spring secrunity 登陆的loadUser方法，返回的对象可以自定义吗？

Spring Security的loadUserByUsername方法用于根据用户名加载用户详细信息，通常返回的是UserDetails接口的实现类对象，这是Spring Security框架提供的默认用户信息对象。

如果你希望返回自定义的用户信息对象，你可以创建一个类实现UserDetails接口，并在loadUserByUsername方法中返回该自定义对象。例如：

import org.springframework.security.core.userdetails.UserDetails;
import org.springframework.security.core.userdetails.UsernameNotFoundException;

public class CustomUserDetailsService implements UserDetailsService {

    @Override
    public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
        // 根据用户名从数据库或其他地方加载用户信息
        // 假设这里是从数据库加载用户信息的逻辑
        User user = userRepository.findByUsername(username);
        
        if (user == null) {
            throw new UsernameNotFoundException("User not found with username: " + username);
        }

        // 创建自定义的用户信息对象并返回
        return new CustomUserDetails(user);
    }
}

import org.springframework.security.core.GrantedAuthority;
import org.springframework.security.core.userdetails.UserDetails;

import java.util.Collection;

public class CustomUserDetails implements UserDetails {

    private String username;
    private String password;
    private Collection<? extends GrantedAuthority> authorities;
    private boolean accountNonExpired;
    private boolean accountNonLocked;
    private boolean credentialsNonExpired;
    private boolean enabled;

    public CustomUserDetails(String username, String password, Collection<? extends GrantedAuthority> authorities,
                             boolean accountNonExpired, boolean accountNonLocked,
                             boolean credentialsNonExpired, boolean enabled) {
        this.username = username;
        this.password = password;
        this.authorities = authorities;
        this.accountNonExpired = accountNonExpired;
        this.accountNonLocked = accountNonLocked;
        this.credentialsNonExpired = credentialsNonExpired;
        this.enabled = enabled;
    }

    @Override
    public Collection<? extends GrantedAuthority> getAuthorities() {
        return authorities;
    }

    @Override
    public String getPassword() {
        return password;
    }

    @Override
    public String getUsername() {
        return username;
    }

    @Override
    public boolean isAccountNonExpired() {
        return accountNonExpired;
    }

    @Override
    public boolean isAccountNonLocked() {
        return accountNonLocked;
    }

    @Override
    public boolean isCredentialsNonExpired() {
        return credentialsNonExpired;
    }

    @Override
    public boolean isEnabled() {
        return enabled;
    }
}

当实现了 UserDetails 接口后，你需要提供以下方法的实现：

1. getAuthorities(): 返回分配给用户的权限列表。通常是一组 GrantedAuthority 对象。
2. getPassword(): 返回存储在数据库中的用户密码。
3. getUsername(): 返回用户的用户名。
4. isAccountNonExpired(): 返回一个 boolean 值，表示用户账号是否未过期。
5. isAccountNonLocked(): 返回一个 boolean 值，表示用户账号是否未被锁定。
6. isCredentialsNonExpired(): 返回一个 boolean 值，表示用户凭据（密码）是否未过期。
7. isEnabled(): 返回一个 boolean 值，表示用户是否启用。

下面是一个示例的实现：