When we first developed this sample app, we wanted it to integrate with MITx Residential which used certificate auth for all endpoints, including the LTI post back. Because of this, the sample app needed to be configurable with an acceptable MIT certificate.
Since then, authentication on MITx has been changed to use CAS and not require certificates, so this feature is obsolete.
When we first developed this sample app, we wanted it to integrate with MITx Residential which used certificate auth for all endpoints, including the LTI post back. Because of this, the sample app needed to be configurable with an acceptable MIT certificate.
Since then, authentication on MITx has been changed to use CAS and not require certificates, so this feature is obsolete.
See also https://github.com/mitodl/mit_lti_flask_sample/issues/35#issuecomment-344729801