I have implemented an interceptor to carry out a security check on the client IP address with the following annotations -
@Provider
@ServerInterceptor
@Precedence(\"SECURITY\")<
The client IP address is available from the request object. But you can't use that for security purposes as it isn't unique per client: it might just be the address of the nearest proxy, even your own.