IMathAS and Canvas LTI 1.3 integration using a developer key

[eth18]

Summary:

I am struggling to integrate Canvas with IMathAS using a developer key.

Steps to reproduce:

To enable LTI 1.3 in a Canvas instance, the site administrator should:

Go to Admin, then Developer Keys, click +Developer Key, then select +LTI Key For Redirect URIs, enter: https://imathnew.rationalreasoning.net/lti/launch.php Set Configure Method: Enter URL Enter JSON URL: https://imathnew.rationalreasoning.net/lti/canvasconfig.php After submitting, turn the State ON Copy the numeric value shown in the Details column. This is the Client ID. (You do not need to click the Show Key button) Go to Admin, then Settings, then Apps, and click View App Configurations Click +App For Configuration Type, select By Client ID. Paste in the Client ID you copied down above and hit Submit. I've correctly set the Developer Key(LTI key) and the Client ID according to the instructions.

Expected behavior:

When I access the assignment imported from IMathAS in Canvas, I can see the assignment.

Actual behavior:

When I access the assignment imported from IMathAS in Canvas, I encounter 2 types of errors.

1. Invalid token error request type: GET request URL: https://canvas.instructure.com/post_message_forwarding?rev=59677caad5-09bb3c9388a5ba3a&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzUxMiJ9.eyJwYXJlbnRfZG9tYWluIjoibG1zLnJhdGlvbmFscmVhc29uaW5nLm5ldCJ9.HkrPssJkLlXQPtORZ8hdovfA2g5HdD7T-bA4uEdho55wAfKIgnRhUEBi5UxJrbnuwQEW50q9ELfrpxtZw6h1KA response code: 403 Forbidden response message: Invalid token

2. Invalid lti_message_hint request type: GET request URL: https://sso.canvaslms.com/api/lti/authorize_redirect?scope=openid&response_type=id_token&response_mode=form_post&prompt=none&client_id=10000000000024&redirect_uri=https%3A%2F%2Fimathnew.rationalreasoning.net%2Flti%2Flaunch.php&state=state-664bf741e38c09_80019289&nonce=nonce-664bf741e38e08.75797103&login_hint=5576d223a777670d32bac2e720da67f2b881fb88&lti_message_hint=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ2ZXJpZmllciI6IjhmMGRmZDJlODVkNzhhN2ExZmNkMjBjYmJiYzhmZGFkYTA3NzMzNmY3MWIwM2NlMmM4YTg0N2JhODhlZGE2NWZjYzIzZTdiN2Y5ZDQ1OWQyNDQ4NzhiYzM3NjgxZDZiODM3MGYwNzcwOWE0NmVlMTM5MzMzNzFhYzZkYmZmZDM4IiwiY2FudmFzX2RvbWFpbiI6Imxtcy5yYXRpb25hbHJlYXNvbmluZy5uZXQiLCJjb250ZXh0X3R5cGUiOiJDb3Vyc2UiLCJjb250ZXh0X2lkIjoxMDAwMDAwMDAwMDAxNywiY2FudmFzX2xvY2FsZSI6ImVuIiwiaW5jbHVkZV9zdG9yYWdlX3RhcmdldCI6dHJ1ZSwiZXhwIjoxNzE2MjU0ODI3fQ.W1rc07U8S4DWI5D0vkqcKUTiqMY58GZ-QnehpUHEybk response code: 400 Bad Request response message: {status: "bad_request", message: "Invalid lti_message_hint"}

Additional notes:

[eth18]

I solved the issue. There was an issue on the security configuration.