apache/shiro
Apache Shiro is a powerful and easy-to-use Java security framework that performs authentication, authorization, cryptography, and session management
License & maintenance
Apache-2.0 is a permissive license: free to use commercially with attribution.
Last code push today.