id_token not being passed in LTI Advantage call

id_token not being passed in LTI Advantage call

by DREW HAMMERBECK -
Number of replies: 2

Greetings, 

We're seeing interesting behavior wherein an LTI 1.3 launch from a moodle instance isn't passing the id_token and resulting in an error. 


in the screenshot here (our test instance, you can see the id_token being passed to our tool) in the Chrome browser: 

https://drive.google.com/file/d/1VxKCQyb7L97ryvaoKA-J-zoXfrTLTGsD/view?usp=sharing


But in this LMS instance, in Google Chrome, you can see that that the id_token is NOT being passed in the payload. Do you know if there are browser or other limitations for this not being passed? the instance is www.myselcedu.com

https://drive.google.com/file/d/1YW6-pQopNybnGfbmXAW2CdSctL8CUD6E/view?usp=sharing









Average of ratings: -
In reply to DREW HAMMERBECK

Re: id_token not being passed in LTI Advantage call

by Jake Dallimore -
Picture of Core developers Picture of Moodle HQ Picture of Particularly helpful Moodlers Picture of Peer reviewers Picture of Plugin developers Picture of Testers
Hi Drew,

The browser handling of cross site cookies resulted in a number of launch issues - all reported in the LTI forums somewhat recently (https://moodle.org/mod/forum/view.php?id=7978) . This was patched in MDL-71887. Is that site running a version of Moodle which includes that patch? It also might help to include the network trace, in full, so we can run through it. See https://developer.chrome.com/docs/devtools/network/reference/#save-as-har for details on that. From memory, the telltale sign was a set-cookie response header midway through the launch process.

Hope that helps,
Jake
Average of ratings: Useful (1)
In reply to DREW HAMMERBECK

Re: id_token not being passed in LTI Advantage call

by Sabine Dautzenberg -

Hello !

I had this message because in the External Tool activity setting I didn't "Select content" from the the preconfigured tool (see screenshot bellow)

Did you check it ?

Average of ratings: -