Integrating OAuth2 into my app

msteele3

Hello,

I am a student who has been working on a canvas LMS integrated application that helps with my classes. I was trying to set up OAuth2 for it so I could have a better login experience but the docs say that the app needs to be registered and are quite unclear on the actual steps to set it up.

Currently, I just paste in and securely store the auth token in the back end but going to my account settings and finding it is not a smooth application flow, and so in the interest of having others be able to use my app I want to use OAuth2 to make it smoother.

I was wondering if anyone could point me in the right direction as to how to register an app/set up the OAuth2 flow for a web app.

 

 

Chris

Hi @msteele3,

You can check out the OAuth2 - Canvas LMS REST API Documentation page for information about the general OAuth2 flow with Canvas.  You will need to work with a Canvas administrator to set up the developer key that's used in the oAuth2 flow before you'll be able to use it.  There may be some steps you'll need to do to get your app approved, and perhaps your school/institution may even say "no", but I'd strongly urge you not to ask/prompt users for their own API Tokens, as that's a violation of the Canvas Terms of Service.  Your personal API token is great for testing, doing your own things, proof of concepts, etc, but once you want others to use your app, the OAuth2 flow (with or without LTI) is definitely the way you need to go.

Hope this helps!

-Chris