Integration of Security 1.0 authorization with JAX-RS

New Security API 1.0 supports the existing declarative security as expressed by constraints in web.xml or annotations like @RolesAllowed keep working as they have always worked. But JAX-RS API does not support the @RolesAllowed or other security annotations.

Example :
https://github.com/payara/Payara-Examples/tree/master/Java-EE/security-jwt-example
https://github.com/payara/Payara-Examples/blob/master/Java-EE/security-jwt-example/src/main/webapp/WEB-INF/web.xml

Start by reviewing the existing declarative security constraints in web.xml and annotations such as @RolesAllowed, then compare them with the JAX-RS behavior shown in the linked security-jwt-example. Define how Security API 1.0 authorization should apply to JAX-RS resources and verify that existing constraints and annotations continue to work.

Written by the indexing model from the issue text.