Enable JAX-RS 2.0 security with Wildfly Realm - jax-rs

Question

I am trying to secure my RESTFul webservice, but I am failing to do so.
Even though I created the web.xml, Application subclass and placed the annotations, I still can access the webservice without authentication.
Do you guys have any idea of what I'm doing wrong?
I am using the following stack:
Resteasy 3.0.24
Wildfly 11
Here my code:
MDBService.java
#Path("")
#RequestScoped
#Consumes(MediaType.APPLICATION_XML)
#Produces(MediaType.APPLICATION_XML)
public class MDBService {
public MDBService() {
}
#PUT
#Path("callEPFC")
#DenyAll
public Response callEPFC(String prices) {
return Response.status(200).entity(null).build();
}
}
MDBApplication.java
#ApplicationPath("/EPFC")
public class MDBApplication extends Application {
#Override
public Set<Class<?>> getClasses() {
Set<Class<?>> resources = new HashSet<>();
resources.add(MDBService.class);
return resources;
}
}
web.xml
<web-app version="3.0" xmlns="http://java.sun.com/xml/ns/javaee"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd">
<context-param>
<param-name>resteasy.role.based.security</param-name>
<param-value>true</param-value>
</context-param>
<listener>
<listener-class>org.jboss.resteasy.plugins.server.servlet.ResteasyBootstrap</listener-class>
</listener>
<servlet>
<servlet-name>Resteasy</servlet-name>
<servlet-class>org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher</servlet-class>
<init-param>
<param-name>javax.ws.rs.Application</param-name>
<param-value>de.wingas.pfc.input.MDBApplication</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>Resteasy</servlet-name>
<url-pattern>/*</url-pattern>
</servlet-mapping>
<security-constraint>
<web-resource-collection>
<web-resource-name>Resteasy</web-resource-name>
<url-pattern>/EPFC</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>matlab_epfc</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>BASIC</auth-method>
<realm-name>ApplicationRealm</realm-name>
</login-config>
<security-role>
<role-name>matlab_epfc</role-name>
</security-role>
</web-app>
build.gradle
apply plugin: 'war'
version=''
sourceCompatibility = 1.8
targetCompatibility = 1.8
dependencies {
providedCompile group: 'javax', name: 'javaee-api', version: '7.0'
providedCompile group: 'org.jboss.resteasy', name: 'resteasy-servlet-initializer', version: '3.0.24.Final'
providedCompile group: 'org.jboss.resteasy', name: 'resteasy-multipart-provider', version: '3.0.24.Final'
providedCompile group: 'org.jboss.resteasy', name: 'resteasy-jaxrs', version: '3.0.24.Final'
providedCompile group: 'org.jboss.resteasy', name: 'resteasy-cdi', version: '3.0.24.Final'
}

Answer 1

Well, the problem was gradle not copying the web.xml into the war. After adding this to the gradle buildfile everything started working.
war {
webXml = file('src/main/webapp/WEB-INF/web.xml')
webInf { from file('src/main/webapp/WEB-INF/beans.xml')}
}