What does the problem have to do with caching? Caching is not enabled here yet.
Were you talking about session? getSession() always create new thread which is not allowed in Endpoint in GAE. I already looked at gaeshiro code sample which is using servlet. Maybe GAE changed because gaeshiro's last update was at least 1 year ago? -- View this message in context: http://shiro-user.582556.n2.nabble.com/Shiro-subject-authentication-cannot-last-more-than-2-requests-in-Google-App-Engine-Endpoint-tp7580170p7580180.html Sent from the Shiro User mailing list archive at Nabble.com.
