Jersey (the reference implementation of JAX-RS) supports OAuth through a Jersey extension called OpenSSO Auth Filter. However this requires an additional OpenSSO server instance. See this document for more information.
Note that OpenSSO has been discontinued by Oracle and is now under ForgeRock as OpenAM.
