我建议您查看 repoze.who 进行身份验证，并 repoze.what 进行授权.它们都被设计为通用的WSGI中间件，并且可以轻松地与任何WSGI框架一起使用.

I suggest you look to repoze.who for authentication and repoze.what for authorization. Both of them are designed to be generic WSGI middleware and easily can work with any of WSGI frameworks.