mozilla/browserid — Issue #506: The following assertion returns an Internal Server Error; also, server should return JSON errors, not HTML
Author: gerv
Created: 2011-10-31 16:31:24+00:00
State: open

POST to https://browserid.org/verify with Content-Type'application/x-www-form-urlencoded, and content as follows:

assertion=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%3Fbrowserid_assertion%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&audience=http%3A%2F%2Fbmo-4.0.localhost%3A80

The server should try very hard never to return an ISE, because many people (like me) pipe the return straight into a JSON parser. Your 500 error page should be some static error JSON, not an HTML page.

Gerv