PHP OAuth Signature

Hi,

I have been banging my head against the wall for quite a few days now not being able to find a solution for this when I was hoping it would be quite simple.

I would like to create a php page that validates the signature that is returned from Canvas when calling my LIT.

I have managed to generate an OAuth signature but they don't seem to match.

I have tried several OAuth Libraries but nothing seems to get the signature correct.

Is there a preferred method or a know working example of php based code that will successfully validate the returned signature?

Thanks!

Find more posts tagged with

Accepted answers

Robbie_Grant

@kheading ,

Were you able to find an answer to your question? I am going to go ahead and mark this question as answered because there hasn't been any more activity in a while so I assume that you have the information that you need. If you still have a question about this or if you have information that you would like to share with the community, by all means, please do come back and leave a comment. Also, if this question has been answered by one of the previous replies, please feel free to mark that answer as correct.

Robbie

All comments

pklove

Have you looked at any of these:

SPV Software Products: PHP LTI Tool Provider class

GitHub - IMSGlobal/LTI-Tool-Provider-Library-PHP

Sakai LTI Unit Tests ( sakai/basiclti/basiclti-docs/resources/docs/sakai-api-test at master · sakaiproject/sakai · GitHub )

kheading

Hi Peter,

Thanks for sharing the links, I had tried a few of these. the issues is at the moment im not sure how to pass the OAuth parameters to the tool for it to verify.

This is my current code and it gets as far as printing the error so I know its at least calling the class, but fails to print any error.

foreach($_POST as $key => $item){

print_r($key . ' : ' . $item . '
');

if(stripos($key, 'OAuth')){

$OAuthData[$key] = $item;

}

}

use IMSGlobal\LTI\ToolProvider;

$consumer = new ToolProvider\ToolConsumer('testing.edu');
$consumer->name = 'Testing';
$consumer->secret = 'SECRETPASSWORD';
$consumer->enabled = TRUE;

class App1ToolProvider extends ToolProvider\ToolProvider {

function onLaunch() {

// Insert code here to handle incoming connections - use the user,
// context and resourceLink properties of the class instance
// to access the current user, context and resource link.
print_r('LAUNCH SUCCESS');
}

function onError() {

// do something

print_r('ERROR :' . $this->reason . '' );

return true;

}

}

$tool = new App1ToolProvider(NULL);
$tool->handleRequest();

print_r($_POST);

the result im getting is....

oauth_consumer_key : 0987654321
oauth_signature_method : HMAC-SHA1
oauth_timestamp : 1512452771
oauth_nonce : LMmi6SLfheImrIhvWtoeyeVpFjrvccZscokl2GyjKuk
oauth_version : 1.0
context_id : 84b2497a2f2de6843ccd63ba42260012ed0a1179
context_label : TEST
context_title : TEST - Pages
*/ DATA REMOVED */
ext_roles : urn:lti:instrole:ims/lis/Administrator,urn:lti:instrole:ims/lis/Instructor,urn:lti:instrole:ims/lis/Student,urn:lti:role:ims/lis/Instructor,urn:lti:role:ims/lis/Learner/NonCreditLearner,urn:lti:role:ims/lis/Mentor,urn:lti:sysrole:ims/lis/User
launch_presentation_document_target : iframe
launch_presentation_height : 400
launch_presentation_locale : en-AU
launch_presentation_return_url : */ DATA REMOVED */
launch_presentation_width : 800
lti_message_type : basic-lti-launch-request
lti_version : LTI-1p0
oauth_callback : about:blank
resource_link_id : 84b2497a2f2de6843ccd63ba42260012ed0a1179
resource_link_title : DEV
roles : Instructor,urn:lti:instrole:ims/lis/Administrator
tool_consumer_info_product_family_code : canvas
tool_consumer_info_version : cloud
tool_consumer_instance_contact_email : notifications@instructure.com
tool_consumer_instance_guid : 4FanjgHyUlWLdb8Js7qegOANBotb65dMMzCA98ID:canvas-lms
tool_consumer_instance_name : Walford Anglican School for Girls
user_id : 9332fc84ff99ee2cc323146889b7a365c04f3f6b
oauth_signature : nm/Vvh2iwxUsa5E1QCrnf9AESkg=
ERROR :

Any help is greatly appreciated

Thanks!

unknown

Any news on how to create this integration in php?

Robbie_Grant

@kheading ,

Robbie

Unanswered Questions

Finding the LTIv1.3 IDs for Members of a Course
I'm building a tool for my institution that imports grades from another LTI tool into Canvas so instructors can automate late assignment policies not otherwise supported by Canvas. I'm trying to use the LTIv1.3 ID which is readily available on the LTI-side as a link to the student record on Canvas, but I can't find the ID…
Canvas Media Question
How can one track Canvas Media use without having the reports available from Canvas Studio? Checking API endpoints and the Data 2 schema, there do not seem to be dedicated Canvas Media endpoints. Am I missing some? A method I've considered is using the body field of the wiki_pages table, as this contains the html code of…
Canvas Catalog API - Completed Certificates
Hello, I'm trying to utilize an API call to pull completed certificates and was hoping to download and store the certs as a backup. I can successfully run the API call but it will not allow me to view the certificate unless I access the URL while signed into an account where it's "my" cert. Is there a permissions setting…
UI for weekly progression idea
UI for weekly progression idea that rest in the Schedule tab of the **K-12 UI** of Canvas it's incomplete and I really would not take it and push it into instance but I am going to post it here because in the past people like @James && @robotcars || @Steve_25 have had terrific input in the past... maybe w/their eyes and…
Canvas integration with React + Flask webapp - initially for authenticaiton
I have a new React + Flask webapp. It has its own login for users to start using the app. I have added this as an external tool in Canvas. What I want initially is to see of canvas users can start using the webapp without having to login if they click on the external tool link in a canvas course. I have 2 methods…