tickets
pythonic kerberosish ticket system: easy to use, easy to subclass
...Values 'data' and 'entropy' may consist of arbitrary objects which are transparently pickled(serialized), optionally gzipped and of course securely signed.
Specific implementations are included:
FormTicket: provides core implementation of state-less Cross Site Request Forgery protection.
Other use cases include ticketing object param values pointing at URL:s or services in HTML-objects such as Flash or Java Applets. This adds server-side choises to be made while preventing users from using arbitrary values.
Severe testing is done and will be mandatory for core and every specific implementation. ...