I'm trying (via numerous blog posts) to try to find a way to replicate the defaultTargetUrl functionality (that you'd get from a security:form-login tag).
I have x509 working.. extracting the CN.. I made a "dummy" UserDetailsService(x509roleassigner below) that always returns a ROLE_USER for any username etc.
What i'd like to be able to do, is redirect the user to a specific URL post-authentication (so they don't always go to say, index.html).