Well, I've only used repoze.who and repoze.what. I started implementing my own .auth library before I found those two. repoze.who is exactly what I had in min

Well, I've only used repoze.who and repoze.what. I started implementing my own .auth library before I found those two. repoze.who is exactly what I had in mind for an authentication library, and much better architected than my own solution. I don't use any of the existing plugins (apart from openid), so the real win for me is the improved design compared to whatever I could come up with.