search

openfun / marsha

:clapper: An opensource LTI Learning Content Management System (LCMS)
MIT License
104 stars 24 forks source link

🩹(back) disable lti nonce and timestamp validation #2524

Closed lunika closed 7 months ago

lunika commented 7 months ago

Purpose

In the LTIRequestValidator we check if the nonce has already been used but doing this we break the integration made in Richie. In a first step we allow to disable this verification by change the settings LTI_REPLAY_PROTECTION_ENABLED to False.

Proposal