Tom Crane

If the server is unable to extract a user from the request, I'll now return missingCredentials. We don't have enough other flows yet to return any of the other cases....

Example error conditions on TOKEN service: ``` { error: "invalidCredentials", errorDescription: "The session has expired" } ``` ``` { error: "missingCredentials", errorDescription: "No user could be found in request" }...

@mialondon This has been superseded by the release of IIIF Auth 2.0 https://iiif.io/api/auth/2.0/ The issue still applies but the mechanism for conveying errors is now aligned with IIIF Presentation 3,...

The UV has an extra complexity for AV - it supports MPEG-DASH and HLS, via the dash.js and hls.js libraries. The British Library want to enforce access control such that...

Observations: The UV should only get dash/hls to make a credentialled request if auth services are present on the resource. This will make it easier for simple server implementations (host...

@edsilv This issue appears to have reverted to the previous behaviour for viewingHint only. The "paged" viewingHint on the manifest is being ignored (although the viewingDirection on the manifest is...

This should be fixed if still an issue. Although it may become less of an issue as v3 manifests become more common that v2; v3 goes straight from manifest =>...

This should be fixed if it's still an issue. Many anno search results will target the whole canvas - search-within isn't just for OCR-generated data, it could be a textual...

(but also update for Search v2)

https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/ARIA_Techniques/Using_the_button_role See "Labelling buttons" section; suggests `aria-label` is not required. Stanford aims for WCAG 2.0 https://www.w3.org/TR/WCAG20/ Stanford's UV work changed anchor tags to buttons.