最后解决！
安全消息的Bean显然必须在applicationContext-security.xml中声明，
而不是在应用程序上下文xml配置中声明…我在手册中的任何地方都找不到！
就我而言，正确的解决方案是applicationContext-security.xml中的bean：
<b:bean id="messageSource" > <b:property name="basenames"> <b:value>secMessages</b:value> </b:property> </b:bean>
感谢 @bluefoot 和 @jtoberon 的一些想法。
更新：* 为了正常工作，web.xml必须在 springSecurityFilterChain 之前包含
localizationFilter ，我的web.xml是： *
<?xml version="1.0" encoding="UTF-8"?><web-app version="2.5" xmlns="http://java.sun.com/xml/ns/javaee"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd"><!-- The definition of the Root Spring Container shared by all Servlets and Filters --><context-param> <param-name>contextConfigLocation</param-name> <param-value>/WEB-INF/spring/applicationContext-security.xml</param-value></context-param><!-- i18n --><filter> <filter-name>localizationFilter</filter-name> <filter-class>org.springframework.web.filter.RequestContextFilter</filter-class></filter><filter> <filter-name>springSecurityFilterChain</filter-name> <filter-class>org.springframework.web.filter.DelegatingFilterProxy</filter-class></filter><!-- i18n --><filter-mapping> <filter-name>localizationFilter</filter-name> <url-pattern>/*</url-pattern></filter-mapping><filter-mapping> <filter-name>springSecurityFilterChain</filter-name> <url-pattern>/*</url-pattern> <dispatcher>REQUEST</dispatcher> <dispatcher>FORWARD</dispatcher> <dispatcher>INCLUDE</dispatcher> <dispatcher>ERROR</dispatcher></filter-mapping><!-- Creates the Spring Container shared by all Servlets and Filters --><listener> <listener-class>org.springframework.web.context.ContextLoaderListener</listener-class></listener><!-- Processes application requests --><servlet> <servlet-name>appServlet</servlet-name> <servlet-class>org.springframework.web.servlet.DispatcherServlet</servlet-class> <init-param> <param-name>contextConfigLocation</param-name> <param-value>/WEB-INF/spring/appServlet/servlet-context.xml</param-value> </init-param> <load-on-startup>1</load-on-startup></servlet><servlet-mapping> <servlet-name>appServlet</servlet-name> <url-pattern>/</url-pattern></servlet-mapping></web-app>
在i18n注释后检查行。
