Hello all,

I have more of high level question regarding CXF and JAX-RS in which I would 
appreciate and help on understanding the topics.

Since we are working on security it is really important I get a conceptual 
grasp on the following concepts.

When combining the documentation provided by CXF and the JAX-RS spec I have 
identified following structures:

- Providers
- Interceptors
- Filters

I'm not bringing servlet filters and such in scope though.

My understanding, to this point, is interceptors form the basic worker logic 
within the bus. The filters (also known as handlers) are actually being handled 
by a specific interceptor which implements the JAX-RS spec, the 
JAXRSInInterceptor and JAXRSOutInterceptor.

But next to this there also are providers defined in the spec and that is the 
one I have issues with finding where they are "found" and "executed".
Is there a location where I would be able to see these providers actually being 
"called"? 

There is also one provider that I don't get OAuthRequestFilter. Is it a 
provider or filter?

Thank you for any clarification.

Peter De Winter

Reply via email to