Apache Shiro

Application security framework for authentication, authorization, session management, and cryptography. Pluggable data sources, role- and permission-based access, and easy integration with web and enterprise applications.