Skip to content

Commit ed8f2ea

Browse files
committed
Use the client ID for the the iss claim also.
This switches from using the webwork server url for the iss claim to using the client id in the JWT sent when requesting an access token from the LMS for grade passback. This is confirmed to work on Moodle, Canvas, and D2L.
1 parent 70d9ea2 commit ed8f2ea

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/WeBWorK/Authen/LTIAdvantage/SubmitGrade.pm

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -138,7 +138,7 @@ async sub get_access_token ($self) {
138138
encode_jwt(
139139
payload => {
140140
aud => $ce->{LTI}{v1p3}{AccessTokenAUD},
141-
iss => $c->url_for('root')->to_abs->to_string,
141+
iss => $ce->{LTI}{v1p3}{ClientID},
142142
sub => $ce->{LTI}{v1p3}{ClientID},
143143
jti => $private_key->{kid}
144144
},

0 commit comments

Comments
 (0)