Summer Security is a Java web authentication library for applications that need something simpler than a full security framework.
It supports HTTP Basic auth, form login compatible with Spring Security conventions, code-based configuration, and avoids ThreadLocal-based magic. It handles authentication, not authorization.
The taste is clear: explicit wiring, small surface area, and no XML ceremony.