spring security 自定义多种方式登录授权（普通用户、管理员、第三方登录）

1. 自定义token，继承 AbstractAuthenticationToken

目的：主要用于包装区别过滤条件。第2步用到。

public class WxLoginAuthenticationToken extends AbstractAuthenticationToken {
   

    private static final long serialVersionUID = 510L;
    private final Object principal;
    private Object credentials;

    public WxLoginAuthenticationToken(Object principal, Object credentials) {
   
        super((Collection)null);
        this.principal = principal;
        this.credentials = credentials;
        this.setAuthenticated(false);
    }

    public WxLoginAuthenticationToken(Object principal, Object credentials, Collection<? extends GrantedAuthority> authorities) {
   
        super(authorities);
        this.principal = principal;
        this.credentials = credentials;
        super.setAuthenticated(true);
    }

    public Object getCredentials() {
   
        return this.credentials;
    }

    public Object getPrincipal() {
   
        return this.principal;
    }

    public void setAuthenticated(boolean isAuthenticated) throws IllegalArgumentException {
   
        if (isAuthenticated) {
   
            throw new IllegalArgumentException("Cannot set this token to trusted - use constructor which takes a GrantedAuthority list instead");
        } else {
   
            super.setAuthenticated<