atomic_lti 1.9.0 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e8b38d2b638688e1308e60601a9586a6d4f44c973bfe82aa3d94c7941f1f3f79
-  data.tar.gz: b280f79bab178696f88dfb2bb34af9cf1a4cf8b0c2835a2c8040890d7c994b2b
+  metadata.gz: 51f6a8b44052a79ca2848b1b32f9789ce2033c79cc168b6b43467429f463efe7
+  data.tar.gz: 9fc1c514d21fcec53c9b74d7b7a673d774052539f5313480ca12d0b3ce886643
 SHA512:
-  metadata.gz: 8a117f214fe877902d629474a237edcae89f7635b5028534010e64925a0c845b20066cca8694fa8350e3018f1e1713ec1f25667801216230a1a2f755d6639a8c
-  data.tar.gz: a20d30b4094c1344fb45fbcb440319182626b08e0ef968dcf80e0a610184c35a71f6f5690322b7f168b39925929ce8f7da47652e5b588fee697fdf7c5c43e2b4
+  metadata.gz: 2d87e7f1666d050da989f2d10b017fbc90bc4f8e213f6082e1b45c96b907636ebfd4be09085bcc73bc251610e1b0e727b0204250906f1ef7a351cab50db502d8
+  data.tar.gz: d0cba43fba4d45d186dd45a804531409cf4d0b9a2453bb68e8ea9207048727c1e943147845034aa952991ce360a6380f44b90e479fd1317466fe9ac1d6eb7a44

data/app/lib/atomic_lti/definitions.rb

@@ -31,6 +31,12 @@ module AtomicLti
 
     NAMES_AND_ROLES_SERVICE_VERSIONS = ["2.0"].freeze
 
+    PLATFORM_NOTIFICATION_SERVICE_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/platformnotificationservice".freeze
+    PLATFORM_NOTIFICATION_SERVICE_VERSIONS = ["1.0".freeze].freeze
+    NOTICE_TYPE_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/notice_type".freeze
+    PLATFORM_NOTIFICATION_CONTEXT_COPY_NOTICE = "LtiContextCopyNotice".freeze
+    PLATFORM_NOTIFICATION_CONTEXT_COPY_ORIGINS_CLAIM = "https://purl.imsglobal.org/spec/lti/claim/origin_contexts".freeze
+
     CALIPER_CLAIM = "https://purl.imsglobal.org/spec/lti-ces/claim/caliper-endpoint-service".freeze
 
     TOOL_LAUNCH_CALIPER_CONTEXT = "http://purl.imsglobal.org/ctx/caliper/v1p1/ToolLaunchProfile-extension".freeze
@@ -43,6 +49,7 @@ module AtomicLti
     AGS_SCOPE_SCORE = "https://purl.imsglobal.org/spec/lti-ags/scope/score".freeze
     NAMES_AND_ROLES_SCOPE = "https://purl.imsglobal.org/spec/lti-nrps/scope/contextmembership.readonly".freeze
     CALIPER_SCOPE = "https://purl.imsglobal.org/spec/lti-ces/v1p0/scope/send".freeze
+    PNS_SCOPE_NOTICEHANDLERS = "https://purl.imsglobal.org/spec/lti/scope/noticehandlers".freeze
 
     STUDENT_SCOPE = "http://purl.imsglobal.org/vocab/lis/v2/institution/person#Student".freeze
     INSTRUCTOR_SCOPE = "http://purl.imsglobal.org/vocab/lis/v2/institution/person#Instructor".freeze

data/app/lib/atomic_lti/exceptions.rb

@@ -14,6 +14,8 @@ module AtomicLti
     class NamesAndRolesError < AtomicLtiException
     end
 
+    class PlatformNotificationsError < AtomicLtiException; end
+
     class ScoreError < AtomicLtiException
     end
 
@@ -98,5 +100,7 @@ module AtomicLti
 
     class PaginationLimitExceeded < AtomicLtiException
     end
+
+    class InvalidPlatformNotification < AtomicLtiException; end
   end
 end

data/app/lib/atomic_lti/services/platform_notifications.rb

@@ -0,0 +1,100 @@
+module AtomicLti
+  module Services
+    class PlatformNotifications < AtomicLti::Services::Base
+      def scopes
+        [AtomicLti::Definitions::PNS_SCOPE_NOTICEHANDLERS]
+      end
+
+      def endpoint
+        url = @id_token_decoded.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM, "platform_notification_service_url")
+        raise AtomicLti::Exceptions::PlatformNotificationsError, "Unable to access platform notifications" if url.blank?
+
+        url
+      end
+
+      def url_for(query = nil)
+        url = endpoint.dup
+        url << "?#{query}" if query.present?
+        url
+      end
+
+      def self.enabled?(id_token_decoded)
+        return false unless id_token_decoded&.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM)
+
+        (AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_VERSIONS &
+          (id_token_decoded.dig(AtomicLti::Definitions::PLATFORM_NOTIFICATION_SERVICE_CLAIM, "service_versions") || [])).present?
+      end
+
+      def valid?
+        self.class.enabled?(@id_token_decoded)
+      end
+
+      # Get platform notifications
+      def get(query: {})
+        uri = Addressable::URI.parse(endpoint)
+        uri.query_values = (uri.query_values || {}).merge(query)
+        url = uri.to_str
+
+        response, = service_get(url, headers:)
+        response.parsed_response
+      end
+
+      def update(notice_type, handler)
+        content_type = { "Content-Type" => "application/json" }
+        payload = { notice_type:, handler: }
+        response, = service_put(endpoint, body: JSON.dump(payload), headers: headers(content_type))
+        response
+      end
+
+      def self.validate_notification(notification)
+        decoded_token = AtomicLti::Authorization.validate_token(notification)
+        if decoded_token.blank?
+          raise AtomicLti::Exceptions::InvalidPlatformNotification
+        end
+
+        errors = []
+
+        if decoded_token["iss"].blank?
+          errors.push("LTI token is missing required field iss")
+        end
+
+        if decoded_token["aud"].blank?
+          errors.push("LTI token is missing required field aud")
+        end
+
+        if decoded_token["aud"].is_a?(Array) && decoded_token["aud"].length > 1
+          # OpenID Connect spec specifies the AZP should exist and be an AUD
+          if decoded_token["azp"].blank?
+            errors.push("LTI token has multiple aud and is missing required field azp")
+          elsif decoded_token["aud"].exclude?(decoded_token["azp"])
+            errors.push("LTI token azp is not one of the aud's")
+          end
+        end
+
+        if decoded_token[AtomicLti::Definitions::DEPLOYMENT_ID].blank?
+          errors.push(
+            "LTI token is missing required field #{AtomicLti::Definitions::DEPLOYMENT_ID}",
+          )
+        end
+
+        if decoded_token[AtomicLti::Definitions::NOTICE_TYPE_CLAIM].blank?
+          errors.push(
+            "LTI token is missing required claim #{AtomicLti::Definitions::NOTICE_TYPE_CLAIM}",
+          )
+        end
+
+        if errors.present?
+          raise Exceptions::InvalidPlatformNotification.new(errors.join(" "))
+        end
+
+        if decoded_token[AtomicLti::Definitions::LTI_VERSION].blank?
+          raise AtomicLti::Exceptions::NoLTIVersion
+        end
+
+        raise AtomicLti::Exceptions::InvalidLTIVersion unless AtomicLti::Lti.valid_version?(decoded_token)
+
+        decoded_token
+      end
+    end
+  end
+end

data/lib/atomic_lti/version.rb

@@ -1,3 +1,3 @@
 module AtomicLti
-  VERSION = "1.9.0".freeze
+  VERSION = "1.10.0".freeze
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: atomic_lti
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.10.0
 platform: ruby
 authors:
 - Matt Petro
@@ -10,7 +10,7 @@ authors:
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-02 00:00:00.000000000 Z
+date: 2024-07-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: pg
@@ -77,6 +77,7 @@ files:
 - app/lib/atomic_lti/services/base.rb
 - app/lib/atomic_lti/services/line_items.rb
 - app/lib/atomic_lti/services/names_and_roles.rb
+- app/lib/atomic_lti/services/platform_notifications.rb
 - app/lib/atomic_lti/services/results.rb
 - app/lib/atomic_lti/services/score.rb
 - app/lib/atomic_lti/services/score_canvas.rb