I dont think this is a problem with the OAuthExtension (you can verify this by doing an arbitrary client request in a serverresource). The only thing I can think of is
1. Do you really need to pass a context to your AdRestApplication in the first place? I typically dont do that in my apps (although it might not make a difference) 2. The createInboundRoot() is inside the AdRestApplication right? sorry for not being of more assistance. ------------------------------------------------------ http://restlet.tigris.org/ds/viewMessage.do?dsForumId=4447&dsMessageId=2804710

