CXF building blocks

Hello all,

I have more of high level question regarding CXF and JAX-RS in which I would appreciate and help on understanding the topics.

Since we are working on security it is really important I get a conceptual grasp on the following concepts.

When combining the documentation provided by CXF and the JAX-RS spec I have identified following structures:

- Providers
- Interceptors
- Filters

I'm not bringing servlet filters and such in scope though.

My understanding, to this point, is interceptors form the basic worker logic within the bus. The filters (also known as handlers) are actually being handled by a specific interceptor which implements the JAX-RS spec, the JAXRSInInterceptor and JAXRSOutInterceptor.

But next to this there also are providers defined in the spec and that is the one I have issues with finding where they are "found" and "executed".
Is there a location where I would be able to see these providers actually being "called"?

There is also one provider that I don't get OAuthRequestFilter. Is it a provider or filter?

Thank you for any clarification.

Peter De Winter