Limited Developer Key?

[elf]

Dear all,

I'd like to use OAuth2. Is it necessary to have a root-level access key to use it?

I work at Luleå University of Technology, which is hosted by Instructure. I went to the page Canvas Developer Key Request​

and I saw this: "If you are a Canvas customer, see your Canvas Admin to issue a developer key in your Canvas instance." However, when I asked them about a Developer Key they said that they didn't want to give me root-access. I don't need root-level access. All I would need is the same permissions that I have myself. However, since we are new to Canvas at my university, I thought to ask here.

Preferably, I'd also like to be able to create links for the students using their sis_user_id as a parameter to an external program, or even better, also include some key.

Thanks!

Erik

[garth]

bump to your other question...Limited Canvas Developer Key for OAuth2?

[aclement]

This is a little clearer than your other question. You can generate a token that has all your access on your profile page https://<your-institution>.instructure.com/profile.

[elf]

Thanks  @garth ​ and @Alex_Clement!

I've developed a few nice scripts that allow creation of course content, integrated with our scheduling  and grading system that I'd like to share with my colleagues. However, sharing scripts is not allowed using profile access tokens (as I do right now) since it says in the OAuth2 - Canvas LMS REST API Documentation​ that "Note that asking any other user to manually generate a token and enter it into your application is a violation of Canvas' terms of service. Applications in use by multiple users *MUST** use OAuth to obtain tokens*".

My question then is if it is possible to obtain OAuth tokens that do not have root access? Or if there is some other work-around?

Thanks!

[garth]

 @elf ​ I was recently introduced to TamperMonkey:  Tampermonkey • Home

If you are simply sharing scripts with colleagues, perhaps this would be a good option?

This would allow your colleagues to operate under their own credentials.

 @James  has posted few articles in the community discussing the use of TamperMonkey:

Adding Login and SIS IDs to Admin User Search

QuizWiz: Enhancements to SpeedGrader and Quizzes

Sorting Rubrics Made Easy

Maybe his work will help give you some ideas.

The other option would be to share your tools as an external app through LTI, as mentioned by  @aclement 

"creation of course content, integrated with our scheduling  and grading system"

If you are designing algorithms that integrate multiple systems, LTI would likely be a more robust solution to maintain control over user access.

[James]

Greasemonkey and Tampermonkey are great ways for individuals to do custom JavaScript without having to change it for everyone or for those who don't have access to the global custom JavaScript file.