LTI 1.3 OIDCAuth url

[soban_momin]

Hi,

I am implementing LTI 1.3 with canvas.

I have searched through documents and forums but could not find the following endpoints required for LTI launch flow:

1) OAuth2 Token End Point

2) OIDC Auth URL

3) JWKS URL

I have gone through Canvas Release: LTI 1.3 and LTI Advantage (2019-06-22)  but could not find these endpoints.

Can someone please share the said endpoints or share the link where LTI 1.3 related details are documented.

--

Thanks,

Soban

[matthew_buckett · Accepted solution]

I think most of what you are after is on https://canvas.instructure.com/doc/api/file.lti_dev_key_config.html

Eg, for a live instance:

• Token Endpoint (not needed for launch): https://canvas.instructure.com/login/oauth2/token 
• Authorization URL: https://canvas.instructure.com/api/lti/authorize_redirect 
• JWKS URL: https://canvas.instructure.com/api/lti/security/jwks 

[tal32123]

I'm getting 500 internal server error when posting to get a token to this url:  https://canvas.test.instructure.com/login/oauth2/token with the following data:

form:{grant_type: 'client_credentials',

client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',

client_assertion: 'eyJhbGciOiJS___MY__ASSERTION___K0m1fRd2A',

scope: 'https://purl.imsglobal.org/spec/lti-nrps/scope/contextmembership.readonly'}

when decoding the assertion I have seen that the aud in the payload section is: "https://canvas.test.instructure.com/api/login/oauth2/token",

Which gives me a different error: 

message:'Response code 422 (Unprocessable Entity)'

I am using ltijs with the following registration: 

  await lti.registerPlatform({

    url: 'https://canvas.test.instructure.com',

    name: 'ltijstest',

    clientId: '15751000000___MY_CLIENT_ID',

    authenticationEndpoint: 'https://canvas.test.instructure.com/api/lti/authorize_redirect',

    accesstokenEndpoint: 'https://canvas.test.instructure.com/api/login/oauth2/token', (I've tried without the /api part as well as previously mentioned)

    authConfig: { method: 'JWK_SET', key: 'https://canvas.test.instructure.com/api/lti/security/jwks' }

  })

Any help would be greatly appreciated. Thanks in advance.

[soban_momin]

Thanks Matthew.

[karl]

For reference for others. This info can be found in our LTI configuring technical documentation.