With Spring Security 3.2.0.RELEASE, how can I get the CSRF token in a page that is purely HTML with no tag libs

Question

Today I upgraded from Spring Security 3.1.4 with the separate java config dependency, to the new 3.2.0 release which includes java config. CSRF is on by default and I know

Answer 1

I use thymeleaf with Spring boot. I had the same problem. I diagnosed problem viewing source of returned html via browser. It should be look like this:

 User Name :  
 Password:  
 />

If you can't see this html code. You may be forgot to put th: tag before name and value.

login.html

 Invalid username and password. 
 You have been logged out. 

 User Name :  
 Password: