Lenny Primak

Best would be a project on GitHub that includes everything needed to run. I would guess that the work that's needed to provide that example will be enough to solve...

Ok, thanks, now we are getting somewhere. Can you please post the detailed instructions how to reproduce? Perhaps in the README file?

Can you double-check that `doGetAuthenticationInfo()` is actually getting called, and exception is actually being thrown? My guess is it's not.

Please forgive me if I am mistaken (or harsh), but... What you are implying here is that Shiro doesn't work at all, since this is basic functionality that's used in...

No, that's not what I mean. I believe that what's *actually* happening in your code is not what you think is happening. You are suggesting an issue that is "so...

And again, for the fourth time, I will refer you to https://www.sscce.org/ Your communication is quite clear. It's the effort you are expecting from the Shiro team is unreasonable. You...

Also, is this issue SSE-specific, or are is every request failing like this? Is this a new application that already works, or are you trying to add SSE functionality to...

Shiro `ThreadContext` needs to be bound to security manager in the SSE thread. This is not currently done, since SSE bypasses typical Shiro filter flow. I am not a Spring...

There may be a better way, but I would start with overriding / implementing my own subclass of ShiroFilter. Again, I am not a Spring user and cannot guide you...

There is no way that I can think of to provide "automatic" scoping / cache invalidation. Either `SoftReference` will use maximum amount of VM memory causing memory and GC thrashing,...