AuthenticationException(new AuthenticationFailed("Invalid password", username));
        }
    }

    // 自定义的身份验证失败异常
    private static class AuthenticationFailed extends RuntimeException {
        private final String username;

        public AuthenticationFailed(String message, String username) {
            super(message);
            this.username = username;
        }

        public String getUsername() {
            return username;
        }
    }

    // 身份验证逻辑
    private boolean authenticate(String username, String password) {
        // 在这里进行实际的身份验证逻辑，返回验证结果
        return false;
    }

    // 异常处理器
    @Controller
    public static class ExceptionHandler {

        @io.micronaut.http.annotation.Error(exception = AuthenticationFailed.class, global = true)
        public HttpResponse<String> handleAuthenticationFailed(HttpRequest request, AuthenticationFailed exception) {
            // 从异常中获取用户名
            String username = exception.getUsername();

            // 在响应中保留用户名
            return HttpResponse
                    .status(HttpStatus.UNAUTHORIZED)
                    .body("Invalid password. Username: " + username);
        }
    }
}