ali-security/hawk-5509

Hawk is an HTTP authentication scheme that uses a message authentication code (MAC) algorithm to provide partial cryptographic verification of HTTP requests. It is designed for services that cannot or will not use TLS for all resources, and provides mechanisms for authenticated requests with optional payload validation. Hawk is intended for client-server scenarios where both parties have access to a shared symmetric key, and is not intended to protect the key itself. It is commonly used for API authentication and access control.