atomic_lti 1.8.5 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ba4c43d0a67a951d858b5610d4b7a26a4b0898c863113c515d554f961d172131
-  data.tar.gz: cdf108a92d6e62a73b0294a38badb1ebd519de71520bf4f2ef5bb027de4fab21
+  metadata.gz: 51f6a8b44052a79ca2848b1b32f9789ce2033c79cc168b6b43467429f463efe7
+  data.tar.gz: 9fc1c514d21fcec53c9b74d7b7a673d774052539f5313480ca12d0b3ce886643
 SHA512:
-  metadata.gz: 33fe99f4b5131ed6df49d4d36ee87058416c100f7bfc3a0fc06b163a6de8c3d30336a8260347d4d4c9db4b028e4e83b000582f94797254b932ff6433ea998ea4
-  data.tar.gz: 9b0812047d37e222c6b49e7abffe288afe7c0836c2eb15c970d97ae50d3446c348f5b64cdbbc6eb70848d378a40893be518f084b9d97e85cb8d455080b04a63f
+  metadata.gz: 2d87e7f1666d050da989f2d10b017fbc90bc4f8e213f6082e1b45c96b907636ebfd4be09085bcc73bc251610e1b0e727b0204250906f1ef7a351cab50db502d8
+  data.tar.gz: d0cba43fba4d45d186dd45a804531409cf4d0b9a2453bb68e8ea9207048727c1e943147845034aa952991ce360a6380f44b90e479fd1317466fe9ac1d6eb7a44

data/app/lib/atomic_lti/definitions.rb

@@ -11,6 +11,7 @@ module AtomicLti
     TOOL_PLATFORM_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/tool_platform".freeze
     AGS_CLAIM = "https://purl.imsglobal.org/spec/lti-ags/claim/endpoint".freeze
     BASIC_OUTCOME_CLAIM = "https://purl.imsglobal.org/spec/lti-bo/claim/basicoutcome".freeze
+    FOR_USER_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/for_user".freeze
 
     MENTOR_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/role_scope_mentor".freeze
     ROLES_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/roles".freeze
@@ -30,6 +31,12 @@ module AtomicLti
 
     NAMES_AND_ROLES_SERVICE_VERSIONS = ["2.0"].freeze
 
+    PLATFORM_NOTIFICATION_SERVICE_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/platformnotificationservice".freeze
+    PLATFORM_NOTIFICATION_SERVICE_VERSIONS = ["1.0".freeze].freeze
+    NOTICE_TYPE_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/notice_type".freeze
+    PLATFORM_NOTIFICATION_CONTEXT_COPY_NOTICE = "LtiContextCopyNotice".freeze
+    PLATFORM_NOTIFICATION_CONTEXT_COPY_ORIGINS_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/origin_contexts".freeze
+
     CALIPER_CLAIM = "https://purl.imsglobal.org/spec/lti-ces/claim/caliper-endpoint-service".freeze
 
     TOOL_LAUNCH_CALIPER_CONTEXT = "http://purl.imsglobal.org/ctx/caliper/v1p1/ToolLaunchProfile-extension".freeze
@@ -42,6 +49,7 @@ module AtomicLti
     AGS_SCOPE_SCORE = "https://purl.imsglobal.org/spec/lti-ags/scope/score".freeze
     NAMES_AND_ROLES_SCOPE = "https://purl.imsglobal.org/spec/lti-nrps/scope/contextmembership.readonly".freeze
     CALIPER_SCOPE = "https://purl.imsglobal.org/spec/lti-ces/v1p0/scope/send".freeze
+    PNS_SCOPE_NOTICEHANDLERS = "https://purl.imsglobal.org/spec/lti/scope/noticehandlers".freeze
 
     STUDENT_SCOPE = "http://purl.imsglobal.org/vocab/lis/v2/institution/person#Student".freeze
     INSTRUCTOR_SCOPE = "http://purl.imsglobal.org/vocab/lis/v2/institution/person#Instructor".freeze

data/app/lib/atomic_lti/exceptions.rb

@@ -14,6 +14,8 @@ module AtomicLti
     class NamesAndRolesError < AtomicLtiException
     end
 
+    class PlatformNotificationsError < AtomicLtiException; end
+
     class ScoreError < AtomicLtiException
     end
 
@@ -98,5 +100,7 @@ module AtomicLti
 
     class PaginationLimitExceeded < AtomicLtiException
     end
+
+    class InvalidPlatformNotification < AtomicLtiException; end
   end
 end

data/app/lib/atomic_lti/services/line_items.rb

@@ -23,7 +23,8 @@ module AtomicLti
         resource_id: nil,
         tag: nil,
         resource_link_id: nil,
-        external_tool_url: nil
+        external_tool_url: nil,
+        submission_review: nil
       )
         attrs = {
           scoreMaximum: max_score,
@@ -40,6 +41,9 @@ module AtomicLti
             external_tool_url: external_tool_url,
           }
         end
+        if submission_review
+          attrs[:submissionReview] = submission_review
+        end
         attrs
       end
 

data/app/lib/atomic_lti/services/platform_notifications.rb

@@ -0,0 +1,100 @@
+module AtomicLti
+  module Services
+    class PlatformNotifications < AtomicLti::Services::Base
+      def scopes
+        [AtomicLti::Definitions::PNS_SCOPE_NOTICEHANDLERS]
+      end
+
+      def endpoint
+        url = @id_token_decoded.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM, "platform_notification_service_url")
+        raise AtomicLti::Exceptions::PlatformNotificationsError, "Unable to access platform notifications" if url.blank?
+
+        url
+      end
+
+      def url_for(query = nil)
+        url = endpoint.dup
+        url << "?#{query}" if query.present?
+        url
+      end
+
+      def self.enabled?(id_token_decoded)
+        return false unless id_token_decoded&.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM)
+
+        (AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_VERSIONS &
+          (id_token_decoded.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM, "service_versions") || [])).present?
+      end
+
+      def valid?
+        self.class.enabled?(@id_token_decoded)
+      end
+
+      # Get platform notifications
+      def get(query: {})
+        uri = Addressable::URI.parse(endpoint)
+        uri.query_values = (uri.query_values || {}).merge(query)
+        url = uri.to_str
+
+        response, = service_get(url, headers:)
+        response.parsed_response
+      end
+
+      def update(notice_type, handler)
+        content_type = { "Content-Type" => "application/json" }
+        payload = { notice_type:, handler: }
+        response, = service_put(endpoint, body: JSON.dump(payload), headers: headers(content_type))
+        response
+      end
+
+      def self.validate_notification(notification)
+        decoded_token = AtomicLti::Authorization.validate_token(notification)
+        if decoded_token.blank?
+          raise AtomicLti::Exceptions::InvalidPlatformNotification
+        end
+
+        errors = []
+
+        if decoded_token["iss"].blank?
+          errors.push("LTI token is missing required field iss")
+        end
+
+        if decoded_token["aud"].blank?
+          errors.push("LTI token is missing required field aud")
+        end
+
+        if decoded_token["aud"].is_a?(Array) && decoded_token["aud"].length > 1
+          # OpenID Connect spec specifies the AZP should exist and be an AUD
+          if decoded_token["azp"].blank?
+            errors.push("LTI token has multiple aud and is missing required field azp")
+          elsif decoded_token["aud"].exclude?(decoded_token["azp"])
+            errors.push("LTI token azp is not one of the aud's")
+          end
+        end
+
+        if decoded_token[AtomicLti::Definitions::DEPLOYMENT_ID].blank?
+          errors.push(
+            "LTI token is missing required field #{AtomicLti::Definitions::DEPLOYMENT_ID}",
+          )
+        end
+
+        if decoded_token[AtomicLti::Definitions::NOTICE_TYPE_CLAIM].blank?
+          errors.push(
+            "LTI token is missing required claim #{AtomicLti::Definitions::NOTICE_TYPE_CLAIM}",
+          )
+        end
+
+        if errors.present?
+          raise Exceptions::InvalidPlatformNotification.new(errors.join(" "))
+        end
+
+        if decoded_token[AtomicLti::Definitions::LTI_VERSION].blank?
+          raise AtomicLti::Exceptions::NoLTIVersion
+        end
+
+        raise AtomicLti::Exceptions::InvalidLTIVersion unless AtomicLti::Lti.valid_version?(decoded_token)
+
+        decoded_token
+      end
+    end
+  end
+end

data/lib/atomic_lti/version.rb

@@ -1,3 +1,3 @@
 module AtomicLti
-  VERSION = "1.8.5".freeze
+  VERSION = "1.10.0".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: atomic_lti
 version: !ruby/object:Gem::Version
-  version: 1.8.5
+  version: 1.10.0
 platform: ruby
 authors:
 - Matt Petro
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-18 00:00:00.000000000 Z
+date: 2024-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pg
@@ -77,6 +77,7 @@ files:
 - app/lib/atomic_lti/services/base.rb
 - app/lib/atomic_lti/services/line_items.rb
 - app/lib/atomic_lti/services/names_and_roles.rb
+- app/lib/atomic_lti/services/platform_notifications.rb
 - app/lib/atomic_lti/services/results.rb
 - app/lib/atomic_lti/services/score.rb
 - app/lib/atomic_lti/services/score_canvas.rb
@@ -134,7 +135,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.4.19
+rubygems_version: 3.4.10
 signing_key:
 specification_version: 4
 summary: AtomicLti implements the LTI Advantage specification.