How can I use Spring Security without sessions?

Question

I am building a web application with Spring Security that will live on Amazon EC2 and use Amazon\'s Elastic Load Balancers. Unfortunately, ELB does not support sticky sessio

Answer 1

Actually create-session="never" doesn't mean being completely stateless. There's an issue for that in Spring Security issue management.