[OpenID] openid error mode

John Bradley john.bradley at wingaa.com
Wed Jan 6 14:47:43 UTC 2010


I stand corrected.   A quick look back at the test results is not encouraging.    For direct errors I think Yahoo may be the only one I found that passed.   Google and MyOpenID are sending back something other than a form encoded response.

Others are trying to do a redirect to some other page etc. 

For indirect error responses Yahoo is returning the Direct error response.  I think that needs work!

I think those tests were added after the last OSIS interop,  so most people haven't been through them.

It is an area that needs some work.   

John B.
On 2010-01-06, at 11:21 AM, Andrew Arnott wrote:

> 2010/1/6 John Bradley <john.bradley at wingaa.com>
> I have to admit that I have never tested OPs or RPs for processing error messages according to the spec.
> 
> Another thing to add to the tests:)
> 
> Actually we already have two tests on test-id.org:
> OP sends properly formatted error responses to invalid direct request messages
> OP sends properly formatted error responses via redirect to the RP to invalid indirect request messages
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openid.net/pipermail/openid-specs/attachments/20100106/8e398837/attachment.htm>


More information about the specs mailing list