[Building Sakai] LTI Consumer

[Adrian Fish]

I've JIRA'd it here: https://jira.sakaiproject.org/browse/BLTI-152

On 07/02/2012 10:17, Steve Swinsburg wrote:
> Unless the other end is storing the image_url that is sent, it 
> shouldn't need to be public, because only the user that is performing 
> the launch will see their own image - when would other users get that 
> data?
>
> I do see an issue if multiple LMS's launch the same external tool 
> though, and the remote tool does store some data. For example if you 
> launched an external forums tool, and it stored what your image_url is 
> so that other users can see who is posting etc.
>
> The Profile2 image entity provider makes the same privacy checks that 
> the tool does, returning the default if the requirements aren't met, 
> but it requires the requestor to have a session.
>
> I've been thinking of adding a public setting to Profile2, this could 
> be one field that has it. Then the provider could return the default 
> image if it isn't public.
>
> Thoughts?
>
> cheers,
> Steve
>
>
>
>
> On 07/02/2012, at 8:42 PM, Adrian Fish wrote:
>
>> No, it's not always public. Why should an image provided by the 
>> consumer have to be public? That seems a bit weird. Is it just 
>> because of technical difficulty with authn?
>>
>> On 07/02/2012 03:47, csev wrote:
>>> Yeah - this is a great idea.   Is the image always a public URL? 
>>>  That is the rule for user_image
>>>
>>> /Chuck
>>>
>>> On Feb 6, 2012, at 5:57 PM, Steve Swinsburg wrote:
>>>
>>>> Hi Adrian,
>>>>
>>>> Trunk doesn't, debug info below. Submit a Jira for it, this is 
>>>> trivial given the entity provider for profile2 images. Could be 
>>>> (de)activated in sakai.properties for those that don't deploy Profile2.
>>>>
>>>> cheers,
>>>> Steve
>>>>
>>>> *BasicLTI Endpoint*
>>>> http://www.imsglobal.org/developers/BLTI/tool.php
>>>>
>>>> *BasicLTI Parameters:*
>>>> context_id=mercury
>>>> context_label=mercury site
>>>> context_title=mercury site
>>>> ext_basiclti_submit=Press to continue to external tool.
>>>> ext_lms=sakai-Revision: 104456
>>>> ext_sakai_server=http://nightly2.sakaiproject.org:8082  <http://nightly2.sakaiproject.org:8082/>
>>>> ext_sakai_serverid=localhost
>>>> ext_sakai_session=ec946093d414b298b2541a0796b456be897b2d0f0e4d740714c7a7bbbc29ee85596e093fb68a1169
>>>> launch_presentation_css_url=http://nightly2.sakaiproject.org:8082/library/skin/default/tool.css
>>>> launch_presentation_locale=en_US
>>>> lti_message_type=basic-lti-launch-request
>>>> lti_version=LTI-1p0
>>>> oauth_callback=about:blank
>>>> oauth_consumer_key=12345
>>>> oauth_nonce=41376130897586986
>>>> oauth_signature=qCXvkcP9AZkIn0C7k+qtckhiNv0=
>>>> oauth_signature_method=HMAC-SHA1
>>>> oauth_timestamp=1328568918
>>>> oauth_version=1.0
>>>> resource_link_id=64249e85-9e70-45b5-8d35-38f731feab37
>>>> roles=Instructor
>>>> tool_consumer_info_product_family_code=Revision: 104456
>>>> tool_consumer_info_version=Revision: 104456
>>>> user_id=admin
>>>>
>>>>
>>>> On 07/02/2012, at 9:34 AM, Adrian Fish wrote:
>>>>
>>>>> Does anybody know whether the latest LTI consumer sends the 
>>>>> user_image
>>>>> parameter? It could send the direct url of the user's profile 
>>>>> picture,
>>>>> but my version doesn't.
>>>>>
>>>>> Cheers,
>>>>> Adrian.
>>>>>
>>>>> -- 
>>>>> ==================================
>>>>> Adrian Fish
>>>>> Software Engineer
>>>>> B66 Management School
>>>>> Lancaster University
>>>>> Lancaster
>>>>> LA1 4YW
>>>>>
>>>>> http://www.sakaiproject.org <http://www.sakaiproject.org/>
>>>>> http://confluence.sakaiproject.org/display/YAFT/Yaft
>>>>> http://confluence.sakaiproject.org/display/CLOG/Home
>>>>> http://confluence.sakaiproject.org/display/BBB/Home
>>>>>
>>>>> _______________________________________________
>>>>> sakai-dev mailing list
>>>>> sakai-dev at collab.sakaiproject.org
>>>>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>>>>
>>>>> TO UNSUBSCRIBE: send email to 
>>>>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of 
>>>>> "unsubscribe"
>>>>
>>>> _______________________________________________
>>>> sakai-dev mailing list
>>>> sakai-dev at collab.sakaiproject.org 
>>>> <mailto:sakai-dev at collab.sakaiproject.org>
>>>> http://collab.sakaiproject.org/mailman/listinfo/sakai-dev
>>>>
>>>> TO UNSUBSCRIBE: send email to 
>>>> sakai-dev-unsubscribe at collab.sakaiproject.org with a subject of 
>>>> "unsubscribe"
>>>
>>
>> -- 
>> ==================================
>> Adrian Fish
>> Software Engineer
>> B66 Management School
>> Lancaster University
>> Lancaster
>> LA1 4YW
>>
>> http://www.sakaiproject.org
>> http://confluence.sakaiproject.org/display/YAFT/Yaft
>> http://confluence.sakaiproject.org/display/CLOG/Home
>> http://confluence.sakaiproject.org/display/BBB/Home
>

-- 
==================================
Adrian Fish
Software Engineer
B66 Management School
Lancaster University
Lancaster
LA1 4YW

http://www.sakaiproject.org
http://confluence.sakaiproject.org/display/YAFT/Yaft
http://confluence.sakaiproject.org/display/CLOG/Home
http://confluence.sakaiproject.org/display/BBB/Home

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://collab.sakaiproject.org/pipermail/sakai-dev/attachments/20120207/991c8b59/attachment.html