panda_pal 5.3.13 → 5.4.0.beta5

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c8eb58ee2c4df4d91c08b20c3ea717a1227ebbc212500b6f5a0abad01855fd8c
-  data.tar.gz: ba0b60f6ee46634a554ac779b6cadf671edb922bc33201ac762de4fa9263ec45
+  metadata.gz: 269670787a0bf5a9e2e9c758ee6e3e4689915e08fabb4a6eb80901658f1e9108
+  data.tar.gz: 2d4ed3aa0c345551e20e4cd9d12c6bf14ec373d10067417d74516040d3244f66
 SHA512:
-  metadata.gz: 1337a89241f5a12bc0f5d202197f17f6ea4478be3e44786e68cd2b2161fc8df0cc2338418c4cdacbaa99cb1ec9e07a06446bac3a9a9a965285f35b4cbdce91cb
-  data.tar.gz: 83c6c892aad41adc5fd7ec2709dd8f5b5a70c238764b9caad989f5a2021ee92d81c64ac05e6ce7a3e72d321d2abfa8b1aba3b1298b2225fff4d476b57d4bd3c6
+  metadata.gz: 53601808a0539cc03f98d859ade70ccd47e11914e958f23b8a544f5062a10b540714d29f047dd80981ac66184e89cd891929f435d0589db37a21f0d1d1c75b0c
+  data.tar.gz: 1cbac9f8d3c006d16c6fba0c0616facdcdf2bd2125b8563fb320d7606a49f47e0d47f76ec2bbf6fc24c9ccd531b76f75c0c4976bcb6157fb555e9717dd359a25

data/app/assets/config/panda_pal_manifest.js

@@ -0,0 +1,3 @@
+// link_tree ../images/panda_pal
+//= link_directory ../javascripts/panda_pal .js
+//= link_directory ../stylesheets/panda_pal .css

data/app/lib/lti_xml/base_platform.rb

@@ -42,7 +42,7 @@ module LtiXml
       else
         ims_lti_config[:launch_url] = parsed_request_url.host
       end
-      @tc = IMS::LTI::Services::ToolConfig.new(ims_lti_config)
+      @tc = IMS::LTI::ToolConfig.new(ims_lti_config)
     end
 
     def add_domain

data/app/models/panda_pal/organization.rb

@@ -1,3 +1,6 @@
+require_relative './organization_concerns/settings_validation'
+require_relative './organization_concerns/task_scheduling'
+
 module PandaPal
   module OrganizationConcerns; end
 

data/app/models/panda_pal/organization_concerns/task_scheduling.rb

@@ -1,4 +1,17 @@
-return unless defined?(Sidekiq.schedule)
+unless defined?(Sidekiq.schedule)
+  module PandaPal
+    module OrganizationConcerns
+      module TaskScheduling
+        extend ActiveSupport::Concern
+
+        included do
+          raise "The PandaPal TaskScheduling requires Sidekiq-scheduler to be installed"
+        end
+      end
+    end
+  end
+  return
+end
 
 require_relative 'settings_validation'
 

data/lib/panda_pal.rb

@@ -1,6 +1,8 @@
 require "panda_pal/engine"
 require 'panda_pal/plugins'
 require 'panda_pal/helpers'
+require 'oauth/request_proxy/rack_request'
+require 'oauth/request_proxy/action_dispatch_request'
 
 module PandaPal
   class LtiNavigationInUse < StandardError;end

data/lib/panda_pal/ability_mixin.rb

@@ -0,0 +1,85 @@
+module PandaPal
+  module AbilityMixin
+    extend ActiveSupport::Concern
+
+    class_methods do
+      def self.role_permissions(labels)
+        roles = find_roles_by_label(labels)
+
+        if Rails.env.test? && roles.count == 0 && (labels || []).include?('Administrator')
+          return Hash.new(true)
+        end
+
+        final = {}
+        roles.find_each do |role|
+          role.permissions.each do |perm_name, perm|
+            final[perm_name] = false if final[perm_name].nil?
+            final[perm_name] = true if perm['enabled'] == true
+          end
+        end
+        final
+      end
+
+      def self.find_roles_by_label(labels)
+        raise "PandaPal AbilityMixin's support for Roles and Permissions requires that Roles be synced by CanvasSync" unless defined?(Role)
+
+        built_ins = []
+        labels = labels.split(',') if labels.is_a?(String)
+        custom_labels = Array(labels).reject do |l|
+          if role_is_default?(l)
+            built_ins << l
+          elsif l == 'Account Admin'
+            built_ins << 'AccountMembership'
+          else
+            next
+          end
+          true
+        end
+        Role.where(workflow_state: 'built_in', base_role_type: built_ins)
+            .or(Role.where.not(workflow_state: 'built_in').where(label: custom_labels))
+      end
+
+      def self.role_is_default?(role)
+        %w[TeacherEnrollment TaEnrollment StudentEnrollment DesignerEnrollment ObserverEnrollment].include? role
+      end
+    end
+
+    def is_lti_launch?
+      @controller.current_session.present?
+    end
+
+    def panda_pal_session
+      @panda_pal_session ||= @controller.current_session&.data || {}
+    end
+
+    def rails_session
+      @rails_session ||= @controller.session
+    end
+
+    def launch_params
+      @launch_params ||= panda_pal_session[:launch_params] || {}
+    end
+
+    # Roles and Permissions
+    def lti_roles
+      @lti_roles ||= LTIRoles::RoleManager.new(launch_params['ext_roles'] || '')
+    end
+
+    def canvas_permissions
+      panda_pal_session[:canvas_permissions] ||= self.class.role_permissions(launch_params['custom_canvas_role'])
+    end
+
+    def canvas_role_labels
+      labels = launch_params['custom_canvas_role']
+      labels.is_a?(String) ? labels.split(',') : []
+    end
+
+    def canvas_roles
+      self.class.find_roles_by_label(canvas_role_labels)
+    end
+
+    def launch_role_ids
+      panda_pal_session[:launch_role_ids] ||= canvas_roles.map(&:canvas_id)
+    end
+  end
+end

data/lib/panda_pal/engine.rb

@@ -24,9 +24,24 @@ module PandaPal
       end
     end
 
+    initializer 'interop dependencies' do
+      if $LOADED_FEATURES.grep(/\/ros-apartment-\d/).present?
+        if $LOADED_FEATURES.grep(/\/apartment-\d/).present? || $LOADED_FEATURES.grep(/\/apartment-sidekiq-\d/).present?
+          raise "ros-apartment is used, but apartment or apartment-sidekiq is loaded. Do not mix legacy and ros- variants! (You most likely need to update your Gemfile to use the ros- variant)"
+        end
+      end
+      if defined?(Sidekiq)
+        begin
+          require 'apartment-sidekiq'
+        rescue LoadError
+          raise "Sidekiq is used, but apartment-sidekiq is not installed. Add [gem 'ros-apartment-sidekiq'] to your Gemfile"
+        end
+      end
+    end
+
     initializer 'Sidekiq Scheduler Hooks' do
       ActiveSupport.on_load(:active_record) do
-        if Sidekiq.server? && PandaPal::Organization.respond_to?(:sync_schedules)
+        if defined?(Sidekiq) && Sidekiq.server? && PandaPal::Organization.respond_to?(:sync_schedules)
           PandaPal::Organization.sync_schedules
         end
       end
@@ -50,6 +65,10 @@ module PandaPal
       end
     end
 
+    initializer "panda_pal.assets.precompile" do |app|
+      app.config.assets.precompile << "panda_pal_manifest.js"
+    end
+
     initializer :secure_headers do |app|
       begin
         ::SecureHeaders::Configuration.default do |config|

data/lib/panda_pal/helpers/controller_helper.rb

@@ -50,8 +50,8 @@ module PandaPal::Helpers
         safe_unexpected_params.each do |p|
           sanitized_params.delete(p)
         end
-        authenticator = IMS::LTI::Services::MessageAuthenticator.new(request.original_url, sanitized_params, @organization.secret)
-        authorized = authenticator.valid_signature?
+        tp = IMS::LTI::ToolProvider.new(@organization.key, @organization.secret, sanitized_params)
+        authorized = tp.valid_request?(request)
       end
 
       if !authorized

data/lib/panda_pal/jobs/grade_passback_job.rb

@@ -0,0 +1,50 @@
+module PandaPal::Jobs
+  class MissingGradePassbackParams < StandardError; end
+
+  class GradePassbackFailure < StandardError; end
+
+  class GradePassbackJob < ActiveJob::Base
+    sidekiq_options retry: 5
+
+    attr_accessor :organization, :opts
+
+    # Required values for opts: passback_guid, passback_url, score AND/OR total_score.
+    # Possible values for opts: cdata_text, text, url, submitted_at, lti_launch_url.
+    # passback_guid is sent in launch params as 'lis_result_sourcedid'.
+    # passback_url is sent in LTI launch params as 'lis_outcome_service_url'.
+    # See https://canvas.instructure.com/doc/api/file.assignment_tools.html
+    def perform(organization, opts = {})
+      opts = opts.with_indifferent_access
+      raise MissingGradePassbackParams unless valid_options(opts)
+
+      @organization = organization
+      @opts = opts
+
+      post_to_lms
+    end
+
+    private
+
+    def post_to_lms
+      result = tool_provider.post_extended_replace_result!(opts)
+      unless result.success?
+        Rails.logger.error "Grade passback failure: #{result.response_code} #{result.code_major} #{result.severity} #{result.description}"
+        raise GradePassbackFailure
+      end
+    end
+
+    def tool_provider
+      @tool_provider ||= IMS::LTI::ToolProvider.new(
+        organization.key,
+        organization.secret,
+        'lis_result_sourcedid' => opts[:passback_guid],
+        'lis_outcome_service_url' => opts[:passback_url]
+      ).extend(IMS::LTI::Extensions::OutcomeData::ToolProvider)
+    end
+
+    def valid_options(opts = {})
+      return opts[:passback_guid] && opts[:passback_url] && (opts[:score] || opts[:total_score])
+    end
+
+  end
+end

data/lib/panda_pal/version.rb

@@ -1,3 +1,3 @@
 module PandaPal
-  VERSION = "5.3.13"
+  VERSION = "5.4.0.beta5"
 end

data/panda_pal.gemspec

@@ -16,9 +16,9 @@ Gem::Specification.new do |s|
   s.test_files = Dir["spec/**/*"]
 
   s.add_dependency "rails", ">= 4.2"
+  s.add_dependency 'ros-apartment', '~> 2.2'
   s.add_dependency 'pg', '>= 0.20', '< 1.0.0'
-  s.add_dependency 'apartment', '~> 2.2.0'
-  s.add_dependency 'ims-lti', '~> 2.2.3'
+  s.add_dependency 'ims-lti', '~> 1.2.4'
   s.add_dependency 'browser', '2.5.0'
   s.add_dependency 'attr_encrypted', '~> 3.0.0'
   s.add_dependency 'secure_headers', '~> 6.1'

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: panda_pal
 version: !ruby/object:Gem::Version
-  version: 5.3.13
+  version: 5.4.0.beta5
 platform: ruby
 authors:
 - Instructure ProServe
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-02-24 00:00:00.000000000 Z
+date: 2021-04-12 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -24,6 +24,20 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '4.2'
+- !ruby/object:Gem::Dependency
+  name: ros-apartment
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.2'
 - !ruby/object:Gem::Dependency
   name: pg
   requirement: !ruby/object:Gem::Requirement
@@ -44,34 +58,20 @@ dependencies:
     - - "<"
       - !ruby/object:Gem::Version
         version: 1.0.0
-- !ruby/object:Gem::Dependency
-  name: apartment
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 2.2.0
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: 2.2.0
 - !ruby/object:Gem::Dependency
   name: ims-lti
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.3
+        version: 1.2.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: 2.2.3
+        version: 1.2.4
 - !ruby/object:Gem::Dependency
   name: browser
   requirement: !ruby/object:Gem::Requirement
@@ -208,6 +208,7 @@ files:
 - MIT-LICENSE
 - README.md
 - Rakefile
+- app/assets/config/panda_pal_manifest.js
 - app/assets/javascripts/panda_pal/application.js
 - app/assets/javascripts/panda_pal/lti.js
 - app/assets/stylesheets/panda_pal/application.css
@@ -243,12 +244,14 @@ files:
 - db/migrate/20171205183457_encrypt_organization_settings.rb
 - db/migrate/20171205194657_remove_old_organization_settings.rb
 - lib/panda_pal.rb
+- lib/panda_pal/ability_mixin.rb
 - lib/panda_pal/engine.rb
 - lib/panda_pal/helpers.rb
 - lib/panda_pal/helpers/controller_helper.rb
 - lib/panda_pal/helpers/route_helper.rb
 - lib/panda_pal/helpers/secure_headers.rb
 - lib/panda_pal/helpers/session_replacement.rb
+- lib/panda_pal/jobs/grade_passback_job.rb
 - lib/panda_pal/plugins.rb
 - lib/panda_pal/version.rb
 - lib/tasks/panda_pal_tasks.rake
@@ -312,9 +315,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: '0'
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">="
+  - - ">"
     - !ruby/object:Gem::Version
-      version: '0'
+      version: 1.3.1
 requirements: []
 rubygems_version: 3.0.3
 signing_key: