Hawk responses are not checked for authorization

[kumar303]

Unless I missed it in the source, request's Hawk support sends a valid request header but it does not verify the incoming response. This should at least be documented since developers will be creating a security hole in their client code.

This is how responses are verified with Hawk:

• https://github.com/hueniverse/hawk#response-payload-validation
• client.authenticate() from https://github.com/hueniverse/hawk#usage-example

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.