According to the OpenBadges v2.0 specification, the criteria ID should be "the URI of a webpage that describes in a human-readable format the criteria for the BadgeClass".

However, currently in the source code for /badges/badge_json.php, the criteria ID is set to the URL of the badge_json.php site itself (for example https://moodle.de/badges/badge_json.php?id=36), which is in JSON format and not a "webpage in human-readable format".

The result is that, if you click on "View external criteria" in badgr, you are redirected to this json page. You can see what I mean by checking out this example: https://api.badgr.io/public/assertions/AhRNL2SoTeGuZ6jyOXSqfA?identity__email=jydjbgtmdbhitmyvxn%40kvhrr.com

Instead, the URL should ideally point to something like the criteria overview of the badge (for example https://moodle.de/badges/criteria.php?id=36). This page would also need to be updated so that it is publicly available (no login or capability requirements). However, the buttons for editing criteria should only be displayed if a user has the appropriate capability.