Tsugi, Canvas, and JWKS

[Chris Filkins]

Good morning!

Late last week it appears Canvas finally executed the change to block requests missing user agents.  While we'd previously updated the LTI13.php to add a user agent to cURL requests, our tools started to fail late last week when trying to request jwks from Canvas.

This morning I identified what I believe to be the root cause - in LTIX.php, when get_file_contents is used to request the jwks from Canvas, there's no user agent provided and Canvas returns a 403.  Annoyingly, this does _not_ show up on Canvas' report for requests without user agents.

I'm working on getting our local instance updated this morning, and will hopefully submit a PR later this week to get this fix implemented into the official code.

-Chris

[Charles Severance]

Chris,

I ran into this myself and fixed it already:

https://github.com/tsugiproject/tsugi/commit/1250f71fe7a8aed72676f7cfc22a66cbc19bc872

Beginning of the semester surprises :)

/Chuck

--
You received this message because you are subscribed to the Google Groups "Tsugi Developers" group.
To unsubscribe from this group and stop receiving emails from it, send an email to tsugi-dev+...@apereo.org.
To view this discussion visit https://groups.google.com/a/apereo.org/d/msgid/tsugi-dev/bbbf4116-47eb-4346-b7b2-1d7f347e2d53n%40apereo.org.