Apache WSS4J provides a Java implementation of the OASIS Web Services Security (WS-Security) standards.