I stand corrected.   A quick look back at the test results is not encouraging.  
  For direct errors I think Yahoo may be the only one I found that passed.   
Google and MyOpenID are sending back something other than a form encoded 
response.

Others are trying to do a redirect to some other page etc. 

For indirect error responses Yahoo is returning the Direct error response.  I 
think that needs work!

I think those tests were added after the last OSIS interop,  so most people 
haven't been through them.

It is an area that needs some work.   

John B.
On 2010-01-06, at 11:21 AM, Andrew Arnott wrote:

> 2010/1/6 John Bradley <[email protected]>
> I have to admit that I have never tested OPs or RPs for processing error 
> messages according to the spec.
> 
> Another thing to add to the tests:)
> 
> Actually we already have two tests on test-id.org:
> OP sends properly formatted error responses to invalid direct request messages
> OP sends properly formatted error responses via redirect to the RP to invalid 
> indirect request messages
> 

_______________________________________________
specs mailing list
[email protected]
http://lists.openid.net/mailman/listinfo/openid-specs

Reply via email to