Dave Zavala

Thank you @tam512 for acquiring the server logs. Here's what @anjumfatima90 and I have determined thus far. Fyi @tjwatson. The causal NPE occurs because field `CachingProviderService.cachingProvider` is null when method...

The NPE also occurs when configuring checkpoint at `beforeAppStart`. Moreover, the NPE occurs before the first application or resource class is loaded and used, which triggers the checkpoint when using...

Anjum's post shows the NPE occurs on threads running WAB install, which I hadn't noticed earlier. We determined that only the system WABs (`PrivateMetricsRESTProxyServlet`, `ApplicationServlet`, `HealthCheckReadinessServlet`, `HealthCheckServlet`, `HealthCheckStartupServlet` and `HealthCheckLivenessServlet`)...

The failure will certainly occur for deployed web applications with `loadOnStartup`=1. The caching behavior is driven from the `WebAppSecurityCollaborator.preInvoke()` method that executes before the container invokes `servlet.init()` or `servlet.destroy()`

Here are my initial considerations regarding the solution. - The solution must ensure that the expected subject credentials are associated to the app thread on preInvoke() and postInvoke() for servlet.init()...