// upper bounds org.apache.wss4j.stax.securityToken.UsernameSecurityToken,
// org.apache.wss4j.stax.securityToken.UsernameSecurityToken,
// org.apache.xml.security.stax.ext.securityToken.InboundSecurityToken
//works fine on jdk 1.7
final UsernameSecurityToken usernameSecurityToken =
usernameTokenValidator.</*fake @see above*/UsernameSecurityTokenImpl>
validate(usernameTokenType, tokenContext);
SecurityTokenProvider<InboundSecurityToken> securityTokenProvider =
new SecurityTokenProvider<InboundSecurityToken>() {