LTI: Yellowdig can't post back grade results to open edX

pdpinch commented 5 years ago

Steps to Reproduce

Hi MIT Folks,

Here's what I found investigating the board:

the expected LTI fields needed for grading are being sent in the launch params (payload attached). Namely we're getting the required, "lis_outcome_service_url" and "lis_person_sourcedid".

I'm seeing an issue when our system attempts to send the grading value back to the the service url. The POST request sent to courses.xpro.mit.edu is returning with a 302 redirect location: '/auth/login/mitxpro-oauth2/?auth_entry=login'.

Does anybody here know if MIT maintains a firewall or whitelist of IP addresses? We need to allow the Yellowdig IP address used for grade passback

Expected Behavior

POSTs to the "lis_outcome_service_url" should not require additional authentication.

Actual Behavior

302 redirect to the singin page.

pdpinch commented 5 years ago

I set up a test LTI instance with Saltire testing service at https://courses.xpro.mit.edu/courses/course-v1:xPRO+NHx+1/courseware/5d4d9859d9d9415ca7a3627701db0322/f61183823b3945f6889b7122cf4791c3/1

Click the button and then in the new tab look at the Message parameters section to find the lis_outcome_service_url

shaidar commented 5 years ago

@pdpinch And this will be a POST request coming from Yellowdig?

pdpinch commented 5 years ago

In this specific case yes, but presumably there will be other LTIs we want to support. I already know of two more that are being evaluated.

shaidar commented 5 years ago

@pdpinch Deployed to RC

blarghmatey commented 5 years ago

This is live on production now.

mitodl / mitxpro