id_token not being passed in LTI Advantage call

id_token not being passed in LTI Advantage call

av DREW HAMMERBECK -
Galle vástádusa: 2

Greetings, 

We're seeing interesting behavior wherein an LTI 1.3 launch from a moodle instance isn't passing the id_token and resulting in an error. 


in the screenshot here (our test instance, you can see the id_token being passed to our tool) in the Chrome browser: 

https://drive.google.com/file/d/1VxKCQyb7L97ryvaoKA-J-zoXfrTLTGsD/view?usp=sharing


But in this LMS instance, in Google Chrome, you can see that that the id_token is NOT being passed in the payload. Do you know if there are browser or other limitations for this not being passed? the instance is www.myselcedu.com

https://drive.google.com/file/d/1YW6-pQopNybnGfbmXAW2CdSctL8CUD6E/view?usp=sharing









Gjennomsnittlig vurdering: -
Vástádussan geasa: DREW HAMMERBECK

Re: id_token not being passed in LTI Advantage call

av Jake Dallimore -
Bilde av Core developers Bilde av Moodle HQ Bilde av Particularly helpful Moodlers Bilde av Peer reviewers Bilde av Plugin developers Bilde av Testers
Hi Drew,

The browser handling of cross site cookies resulted in a number of launch issues - all reported in the LTI forums somewhat recently (https://moodle.org/mod/forum/view.php?id=7978) . This was patched in MDL-71887. Is that site running a version of Moodle which includes that patch? It also might help to include the network trace, in full, so we can run through it. See https://developer.chrome.com/docs/devtools/network/reference/#save-as-har for details on that. From memory, the telltale sign was a set-cookie response header midway through the launch process.

Hope that helps,
Jake
Gjennomsnittlig vurdering:Useful (1)
Vástádussan geasa: DREW HAMMERBECK

Re: id_token not being passed in LTI Advantage call

av Sabine Dautzenberg -

Hello !

I had this message because in the External Tool activity setting I didn't "Select content" from the the preconfigured tool (see screenshot bellow)

Did you check it ?

Gjennomsnittlig vurdering: -