[OpenID] openid error mode

[Andrew Arnott]

DotNetOpenAuth RPs log away openid.error's content and displays a generic
failure message to the user.

Incidentally I was just planning on expanding the set of scenarios where
DotNetOpenAuth OPs return openid.mode=error's.  OPs that have stringent
security requirements that the RP doesn't satisfy (for example, the RP
doesn't appear on a closed OP's whitelist) could result in an
openid.mode=error with a message saying "get your RP on the white list
first".
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death
your right to say it." - S. G. Tallentyre


On Mon, Jan 4, 2010 at 10:18 AM, Johannes Ernst <jernst+openid.net@
netmesh.us> wrote:

> Apparently a few people in the wild do implement openid.error. What do RPs
> do when they receive that? Display it to the user? Throw up their hands and
> say "something weird happened"?
>
> There are plenty of problems with the way openid.error is (under-) defined,
> including:
>  - not internationalizable
>  - not computer-interpretable
>  - unclear whether the conveyed text message is formatted, or how.
>
> Questions:
> 1. Could we come up with an enumeratable list of error conditions, or are
> everybody's possible errors different? Error codes?
> 2. Should we define that the error message be used for internal logging or
> to be shown to the user?
> 3. If the latter, should we define that the locale of the error message
> should be the user's locale at the OP? What if the problem is that the user
> is not known at the OP? Should the RP pass on a locale?
>
> Happy new year everybody,
>
>
>
> Johannes.
>
> _______________________________________________
> general mailing list
> general at lists.openid.net
> http://lists.openid.net/mailman/listinfo/openid-general
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-general/attachments/20100104/bcc326e3/attachment.htm>