tickets
pythonic kerberosish ticket system: easy to use, easy to subclass
...Fields 'valid_until', 'flags' and 'data' may be optionally encrypted using AES128-CBC or TripleAES128-CBC. Values 'data' and 'entropy' may consist of arbitrary objects which are transparently pickled(serialized), optionally gzipped and of course securely signed.
Specific implementations are included:
FormTicket: provides core implementation of state-less Cross Site Request Forgery protection.
Other use cases include ticketing object param values pointing at URL:s or services in HTML-objects such as Flash or Java Applets. This adds server-side choises to be made while preventing users from using arbitrary values.
...