how to get LTI key with new UI?

In develop keys, for LTI key we have detail column show client ID and show key button. CLick on the show key we can get the LTI key for integration.

Within the new UI it is have link `view in canvas app` and do not have the show key button so I want to ask where we can get the key in new UI

Find more posts tagged with

Accepted answers

AlexisNast

I discussed this with our developers and they indicated that you could put any value there because it is a tool-side secret that Canvas never knows about. It's used to sign JWT tokens, which Canvas then verifies using the LTI tool's public JWK, derived from that secret. Canvas never references that value in its code, so we are not validating based on it.

In LTI 1.1 a secret was required, which may be the source of confusion. However, LTI 1.3 uses OAuth2 and JSON Web Tokens, which do not require a shared secret.

All comments

Chris

Hi @TracyL11212593,

I'm going to tag @AlexisNast on this one for her awareness. I don't think many app vendors ask for the key as part of their setup, but for the ones who do need it I'm not seeing an obvious way to get it anymore. Hopefully Alexis can shed some light on this.

-Chris

AlexisNast

We removed the key because it does not do anything on the back-end for LTI keys (though it does for API keys.) I'm very curious what it's needed for because of this. If there's a specific use case and you can let us know about it here or by emailing me (alexis.nast@instructure.com) I'd very much appreciate it!

Delux45195161

Hello @AlexisNast we are using LTI integration with NodeJS / ReactJS project, using this GitBug porject as a boilerplate https://github.com/doldsimo/lti-1.3-canvas-lms and we do send the LTI key there (as part of https://github.com/doldsimo/lti-1.3-canvas-lms/blob/main/server/index.js ). So I am not sure how this works behind the hook, but can you pla take a look into that piece of code, and let us know, if this will affect us in any way? As the code seems to use this value already:

// Setup

lti.setup(process.env.LTI_KEY,

{

…

})

AlexisNast

Delux45195161

Thank you!

Unanswered Questions

Learning Mastery Gradebook: assign_outcome_order API Returns Success But Doesn't Persist Column Order
Summary:The Learning Mastery Gradebook allows drag-and-drop reordering of outcome columns, and this triggers a call to /api/v1/courses/:course_id/assign_outcome_order. The API returns 204 No Content (success), but the column order does not persist after page refresh. Steps to Reproduce: Open Learning Mastery Gradebook for…
New Quizzes QTI Import Not Working
We have enabled the automatic migration of Classic to New Quizzes. When we import QTI files, though, they always fail to load as New Quizzes. If we disabled New Quiz Migration, it works. Why does it only work for Classic Quizzes? Are there any guaranteed tools that will generate QTI files that will import correctly as New…
System-wide (global) Notification Defaults
Is it possible to change the system-wide notification defaults for a hosted Canvas instance? Since I can't find a way to do it, nor any reference to doing it, I'm assuming not but wanted to make sure before I give that as an answer.
LockDown Browser & 2‑in‑1 / Tablet Mode Devices (Security Concern?)
Hi everyone, I had a teacher reach out with an odd (and concerning) LockDown Browser issue and wanted to see if others have experienced something similar. A student was taking a quiz using Respondus LockDown Browser on a Chromebook 300e Yoga G4 (8GB), a 2‑in‑1 device that can flip into tablet mode. During the active quiz,…
Gradebook Color Status for Incomplete 2-Part Discussions (Discussion Checking-point)
Hi all, Quick question about the Gradebook color status for a 2-part checkpoint discussion. If a student completes the first due date (initial post) but does not complete the required replies by the second due date, is there any way for Canvas to automatically show a color (e.g., missing/late) instead of staying as…