id_token not being passed in LTI Advantage call

id_token not being passed in LTI Advantage call

by DREW HAMMERBECK -
Number of replies: 2

Greetings, 

We're seeing interesting behavior wherein an LTI 1.3 launch from a moodle instance isn't passing the id_token and resulting in an error. 


in the screenshot here (our test instance, you can see the id_token being passed to our tool) in the Chrome browser: 

https://drive.google.com/file/d/1VxKCQyb7L97ryvaoKA-J-zoXfrTLTGsD/view?usp=sharing


But in this LMS instance, in Google Chrome, you can see that that the id_token is NOT being passed in the payload. Do you know if there are browser or other limitations for this not being passed? the instance is www.myselcedu.com

https://drive.google.com/file/d/1YW6-pQopNybnGfbmXAW2CdSctL8CUD6E/view?usp=sharing









რეიტინგების საშუალო: -
In reply to DREW HAMMERBECK

Re: id_token not being passed in LTI Advantage call

by Jake Dallimore -
Core developers სურათი Moodle HQ სურათი Particularly helpful Moodlers სურათი Peer reviewers სურათი Plugin developers სურათი Testers სურათი
Hi Drew,

The browser handling of cross site cookies resulted in a number of launch issues - all reported in the LTI forums somewhat recently (https://moodle.org/mod/forum/view.php?id=7978) . This was patched in MDL-71887. Is that site running a version of Moodle which includes that patch? It also might help to include the network trace, in full, so we can run through it. See https://developer.chrome.com/docs/devtools/network/reference/#save-as-har for details on that. From memory, the telltale sign was a set-cookie response header midway through the launch process.

Hope that helps,
Jake
რეიტინგების საშუალო: Useful (1)