Hello,

I'm investigating how to map activity coming from Canvas via LTI 1.3 into our tool, specifically how to map courses (via their sis_id) to those we are already anticipating to see from Rostering (via a Clever, etc). 

I know the Canvas API has a `/courses` endpoint where we could get the list up front. However from what I'm reading it seems this API can ONLY be hit using the OAuth2 auth code flow on behalf of a user. Meaning, we could not have an independent process call Canvas via an API key to get this course data async; this information could only be captured from user activity in-browser (i.e. a Canvas admin launching and authorizing the flow).

Is there another means of hitting the Canvas API that's NOT user-based in-browser redirects? It seems if not, we would have to on the fly grab courses data as it comes in or have a Canvas admin manually "sync" with us since this activity needs to be triggered by user activity.

Best,

.dig