Spring: Как сделать аутентификацию на основе bearer токена?

public class TokenAuthentication extends AbstractAuthenticationToken {
    private final Object principal;
    private final Object credentials;
    public TokenAuthentication(Object principal, Object credentials, Collection<? extends GrantedAuthority> authorities) {
        super(authorities);
        this.principal = principal;
        this.credentials = credentials;
        this.setAuthenticated(true);
    }
    public TokenAuthentication(Object principal, Object credentials) {
        this(principal, credentials, null);
    }
    @Override
    public Object getPrincipal() {
        return principal;
    }
    @Override
    public Object getCredentials() {
        return credentials;
    }
}

public class TokenHeaderAuthenticationFilter extends OncePerRequestFilter {

    private final AuthenticationManager authenticationManager;

    public TokenHeaderAuthenticationFilter(AuthenticationManager authenticationManager) {
        this.authenticationManager = authenticationManager;
    }

    @Override
    protected void doFilterInternal(HttpServletRequest servletRequest, HttpServletResponse servletResponse, FilterChain filterChain) throws ServletException, IOException {
        if (SecurityContextHolder.getContext().getAuthentication() != null && SecurityContextHolder.getContext().getAuthentication().isAuthenticated()) {
            filterChain.doFilter(servletRequest, servletResponse);
            return;
        }
        String headerValue = servletRequest.getHeader("X-Authorization");
        if (StringUtils.isEmpty(headerValue)) {
            filterChain.doFilter(servletRequest, servletResponse);
            return;
        }
        String token = headerValue.split("\\s")[1];// ну или headerValue.replace("Bearer ")
        TokenAuthentication authenticationToken = new TokenAuthentication(null, token);
        authenticationToken.setDetails(new WebAuthenticationDetailsSource().buildDetails(servletRequest));

        Authentication authenticationResult = authenticationManager.authenticate(authenticationToken);
        SecurityContextHolder.getContext().setAuthentication(authenticationResult);
        filterChain.doFilter(servletRequest, servletResponse);
    }
}

public class TokenAuthenticationProvider implements AuthenticationProvider {
    @Override
    public boolean supports(Class<?> authentication) {
        return TokenAuthentication.class.isAssignableFrom(authentication);
    }
    @Override
    public Authentication authenticate(Authentication authentication) throws AuthenticationException {
        // здесь должна быть реализована логика аутентификации полученных данных
    }
}

@Configuration
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Bean
    public AuthenticationProvider tokenAuthenticationProvider() {
        return new TokenAuthenticationProvider();
    }

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.addFilterAfter(new TokenHeaderAuthenticationFilter(authenticationManagerBean()), BasicAuthenticationFilter.class)
                .authenticationProvider(tokenAuthenticationProvider())
                .authorizeRequests()
                .anyRequest().authenticated();
    }
}