如何在Spring WebFlux上定制未经授权的响应

@ControllerAdvice
public class GlobalExceptionHandler {

    @ExceptionHandler(UnauthorizedException.class)
    public ResponseEntity<String> handleUnauthorizedException(UnauthorizedException ex) {
        return ResponseEntity.status(HttpStatus.UNAUTHORIZED).body("未经授权的访问");
    }
}

public class UnauthorizedException extends RuntimeException {
    // 可以自定义异常的具体信息和其他属性
}

@RestController
public class MyController {

    @GetMapping("/api/data")
    @PreAuthorize("hasRole('ROLE_ADMIN')")
    public String getData() {
        // 处理业务逻辑
        return "需要授权的数据";
    }
}

@Configuration
public class WebFluxConfig implements WebFluxConfigurer {

    @Override
    public void addCorsMappings(CorsRegistry registry) {
        // 配置跨域访问
        registry.addMapping("/**")
                .allowedOrigins("*")
                .allowedMethods("*")
                .allowedHeaders("*");
    }

    @Bean
    public AuthorizationFilter authorizationFilter() {
        return new AuthorizationFilter();
    }
}

public class AuthorizationFilter implements WebFilter {

    @Override
    public Mono<Void> filter(ServerWebExchange exchange, WebFilterChain chain) {
        // 在这里进行权限验证的逻辑判断
        // 如果未经授权，则抛出UnauthorizedException异常
        // 否则，继续执行请求链
        return chain.filter(exchange);
    }
}