Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-58374

LTI gives no debug information when message verification fails

    XMLWordPrintable

    Details

      Description

      I ran into this while testing MDL-37168. Due to the way how I had ngrok and local Apache vhost set up, the OAuth verification was failing in lti_verify_message(). It took me a while to realize why and when it is happening. To get know the reasons, I had to add an extra line to the code block where lti_verify_message() catches all the OAuth exceptions, swallows the useful information and silently returns false.

      I believe we should always record such problems into the error log, if we have no better way to inform the user on what went wrong.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              mudrd8mz David Mudrák (@mudrd8mz)
              Reporter:
              mudrd8mz David Mudrák (@mudrd8mz)
              Peer reviewer:
              Ankit Agarwal
              Integrator:
              Dan Poltawski
              Tester:
              John Okely
              Participants:
              Component watchers:
              Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Fix Release Date:
                8/May/17