search

instructure / canvas-lms

The open LMS by Instructure, Inc.
https://github.com/instructure/canvas-lms/wiki
GNU Affero General Public License v3.0
5.4k stars 2.42k forks source link

self hosted canvas sends request to canvas.instructure.com #2331

Open amg-web opened 3 months ago

amg-web commented 3 months ago

I noticed failed requests on instances updated / deployed on Feb / march 2024 self hosted canvas sends on every page load request to: https://canvas.instructure.com/post_message_forwarding?rev=5967388a5ba3a&token=eyJ0eXAiOiJKV1QiL

Screenshot from 2024-03-19 09-15-37

haydenwalker980 commented 1 month ago

this is intended behavior. it helps LTI applications forward info to your Canvas instance (from what I can read off the source code, anyways...)

see app/controllers/lti/platform_storage_controller.rb:73

knaito-asial commented 3 weeks ago

Could you try to change config/security.yml ? This may define the domain of post_message_forwarding.

jfoscue commented 3 weeks ago

@knaito-asial did you get this fixed? I am having same issue. What did you change yours to in the security.yml file?

amg-web commented 3 weeks ago

@knaito-asial @jfoscue changing config/security.yml does not fix it. also it will brake some lti applications, eg. zoom

jfoscue commented 3 weeks ago

Thanks!  I’m wondering if the client also has to change too. We are using Rustici Engine for SCORM content.JimOn Jun 7, 2024, at 9:07 AM, anmg @.***> wrote: @knaito-asial @jfoscue changing config/security.yml does not fix it. also it will brake some lti applications, eg. zoom

—Reply to this email directly, view it on GitHub, or unsubscribe.You are receiving this because you were mentioned.Message ID: @.***>

amg-web commented 2 weeks ago

@jfoscue as I wrote change this value brakes LTI 1.3 integrations