panda_pal 5.3.11 → 5.4.0.beta3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 13d3460a12f31ce93e9fba60f806871ba8e5507b43c8b761b06e34244b528215
-  data.tar.gz: c8a288d52fa8927835c8cf59561d9ff15a156631c09d9e556d561da0e55073f3
+  metadata.gz: 605e2398dbff30e4042f696f24e556d5a996c5492f3b3614192a532874b35b3d
+  data.tar.gz: 630edb6f4af6ca6e7d526b5012ec3171fb3480c0215aab1ec24d2de3d0900d47
 SHA512:
-  metadata.gz: 440a454305b5d1b1ed3c6b34e7ea2c9875be68eaf0bced9e59eef8734cb5590a8643e385d2e00cf11450397ec4e7aa10df08f9e0e57a8fff22fdb352354437a8
-  data.tar.gz: 5b89736e51f2cbe46fe6d2ebc088b95ddb24f30e7f2aef4f3b90356f8a13de4b8b728695cdfee9f393a4ff539461462a1944e2592db66038b9be5e86a7b9698f
+  metadata.gz: d25bb33c80372c310a988fa8ecbdb46608e739ebd7aadb8615798129fc0aa9602d0e369f399d9dda950cdd3318c62efa9fe1a94d05aaa39b99d8d2339b0c6c0c
+  data.tar.gz: 289a25622e81a3ad2df94619821579037141153514288569eb26b4ba660f175fa3c085370a653de66027f1d7468b5cb9b9b60f3eb1b937658e004568494b3c26

data/app/assets/config/panda_pal_manifest.js

@@ -0,0 +1,3 @@
+//= link_tree ../images
+//= link_directory ../javascripts/panda_pal .js
+//= link_directory ../stylesheets/panda_pal .css

data/app/lib/lti_xml/base_platform.rb

@@ -42,7 +42,7 @@ module LtiXml
       else
         ims_lti_config[:launch_url] = parsed_request_url.host
       end
-      @tc = IMS::LTI::Services::ToolConfig.new(ims_lti_config)
+      @tc = IMS::LTI::ToolConfig.new(ims_lti_config)
     end
 
     def add_domain

data/app/models/panda_pal/organization.rb

@@ -1,3 +1,6 @@
+require_relative './organization_concerns/settings_validation'
+require_relative './organization_concerns/task_scheduling'
+
 module PandaPal
   module OrganizationConcerns; end
 
@@ -56,6 +59,4 @@ module PandaPal
       Apartment::Tenant.drop name
     end
   end
-
-  Organization.sync_schedules if Organization.respond_to?(:sync_schedules)
 end

data/app/models/panda_pal/organization_concerns/settings_validation.rb

@@ -8,8 +8,16 @@ module PandaPal
       end
 
       class_methods do
+        def define_setting(*args, &blk)
+          @_injected_settings_definitions ||= []
+          @_injected_settings_definitions << {
+            args: args,
+            block: blk,
+          }
+        end
+
         def settings_structure
-          if PandaPal.lti_options&.[](:settings_structure).present?
+          struc = if PandaPal.lti_options&.[](:settings_structure).present?
             normalize_settings_structure(PandaPal.lti_options[:settings_structure])
           else
             {
@@ -18,6 +26,32 @@ module PandaPal
               properties: {},
             }
           end
+
+          (@_injected_settings_definitions || []).each do |sub|
+            args = [*sub[:args]]
+            path = args.shift || []
+            path = path.split('.') if path.is_a?(String)
+            path = Array(path)
+
+            if path.present?
+              key = path.pop
+
+              root = struc
+              path.each do |p|
+                root = root[:properties][p.to_sym]
+              end
+
+              if sub[:block]
+                root[:properties][key.to_sym] = sub[:block].call
+              else
+                root[:properties][key.to_sym] = args.shift
+              end
+            else
+              sub[:block].call(struc)
+            end
+          end
+
+          struc
         end
 
         def normalize_settings_structure(struc)
@@ -69,7 +103,7 @@ module PandaPal
           any_match = norm_types.any? do |t|
             if t == 'Boolean'
               settings == true || settings == false
-            else
+            elsif t.is_a?(Class)
               settings.is_a?(t)
             end
           end

data/app/models/panda_pal/organization_concerns/task_scheduling.rb

@@ -11,6 +11,31 @@ module PandaPal
       included do
         after_commit :sync_schedule, on: [:create, :update]
         after_commit :unschedule_tasks, on: :destroy
+
+        define_setting do |struc|
+          next unless _schedule_descriptors.present?
+
+          struc[:properties][:timezone] ||= {
+            type: 'String',
+            required: false,
+            validate: ->(timezone, *args) {
+              ActiveSupport::TimeZone[timezone].present? ? nil : "<path> Invalid Timezone '#{timezone}'"
+            },
+          }
+
+          struc[:properties][:task_schedules] = {
+            type: 'Hash',
+            required: false,
+            properties: _schedule_descriptors.keys.reduce({}) do |hash, k|
+              desc = _schedule_descriptors[k]
+
+              hash.tap do |hash|
+                kl = ' ' * (k.to_s.length - 4)
+                hash[k.to_sym] = hash[k.to_s] = PandaPal::OrganizationConcerns::TaskScheduling.build_settings_entry(desc)
+              end
+            end,
+          }
+        end
       end
 
       class_methods do
@@ -18,35 +43,6 @@ module PandaPal
           @_schedule_descriptors ||= {}
         end
 
-        def settings_structure
-          return super unless _schedule_descriptors.present?
-
-          super.tap do |struc|
-            struc[:properties] ||= {}
-
-            struc[:properties][:timezone] ||= {
-              type: 'String',
-              required: false,
-              validate: ->(timezone, *args) {
-                ActiveSupport::TimeZone[timezone].present? ? nil : "<path> Invalid Timezone '#{timezone}'"
-              },
-            }
-
-            struc[:properties][:task_schedules] = {
-              type: 'Hash',
-              required: false,
-              properties: _schedule_descriptors.keys.reduce({}) do |hash, k|
-                desc = _schedule_descriptors[k]
-
-                hash.tap do |hash|
-                  kl = ' ' * (k.to_s.length - 4)
-                  hash[k.to_sym] = hash[k.to_s] = PandaPal::OrganizationConcerns::TaskScheduling.build_settings_entry(desc)
-                end
-              end,
-            }
-          end
-        end
-
         def scheduled_task(cron_time, name_or_method = nil, worker: nil, queue: nil, &block)
           task_key = (name_or_method.presence || "scheduled_task_#{caller_locations[0].lineno}").to_s
           raise "Task key '#{task_key}' already taken!" if _schedule_descriptors.key?(task_key)

data/lib/panda_pal.rb

@@ -1,6 +1,8 @@
 require "panda_pal/engine"
 require 'panda_pal/plugins'
 require 'panda_pal/helpers'
+require 'oauth/request_proxy/rack_request'
+require 'oauth/request_proxy/action_dispatch_request'
 
 module PandaPal
   class LtiNavigationInUse < StandardError;end

data/lib/panda_pal/ability_mixin.rb

@@ -0,0 +1,85 @@
+module PandaPal
+  module AbilityMixin
+    extend ActiveSupport::Concern
+
+    class_methods do
+      def self.role_permissions(labels)
+        roles = find_roles_by_label(labels)
+
+        if Rails.env.test? && roles.count == 0 && (labels || []).include?('Administrator')
+          return Hash.new(true)
+        end
+
+        final = {}
+        roles.find_each do |role|
+          role.permissions.each do |perm_name, perm|
+            final[perm_name] = false if final[perm_name].nil?
+            final[perm_name] = true if perm['enabled'] == true
+          end
+        end
+        final
+      end
+
+      def self.find_roles_by_label(labels)
+        raise "PandaPal AbilityMixin's support for Roles and Permissions requires that Roles be synced by CanvasSync" unless defined?(Role)
+
+        built_ins = []
+        labels = labels.split(',') if labels.is_a?(String)
+        custom_labels = Array(labels).reject do |l|
+          if role_is_default?(l)
+            built_ins << l
+          elsif l == 'Account Admin'
+            built_ins << 'AccountMembership'
+          else
+            next
+          end
+          true
+        end
+        Role.where(workflow_state: 'built_in', base_role_type: built_ins)
+            .or(Role.where.not(workflow_state: 'built_in').where(label: custom_labels))
+      end
+
+      def self.role_is_default?(role)
+        %w[TeacherEnrollment TaEnrollment StudentEnrollment DesignerEnrollment ObserverEnrollment].include? role
+      end
+    end
+
+    def is_lti_launch?
+      @controller.current_session.present?
+    end
+
+    def panda_pal_session
+      @panda_pal_session ||= @controller.current_session&.data || {}
+    end
+
+    def rails_session
+      @rails_session ||= @controller.session
+    end
+
+    def launch_params
+      @launch_params ||= panda_pal_session[:launch_params] || {}
+    end
+
+    # Roles and Permissions
+    def lti_roles
+      @lti_roles ||= LTIRoles::RoleManager.new(launch_params['ext_roles'] || '')
+    end
+
+    def canvas_permissions
+      panda_pal_session[:canvas_permissions] ||= self.class.role_permissions(launch_params['custom_canvas_role'])
+    end
+
+    def canvas_role_labels
+      labels = launch_params['custom_canvas_role']
+      labels.is_a?(String) ? labels.split(',') : []
+    end
+
+    def canvas_roles
+      self.class.find_roles_by_label(canvas_role_labels)
+    end
+
+    def launch_role_ids
+      panda_pal_session[:launch_role_ids] ||= canvas_roles.map(&:canvas_id)
+    end
+  end
+end

data/lib/panda_pal/engine.rb

@@ -24,6 +24,29 @@ module PandaPal
       end
     end
 
+    initializer 'interop dependencies' do
+      if $LOADED_FEATURES.grep(/\/ros-apartment-\d/).present?
+        if $LOADED_FEATURES.grep(/\/apartment-\d/).present? || $LOADED_FEATURES.grep(/\/apartment-sidekiq-\d/).present?
+          raise "ros-apartment is used, but apartment or apartment-sidekiq is loaded. Do not mix legacy and ros- variants! (You most likely need to update your Gemfile to use the ros- variant)"
+        end
+      end
+      if defined?(Sidekiq)
+        begin
+          require 'apartment-sidekiq'
+        rescue LoadError
+          raise "Sidekiq is used, but apartment-sidekiq is not installed. Add [gem 'ros-apartment-sidekiq'] to your Gemfile"
+        end
+      end
+    end
+
+    initializer 'Sidekiq Scheduler Hooks' do
+      ActiveSupport.on_load(:active_record) do
+        if defined?(Sidekiq) && Sidekiq.server? && PandaPal::Organization.respond_to?(:sync_schedules)
+          PandaPal::Organization.sync_schedules
+        end
+      end
+    end
+
     initializer 'panda_pal.app_controller' do |app|
       OAUTH_10_SUPPORT = true
       ActiveSupport.on_load(:action_controller) do
@@ -42,6 +65,10 @@ module PandaPal
       end
     end
 
+    initializer "panda_pal.assets.precompile" do |app|
+      app.config.assets.precompile << "panda_pal_manifest.js"
+    end
+
     initializer :secure_headers do |app|
       begin
         ::SecureHeaders::Configuration.default do |config|

data/lib/panda_pal/helpers/controller_helper.rb

@@ -50,8 +50,8 @@ module PandaPal::Helpers
         safe_unexpected_params.each do |p|
           sanitized_params.delete(p)
         end
-        authenticator = IMS::LTI::Services::MessageAuthenticator.new(request.original_url, sanitized_params, @organization.secret)
-        authorized = authenticator.valid_signature?
+        tp = IMS::LTI::ToolProvider.new(@organization.key, @organization.secret, sanitized_params)
+        authorized = tp.valid_request?(request)
       end
 
       if !authorized

data/lib/panda_pal/jobs/grade_passback_job.rb

@@ -0,0 +1,50 @@
+module PandaPal::Jobs
+  class MissingGradePassbackParams < StandardError; end
+
+  class GradePassbackFailure < StandardError; end
+
+  class GradePassbackJob < ActiveJob::Base
+    sidekiq_options retry: 5
+
+    attr_accessor :organization, :opts
+
+    # Required values for opts: passback_guid, passback_url, score AND/OR total_score.
+    # Possible values for opts: cdata_text, text, url, submitted_at, lti_launch_url.
+    # passback_guid is sent in launch params as 'lis_result_sourcedid'.
+    # passback_url is sent in LTI launch params as 'lis_outcome_service_url'.
+    # See https://canvas.instructure.com/doc/api/file.assignment_tools.html
+    def perform(organization, opts = {})
+      opts = opts.with_indifferent_access
+      raise MissingGradePassbackParams unless valid_options(opts)
+
+      @organization = organization
+      @opts = opts
+
+      post_to_lms
+    end
+
+    private
+
+    def post_to_lms
+      result = tool_provider.post_extended_replace_result!(opts)
+      unless result.success?
+        Rails.logger.error "Grade passback failure: #{result.response_code} #{result.code_major} #{result.severity} #{result.description}"
+        raise GradePassbackFailure
+      end
+    end
+
+    def tool_provider
+      @tool_provider ||= IMS::LTI::ToolProvider.new(
+        organization.key,
+        organization.secret,
+        'lis_result_sourcedid' => opts[:passback_guid],
+        'lis_outcome_service_url' => opts[:passback_url]
+      ).extend(IMS::LTI::Extensions::OutcomeData::ToolProvider)
+    end
+
+    def valid_options(opts = {})
+      return opts[:passback_guid] && opts[:passback_url] && (opts[:score] || opts[:total_score])
+    end
+
+  end
+end

data/lib/panda_pal/version.rb

@@ -1,3 +1,3 @@
 module PandaPal
-  VERSION = "5.3.11"
+  VERSION = "5.4.0.beta3"
 end

data/panda_pal.gemspec

@@ -16,9 +16,9 @@ Gem::Specification.new do |s|
   s.test_files = Dir["spec/**/*"]
 
   s.add_dependency "rails", ">= 4.2"
+  s.add_dependency 'ros-apartment', '~> 2.2'
   s.add_dependency 'pg', '>= 0.20', '< 1.0.0'
-  s.add_dependency 'apartment', '~> 2.2.0'
-  s.add_dependency 'ims-lti', '~> 2.2.3'
+  s.add_dependency 'ims-lti', '~> 1.2.4'
   s.add_dependency 'browser', '2.5.0'
   s.add_dependency 'attr_encrypted', '~> 3.0.0'
   s.add_dependency 'secure_headers', '~> 6.1'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: panda_pal
 version: !ruby/object:Gem::Version
-  version: 5.3.11
+  version: 5.4.0.beta3
 platform: ruby
 authors:
 - Instructure ProServe
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-18 00:00:00.000000000 Z
+date: 2021-04-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: ros-apartment
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -44,34 +58,20 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: 1.0.0
-- !ruby/object:Gem::Dependency
-  name: apartment
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 2.2.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 2.2.0
 - !ruby/object:Gem::Dependency
   name: ims-lti
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.3
+        version: 1.2.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.3
+        version: 1.2.4
 - !ruby/object:Gem::Dependency
   name: browser
   requirement: !ruby/object:Gem::Requirement
@@ -208,6 +208,7 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
+- app/assets/config/panda_pal_manifest.js
 - app/assets/javascripts/panda_pal/application.js
 - app/assets/javascripts/panda_pal/lti.js
 - app/assets/stylesheets/panda_pal/application.css
@@ -243,12 +244,14 @@ files:
 - db/migrate/20171205183457_encrypt_organization_settings.rb
 - db/migrate/20171205194657_remove_old_organization_settings.rb
 - lib/panda_pal.rb
+- lib/panda_pal/ability_mixin.rb
 - lib/panda_pal/engine.rb
 - lib/panda_pal/helpers.rb
 - lib/panda_pal/helpers/controller_helper.rb
 - lib/panda_pal/helpers/route_helper.rb
 - lib/panda_pal/helpers/secure_headers.rb
 - lib/panda_pal/helpers/session_replacement.rb
+- lib/panda_pal/jobs/grade_passback_job.rb
 - lib/panda_pal/plugins.rb
 - lib/panda_pal/version.rb
 - lib/tasks/panda_pal_tasks.rake
@@ -312,9 +315,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.0.3
 signing_key: