Mark A. Matney, Jr.

Allow sending info.json XHR with Authorization header

2

Fixes #574.

Allow delegate system to produce valid HTTP 401 info.json responses

1

Closes #580. That issue attempts to explain why I think changing only the 401 responses for information requests is better than changing all 4xx responses.

Fix HTTP 302 redirects via delegate for identifiers with slashes

3

Fixes #581.

Delegate system does not allow HTTP 302 redirects for resources whose ID contains a slash

2

### The issue If a resource's identifier contains a slash (for example, if it's an [ARK](https://en.wikipedia.org/wiki/Archival_Resource_Key)), then a 302 redirect triggered by a Cantaloupe delegate will result in a 404,...

HTTP 401 info.json response is invalid

3

### The issue As a follow up to #555: it looks like c9aac7550893a65a1fd5b35c7a796fab644bcb7c introduced a non-spec compliant change. From https://iiif.io/api/auth/1.0/#interaction-with-access-controlled-resources (emphasis mine): > These interactions rely on requests for Description...

### The issue Per the IIIF Auth 1.0 spec, [browser clients may send an Authorization header with info.json requests](https://iiif.io/api/auth/1.0/#the-json-access-token-response): > Once obtained, the access token must be passed back to...

Delegate system should have an easy way to determine the type of request

2

I am working on a Java delegate that implements IIIF Auth 1.0. In order to support at least one of the use cases ([all-or-nothing](https://iiif.io/api/auth/1.0/#all-or-nothing-access)), it is necessary within [JavaDelegate::preAuthorize](https://cantaloupe-project.github.io/manual/5.0/javadoc/edu/illinois/library/cantaloupe/delegate/JavaDelegate.html#preAuthorize()) to...

UV does not call access cookie service for "tiered access" image that specifies Kiosk interaction

30

**UV version:** ``` [email protected] [email protected] ``` **I'm submitting a:** - [x] bug report - [ ] feature request - [ ] support request **Current behavior:** After fetching an info.json that...

lack of validation on returned case citations

3

I am doing some experiments on some of the ["Statutes at Large" search-able PDFs on FDsys](https://www.gpo.gov/fdsys/browse/collection.action?collectionCode=STATUTE). The text layer presumably contains raw OCR output, since it contains a lot of...

model diagram is slightly inconsistent with spec

2

Apologies if I'm not interpreting the model diagram in Section 2 correctly, but it looks to me that the `annotations` arrow on the right side is directed from "Anno." to...