Releases: Cvmcosta/ltijs
Releases · Cvmcosta/ltijs
V5.9.5 - Improvements to dynamic registration
A few improvements to dynamic registration:
- Fixed the regular LTI launch message type. This was not causing any issues, as the regular launch is always implied when performing dynamic registration.
- Added ability to modify dynamic registration options when creating a custom handler. Thank you @pfgray for the contribution!
The following example is a representation of the default Dynamic Registration flow with overriden custom parameters:
lti.onDynamicRegistration(async (req, res, next) => {
try {
if (!req.query.openid_configuration) return res.status(400).send({ status: 400, error: 'Bad Request', details: { message: 'Missing parameter: "openid_configuration".' } })
const message = await lti.DynamicRegistration.register(req.query.openid_configuration, req.query.registration_token, {
'https://purl.imsglobal.org/spec/lti-tool-configuration': {
custom_parameters: {
'custom1': 'value1',
'custom2': 'value2'
}
}
})
res.setHeader('Content-type', 'text/html')
res.send(message)
} catch (err) {
if (err.message === 'PLATFORM_ALREADY_REGISTERED') return res.status(403).send({ status: 403, error: 'Forbidden', details: { message: 'Platform already registered.' } })
return res.status(500).send({ status: 500, error: 'Internal Server Error', details: { message: err.message } })
}
})
V5.7.4 - Dynamic Registration Fix
Updating dynamic registration code to fix postMessage call.
The new return message is: '<script>(window.opener || window.parent).postMessage({subject:"org.imsglobal.lti.close"}, "*");</script>'
V5.6.7 - Update dependencies
Updating dependencies to fix potencial vulnerabilities.
V5.6.6 - Update to Names and Roles
V5.6.6
2021-01-29
- Added the capability to remove the limit of number of pages returned by the Names and Roles Service.
V5.6.5 - Blackboard compatibility
V5.6.5
2021-01-27
- Fixed bug where Blackboard would not see access token request iat and exp claims.
- Fixed bug where Blackboard would not accept the generated access token due to the "bearer" word not being capitalized.