LTI key defined, "Public JWK URL" never used

I'd asked this question before, but it's probably more appropriate for this developers' forum.

I've configured an LTI key in Canvas with a URL in the "Public JWK URL" field. After inspecting the traffic to my server, I see that Canvas never requests that URL. However, the tool works fine. How can this be?

Find more posts tagged with

Apps & LTIs

Accepted answers

All comments

matthew_buckett

The JWK keys are only currently used for LTI Advantage services (eg Names and Roles Provisioning Service, https://canvas.instructure.com/doc/api/names_and_role.html), to just launch a tool you don't need a JWK key in your tool, just to validate the launch with the JWKs keys that Canvas is configured with ( eg https://canvas.instructure.com/api/lti/security/jwks )

lsloan

Thank you very much. That makes sense. I need to find some documentation of the LTI lifecycle. I probably wouldn't have even asked this question if I knew which documentation to RTFM. 🙂

Unanswered Questions

Finding the LTIv1.3 IDs for Members of a Course
I'm building a tool for my institution that imports grades from another LTI tool into Canvas so instructors can automate late assignment policies not otherwise supported by Canvas. I'm trying to use the LTIv1.3 ID which is readily available on the LTI-side as a link to the student record on Canvas, but I can't find the ID…
Canvas Media Question
How can one track Canvas Media use without having the reports available from Canvas Studio? Checking API endpoints and the Data 2 schema, there do not seem to be dedicated Canvas Media endpoints. Am I missing some? A method I've considered is using the body field of the wiki_pages table, as this contains the html code of…
Canvas Catalog API - Completed Certificates
Hello, I'm trying to utilize an API call to pull completed certificates and was hoping to download and store the certs as a backup. I can successfully run the API call but it will not allow me to view the certificate unless I access the URL while signed into an account where it's "my" cert. Is there a permissions setting…
UI for weekly progression idea
UI for weekly progression idea that rest in the Schedule tab of the **K-12 UI** of Canvas it's incomplete and I really would not take it and push it into instance but I am going to post it here because in the past people like @James && @robotcars || @Steve_25 have had terrific input in the past... maybe w/their eyes and…
Canvas integration with React + Flask webapp - initially for authenticaiton
I have a new React + Flask webapp. It has its own login for users to start using the app. I have added this as an external tool in Canvas. What I want initially is to see of canvas users can start using the webapp without having to login if they click on the external tool link in a canvas course. I have 2 methods…