LTI authentication not working when embedded; allow frame embedding enabled

LTI authentication not working when embedded; allow frame embedding enabled

by Jorine Koenderman -
Number of replies: 1

Hi All,

I'm facing this problem regularly and still cannot find a solution; also not in https://moodle.org/mod/forum/discuss.php?d=345828.

We are running 2 Moodle 3.9 websites; both HTTPS.

The LTI provider published a whole course. This website used a normal moodle theme (boost) (so no probem with favicons)

All settings are done as decribed in moodle docs:

  1. Enable LTI authentication plugin
  2. Enable Publish as LTI tool
  3. Allow frame embedding = On

In the LTI consumer:

  1. Add external tool
  2. use cartridge URL and secret key
  3. use some text as consumer key
  4. launch container default or embed

When I click on the external tool as a student, the login page of the LTI provider is shown.

When I change the launch container to new window, I can directly access the content as expected.

I tried the Saltire tool platform with my own LTI provider and the launch container embed. When I click on connect, this message is sent out:

GET /tc-profile.php/sdd40c1026ba45a96721f49d3eb16ad24 HTTP/1.1
Accept: application/vnd.ims.lti.v2.toolconsumerprofile+json
Host: saltire.lti.app
Response:

HTTP/1.1 400 Bad Request
Date: Fri, 23 Apr 2021 08:24:18 +0000
Server: Apache
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Although it seems to work when opening in new window, we would like to use the content embedded.

Is there anyone who could help?

Average of ratings: -