Maintain implementation notes as Auth 2 is developed, for developers wishing to support both v1 and v2

[tomcrane]

trafficstars

Clients like UV and Mirador may wish to support both Auth 1.0 and Auth 2.0 at the same time - there are extant Auth 1.0 servers out there.

Implementation notes can describe where the two specs deviate.

We don't yet know how much backwards compatibility there might be. #1290 is entirely backwards compatible but isn't dealing with third party cookie issues.

[zimeon]

IMO Auth 1 and Auth 2 are sufficiently different that it would probably be best to have two separate implementations in code that would want to support both. Suggest "close, won't fix"

[tomcrane]

The Auth spec does need some implementation notes but they might be ccokbook recipes

[tomcrane]

Do we need the 2023 version of https://iiif.io/api/auth/1.0/implementation/ ?

[azaroth42]

... too late. Would go into recipes anyway.