They are both for proxied media, but using different way of authenticating. Basically, one for the web UI, and the other for the Mastodon API.

CC: @menel@snikket.de @itnotes@snac.it-notes.dragas.net