I am using Spring Security 3.2.3 in my Spring MVC application and getting some unexpected behavior.
According to the documentation here, it should be possible to us
In case you don't need to use Thymeleaf, I'd suggest the following:
Add this to the top of your page:
<%@ taglib prefix="c" uri="http://java.sun.com/jsp/jstl/core"%>
Add this to your login form:
Add these dependencies to your pom.xml:
org.apache.tomcat.embed
tomcat-embed-jasper
provided
javax.servlet
jstl
After struggling a lot, that worked for me.