Pre-signed URLs

Hawk allows you to generate a bewit signature for any GET request. Including this bewit signature in your request will then authenticate and authorize the request. All TaskCluster APIs support authentication of GET requests using these bewit signatures. And you'll find that the official taskcluster-client offers an API for generating these signatures.

Pre-signed URLs are most often used to provide signed URLs allowing another application to download a private artifact without including TaskCluster authentication headers.