atomic_lti 1.5.1 → 1.5.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5d5ac127a756ff607e54df192d284113a67977880c5e3e4416486aa6de13eabe
-  data.tar.gz: b6faaf01549cf54c3066aabea0482b175df5b257833cda7151dfcd715c9ea93e
+  metadata.gz: '09e333d2d54ff5b9eb9932e2ac888e8abbeeb12c5e32c39665ba4da721ed77f3'
+  data.tar.gz: 0a463b3857c3999ae72be4ebd3c3276581327b6d3d35310720e50fb26945ab54
 SHA512:
-  metadata.gz: 3b857a49181529e25e889fb89398ac0fac6b247b041df4437eede5e88c8e6137dba32bd4d1c8d7aafb7c9d4fbbedacce674bd3018906d8cc7c76d2a88c706077
-  data.tar.gz: 2d5b787191d04f5abe4750be5c7e2741107d8b0c51528a25cbd9a4eedda743ef7fc0a5e802594e0235f6c0aedeb2de64f5497371909886952c855bc4a0fa8eff
+  metadata.gz: e08ce497b87420a2b9a677052136e0fd6ebaed73dd1e976eb30683a9bbca0134e8146d3881f926821d8a931892e566e866ef0014e9917bafb28e5efc18845998
+  data.tar.gz: 205225fe9169e6b65348bd3cc35b545a2cfd00531d5cbd331a49c23b83a86a37f3c1a5c776c6c2fff8047f8a356c12758d825727417c172624ef98412adee007

data/app/lib/atomic_lti/open_id.rb

@@ -1,6 +1,6 @@
 module AtomicLti
   class OpenId
-    def self.validate_state(nonce, state)
+    def self.validate_state(nonce, state, destroy_state)
       if state.blank?
         return false
       end
@@ -10,7 +10,9 @@ module AtomicLti
         return false
       end
 
-      open_id_state.destroy
+      if destroy_state
+        open_id_state.destroy
+      end
 
       # Check that the state hasn't expired
       if open_id_state.created_at < 10.minutes.ago

data/lib/atomic_lti/open_id_middleware.rb

@@ -73,7 +73,7 @@ module AtomicLti
       end
     end
 
-    def validate_launch(request, validate_target_link_url)
+    def validate_launch(request, validate_target_link_url, destroy_state)
       # Validate and decode id_token
       raise AtomicLti::Exceptions::NoLTIToken if request.params["id_token"].blank?
 
@@ -92,7 +92,7 @@ module AtomicLti
       end
 
       # Validate the state and nonce
-      if !AtomicLti::OpenId.validate_state(id_token_decoded["nonce"], state)
+      if !AtomicLti::OpenId.validate_state(id_token_decoded["nonce"], state, destroy_state)
         raise AtomicLti::Exceptions::OpenIDStateError.new("Invalid OIDC state.")
       end
 
@@ -100,7 +100,7 @@ module AtomicLti
     end
 
     def handle_redirect(request)
-      id_token_decoded, _state, _state_verified = validate_launch(request, false)
+      id_token_decoded, _state, _state_verified = validate_launch(request, false, false)
 
       uri = URI(request.url)
       # Technically the target_link_uri is not required and the certification suite
@@ -152,7 +152,7 @@ module AtomicLti
     end
 
     def handle_lti_launch(env, request)
-      id_token_decoded, state, state_verified = validate_launch(request, true)
+      id_token_decoded, state, state_verified = validate_launch(request, true, true)
 
       id_token = request.params["id_token"]
       update_install(id_token: id_token_decoded)

data/lib/atomic_lti/version.rb

@@ -1,3 +1,3 @@
 module AtomicLti
-  VERSION = "1.5.1".freeze
+  VERSION = "1.5.2".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: atomic_lti
 version: !ruby/object:Gem::Version
-  version: 1.5.1
+  version: 1.5.2
 platform: ruby
 authors:
 - Matt Petro
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-08-17 00:00:00.000000000 Z
+date: 2023-08-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pg