Summer Security is a Java web authentication library for applications that need something simpler than a full security framework.
It supports HTTP Basic auth, form login compatible with Spring Security conventions, code-based configuration, and avoids ThreadLocal-based magic. It handles authentication, not authorization.
It keeps configuration explicit, the surface area small, and XML out of the setup.