@lti-tool/core 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @lti-tool/core
 
+## 0.11.0
+
+### Minor Changes
+
+- 7c87338: Add NRPS implementation for retrieving course membership and user roles
+
 ## 0.10.0
 
 ### Minor Changes

package/dist/ltiTool.d.ts

@@ -7,6 +7,7 @@ import { type LTI13JwtPayload } from './schemas/index.js';
 import { type CreateLineItem, type LineItem, type LineItems, type UpdateLineItem } from './schemas/lti13/ags/lineItem.schema.js';
 import { type Results } from './schemas/lti13/ags/result.schema.js';
 import { type ScoreSubmission } from './schemas/lti13/ags/scoreSubmission.schema.js';
+import { type Member } from './schemas/lti13/nrps/contextMembership.schema.js';
 /**
  * Main LTI 1.3 Tool implementation providing secure authentication, launch verification,
  * and LTI Advantage services integration.
@@ -37,6 +38,7 @@ export declare class LTITool {
     private logger;
     private tokenService;
     private agsService;
+    private nrpsService;
     /**
      * Creates a new LTI Tool instance.
      *
@@ -176,6 +178,22 @@ export declare class LTITool {
      * @throws {Error} When AGS is not available or deletion fails
      */
     deleteLineItem(session: LTISession): Promise<void>;
+    /**
+     * Retrieves course/context members using Names and Role Provisioning Services (NRPS).
+     *
+     * @param session - Active LTI session containing NRPS service endpoints
+     * @returns Array of members with clean camelCase properties
+     * @throws {Error} When NRPS is not available or request fails
+     *
+     * @example
+     * ```typescript
+     * const members = await ltiTool.getMembers(session);
+     * const instructors = members.filter(m =>
+     *   m.roles.some(role => role.includes('Instructor'))
+     * );
+     * ```
+     */
+    getMembers(session: LTISession): Promise<Member[]>;
     /**
      * Retrieves all configured LTI client platforms.
      *

package/dist/ltiTool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ltiTool.d.ts","sourceRoot":"","sources":["../src/ltiTool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAEL,KAAK,eAAe,EAIrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,SAAS,EAGd,KAAK,cAAc,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,+CAA+C,CAAC;AAMrF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,OAAO;IAYN,OAAO,CAAC,MAAM;IAX1B,4DAA4D;IAC5D,OAAO,CAAC,SAAS,CAA4D;IAC7E,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAAa;IAE/B;;;;OAIG;gBACiB,MAAM,EAAE,SAAS;IAiBrC;;;;;;;;;;;;;OAaG;IACG,WAAW,CAAC,MAAM,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,GAAG,GAAG,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC;IAgDnB;;;;;;;;;;;;;;OAcG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAuD5E;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;;;;OAKG;IACG,aAAa,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAM1E;;;;;OAKG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAKpE;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7E;;;;;;;;;;;;OAYG;IACG,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtD;;;;;;OAMG;IACG,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAU5D;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUzD;;;;;;;;;;;;;;;;;;OAkBG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAapB;;;;;;;OAOG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAapB;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAUxD;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;IAI9D;;;;;OAKG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,aAAa,CAAC,CAAC,GACrD,OAAO,CAAC,IAAI,CAAC;IAKhB;;;;;OAKG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIrE;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/E;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIjE;;;;;;OAMG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAIrC;;;;;;OAMG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GACpC,OAAO,CAAC,MAAM,CAAC;IAIlB;;;;;;OAMG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG9E"}
+{"version":3,"file":"ltiTool.d.ts","sourceRoot":"","sources":["../src/ltiTool.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAEL,KAAK,eAAe,EAIrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,SAAS,EAGd,KAAK,cAAc,EACpB,MAAM,wCAAwC,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAiB,MAAM,sCAAsC,CAAC;AACnF,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,+CAA+C,CAAC;AACrF,OAAO,EACL,KAAK,MAAM,EAEZ,MAAM,kDAAkD,CAAC;AAO1D;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,qBAAa,OAAO;IAaN,OAAO,CAAC,MAAM;IAZ1B,4DAA4D;IAC5D,OAAO,CAAC,SAAS,CAA4D;IAC7E,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,WAAW,CAAc;IAEjC;;;;OAIG;gBACiB,MAAM,EAAE,SAAS;IAsBrC;;;;;;;;;;;;;OAaG;IACG,WAAW,CAAC,MAAM,EAAE;QACxB,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,SAAS,EAAE,GAAG,GAAG,MAAM,CAAC;QACxB,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;QACxB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,GAAG,OAAO,CAAC,MAAM,CAAC;IAgDnB;;;;;;;;;;;;;;OAcG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;IAuD5E;;;;OAIG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAc9B;;;;;OAKG;IACG,aAAa,CAAC,eAAe,EAAE,eAAe,GAAG,OAAO,CAAC,UAAU,CAAC;IAM1E;;;;;OAKG;IACG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAKpE;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7E;;;;;;;;;;;;OAYG;IACG,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IAUtD;;;;;;OAMG;IACG,aAAa,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAU5D;;;;;;OAMG;IACG,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUzD;;;;;;;;;;;;;;;;;;OAkBG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAapB;;;;;;;OAOG;IACG,cAAc,CAClB,OAAO,EAAE,UAAU,EACnB,cAAc,EAAE,cAAc,GAC7B,OAAO,CAAC,QAAQ,CAAC;IAapB;;;;;OAKG;IACG,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAQxD;;;;;;;;;;;;;;OAcG;IACG,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IA2BxD;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;IAI9D;;;;;OAKG;IACG,YAAY,CAChB,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,aAAa,CAAC,CAAC,GACrD,OAAO,CAAC,IAAI,CAAC;IAKhB;;;;;OAKG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;IAIrE;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IAK/E;;;;OAIG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAIjE;;;;;;OAMG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAIrC;;;;;;OAMG;IACG,aAAa,CACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GACpC,OAAO,CAAC,MAAM,CAAC;IAIlB;;;;;;OAMG;IACG,gBAAgB,CACpB,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,GACjC,OAAO,CAAC,IAAI,CAAC;IAIhB;;;;;OAKG;IACG,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG9E"}

package/dist/ltiTool.js

@@ -3,7 +3,9 @@ import { AddClientSchema, UpdateClientSchema } from './schemas/client.schema.js'
 import { HandleLoginParamsSchema, LTI13JwtPayloadSchema, SessionIdSchema, VerifyLaunchParamsSchema, } from './schemas/index.js';
 import { LineItemSchema, LineItemsSchema, } from './schemas/lti13/ags/lineItem.schema.js';
 import { ResultsSchema } from './schemas/lti13/ags/result.schema.js';
+import { NRPSContextMembershipResponseSchema, } from './schemas/lti13/nrps/contextMembership.schema.js';
 import { AGSService } from './services/ags.service.js';
+import { NRPSService } from './services/nrps.service.js';
 import { createSession } from './services/session.service.js';
 import { TokenService } from './services/token.service.js';
 import { getValidLaunchConfig } from './utils/launchConfigValidation.js';
@@ -37,6 +39,7 @@ export class LTITool {
     logger;
     tokenService;
     agsService;
+    nrpsService;
     /**
      * Creates a new LTI Tool instance.
      *
@@ -54,6 +57,7 @@ export class LTITool {
                 };
         this.tokenService = new TokenService(this.config.keyPair, this.config.security?.keyId ?? 'main');
         this.agsService = new AGSService(this.tokenService, this.config.storage, this.logger);
+        this.nrpsService = new NRPSService(this.tokenService, this.config.storage, this.logger);
     }
     /**
      * Handles LTI 1.3 login initiation by generating state/nonce and redirecting to platform auth.
@@ -320,6 +324,43 @@ export class LTITool {
         }
         await this.agsService.deleteLineItem(session);
     }
+    /**
+     * Retrieves course/context members using Names and Role Provisioning Services (NRPS).
+     *
+     * @param session - Active LTI session containing NRPS service endpoints
+     * @returns Array of members with clean camelCase properties
+     * @throws {Error} When NRPS is not available or request fails
+     *
+     * @example
+     * ```typescript
+     * const members = await ltiTool.getMembers(session);
+     * const instructors = members.filter(m =>
+     *   m.roles.some(role => role.includes('Instructor'))
+     * );
+     * ```
+     */
+    async getMembers(session) {
+        if (!session) {
+            throw new Error('session is required');
+        }
+        const response = await this.nrpsService.getMembers(session);
+        const data = await response.json();
+        console.log(data);
+        const validated = NRPSContextMembershipResponseSchema.parse(data);
+        // Transform to clean camelCase format
+        return validated.members.map((member) => ({
+            status: member.status,
+            name: member.name,
+            picture: member.picture,
+            givenName: member.given_name,
+            familyName: member.family_name,
+            middleName: member.middle_name,
+            email: member.email,
+            userId: member.user_id,
+            lisPersonSourcedId: member.lis_person_sourcedid,
+            roles: member.roles,
+        }));
+    }
     // Client management
     /**
      * Retrieves all configured LTI client platforms.

package/dist/schemas/lti13/nrps/contextMembership.schema.d.ts

@@ -0,0 +1,65 @@
+import * as z from 'zod';
+/**
+ * Schema for individual member in NRPS response
+ */
+export declare const NRPSMemberResponseSchema: z.ZodObject<{
+    status: z.ZodString;
+    name: z.ZodString;
+    picture: z.ZodOptional<z.ZodURL>;
+    given_name: z.ZodOptional<z.ZodString>;
+    family_name: z.ZodOptional<z.ZodString>;
+    middle_name: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    user_id: z.ZodString;
+    lis_person_sourcedid: z.ZodOptional<z.ZodString>;
+    roles: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * Schema for context information in NRPS response
+ */
+export declare const NRPSContextResponseSchema: z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    title: z.ZodString;
+}, z.core.$strip>;
+/**
+ * Schema for full NRPS context membership response
+ */
+export declare const NRPSContextMembershipResponseSchema: z.ZodObject<{
+    id: z.ZodURL;
+    context: z.ZodObject<{
+        id: z.ZodString;
+        label: z.ZodString;
+        title: z.ZodString;
+    }, z.core.$strip>;
+    members: z.ZodArray<z.ZodObject<{
+        status: z.ZodString;
+        name: z.ZodString;
+        picture: z.ZodOptional<z.ZodURL>;
+        given_name: z.ZodOptional<z.ZodString>;
+        family_name: z.ZodOptional<z.ZodString>;
+        middle_name: z.ZodOptional<z.ZodString>;
+        email: z.ZodOptional<z.ZodString>;
+        user_id: z.ZodString;
+        lis_person_sourcedid: z.ZodOptional<z.ZodString>;
+        roles: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+/**
+ * Clean public API schemas (camelCase for JS/TS consumers)
+ */
+export declare const MemberSchema: z.ZodObject<{
+    status: z.ZodString;
+    name: z.ZodString;
+    picture: z.ZodOptional<z.ZodURL>;
+    givenName: z.ZodOptional<z.ZodString>;
+    familyName: z.ZodOptional<z.ZodString>;
+    middleName: z.ZodOptional<z.ZodString>;
+    email: z.ZodOptional<z.ZodString>;
+    userId: z.ZodString;
+    lisPersonSourcedId: z.ZodOptional<z.ZodString>;
+    roles: z.ZodArray<z.ZodString>;
+}, z.core.$strip>;
+export type Member = z.infer<typeof MemberSchema>;
+export type Context = z.infer<typeof NRPSContextResponseSchema>;
+//# sourceMappingURL=contextMembership.schema.d.ts.map

package/dist/schemas/lti13/nrps/contextMembership.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextMembership.schema.d.ts","sourceRoot":"","sources":["../../../../src/schemas/lti13/nrps/contextMembership.schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;AAEzB;;GAEG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;iBAWnC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,yBAAyB;;;;iBAIpC,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;iBAI9C,CAAC;AAEH;;GAEG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;iBAWvB,CAAC;AAGH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/schemas/lti13/nrps/contextMembership.schema.js

@@ -0,0 +1,47 @@
+import * as z from 'zod';
+/**
+ * Schema for individual member in NRPS response
+ */
+export const NRPSMemberResponseSchema = z.object({
+    status: z.string(),
+    name: z.string(),
+    picture: z.url().optional(),
+    given_name: z.string().optional(),
+    family_name: z.string().optional(),
+    middle_name: z.string().optional(),
+    email: z.string().optional(), // Platforms don't force email regexp conformance
+    user_id: z.string(),
+    lis_person_sourcedid: z.string().optional(),
+    roles: z.array(z.string()),
+});
+/**
+ * Schema for context information in NRPS response
+ */
+export const NRPSContextResponseSchema = z.object({
+    id: z.string(),
+    label: z.string(),
+    title: z.string(),
+});
+/**
+ * Schema for full NRPS context membership response
+ */
+export const NRPSContextMembershipResponseSchema = z.object({
+    id: z.url(),
+    context: NRPSContextResponseSchema,
+    members: z.array(NRPSMemberResponseSchema),
+});
+/**
+ * Clean public API schemas (camelCase for JS/TS consumers)
+ */
+export const MemberSchema = z.object({
+    status: z.string(),
+    name: z.string(),
+    picture: z.url().optional(),
+    givenName: z.string().optional(),
+    familyName: z.string().optional(),
+    middleName: z.string().optional(),
+    email: z.string().optional(), // Platforms don't force email regexp conformance
+    userId: z.string(),
+    lisPersonSourcedId: z.string().optional(),
+    roles: z.array(z.string()),
+});

package/dist/services/nrps.service.d.ts

@@ -0,0 +1,28 @@
+import type { BaseLogger } from 'pino';
+import type { LTISession } from '../interfaces/ltiSession.js';
+import type { LTIStorage } from '../interfaces/ltiStorage.js';
+import type { TokenService } from './token.service.js';
+/**
+ * Names and Role Provisioning Services (NRPS) implementation for LTI 1.3.
+ * Provides methods to retrieve course membership and user information from the platform.
+ *
+ * @see https://www.imsglobal.org/spec/lti-nrps/v2p0
+ */
+export declare class NRPSService {
+    private tokenService;
+    private storage;
+    private logger;
+    constructor(tokenService: TokenService, storage: LTIStorage, logger: BaseLogger);
+    /**
+     * Retrieves all members (users) in the current course/context from the platform.
+     * Returns raw response that should be parsed by the calling service.
+     *
+     * @param session - Active LTI session containing NRPS service endpoints
+     * @returns Raw HTTP response containing membership data
+     * @throws {Error} When NRPS is not available for this session or request fails
+     */
+    getMembers(session: LTISession): Promise<Response>;
+    private getNRPSToken;
+    private validateNRPSResponse;
+}
+//# sourceMappingURL=nrps.service.d.ts.map

package/dist/services/nrps.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nrps.service.d.ts","sourceRoot":"","sources":["../../src/services/nrps.service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAEvC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAG9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD;;;;;GAKG;AACH,qBAAa,WAAW;IAEpB,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,MAAM;gBAFN,YAAY,EAAE,YAAY,EAC1B,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,UAAU;IAG5B;;;;;;;OAOG;IACG,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;YAsB1C,YAAY;YAeZ,oBAAoB;CAanC"}

package/dist/services/nrps.service.js

@@ -0,0 +1,51 @@
+import { getValidLaunchConfig } from '../utils/launchConfigValidation.js';
+/**
+ * Names and Role Provisioning Services (NRPS) implementation for LTI 1.3.
+ * Provides methods to retrieve course membership and user information from the platform.
+ *
+ * @see https://www.imsglobal.org/spec/lti-nrps/v2p0
+ */
+export class NRPSService {
+    tokenService;
+    storage;
+    logger;
+    constructor(tokenService, storage, logger) {
+        this.tokenService = tokenService;
+        this.storage = storage;
+        this.logger = logger;
+    }
+    /**
+     * Retrieves all members (users) in the current course/context from the platform.
+     * Returns raw response that should be parsed by the calling service.
+     *
+     * @param session - Active LTI session containing NRPS service endpoints
+     * @returns Raw HTTP response containing membership data
+     * @throws {Error} When NRPS is not available for this session or request fails
+     */
+    async getMembers(session) {
+        if (!session.services?.nrps?.membershipUrl) {
+            throw new Error('NRPS not available for this session');
+        }
+        const token = await this.getNRPSToken(session, 'https://purl.imsglobal.org/spec/lti-nrps/scope/contextmembership.readonly');
+        const response = await fetch(session.services.nrps.membershipUrl, {
+            method: 'GET',
+            headers: {
+                Authorization: `Bearer ${token}`,
+                Accept: 'application/vnd.ims.lti-nrps.v2.membershipcontainer+json',
+            },
+        });
+        await this.validateNRPSResponse(response, 'get members');
+        return response;
+    }
+    async getNRPSToken(session, scope) {
+        const launchConfig = await getValidLaunchConfig(this.storage, session.platform.issuer, session.platform.clientId, session.platform.deploymentId);
+        return this.tokenService.getBearerToken(session.platform.clientId, launchConfig.tokenUrl, scope);
+    }
+    async validateNRPSResponse(response, operation) {
+        if (!response.ok) {
+            const error = await response.json();
+            this.logger.error({ error, status: response.status, statusText: response.statusText }, `NRPS ${operation} failed`);
+            throw new Error(`NRPS ${operation} failed: ${response.statusText} ${error}`);
+        }
+    }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lti-tool/core",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "LTI 1.3 implementation for Node.js",
   "keywords": [
     "lti",

package/src/ltiTool.ts

@@ -24,7 +24,12 @@ import {
 } from './schemas/lti13/ags/lineItem.schema.js';
 import { type Results, ResultsSchema } from './schemas/lti13/ags/result.schema.js';
 import { type ScoreSubmission } from './schemas/lti13/ags/scoreSubmission.schema.js';
+import {
+  type Member,
+  NRPSContextMembershipResponseSchema,
+} from './schemas/lti13/nrps/contextMembership.schema.js';
 import { AGSService } from './services/ags.service.js';
+import { NRPSService } from './services/nrps.service.js';
 import { createSession } from './services/session.service.js';
 import { TokenService } from './services/token.service.js';
 import { getValidLaunchConfig } from './utils/launchConfigValidation.js';
@@ -58,6 +63,7 @@ export class LTITool {
   private logger: Logger;
   private tokenService: TokenService;
   private agsService: AGSService;
+  private nrpsService: NRPSService;
 
   /**
    * Creates a new LTI Tool instance.
@@ -79,6 +85,11 @@ export class LTITool {
       this.config.security?.keyId ?? 'main',
     );
     this.agsService = new AGSService(this.tokenService, this.config.storage, this.logger);
+    this.nrpsService = new NRPSService(
+      this.tokenService,
+      this.config.storage,
+      this.logger,
+    );
   }
 
   /**
@@ -411,6 +422,46 @@ export class LTITool {
     await this.agsService.deleteLineItem(session);
   }
 
+  /**
+   * Retrieves course/context members using Names and Role Provisioning Services (NRPS).
+   *
+   * @param session - Active LTI session containing NRPS service endpoints
+   * @returns Array of members with clean camelCase properties
+   * @throws {Error} When NRPS is not available or request fails
+   *
+   * @example
+   * ```typescript
+   * const members = await ltiTool.getMembers(session);
+   * const instructors = members.filter(m =>
+   *   m.roles.some(role => role.includes('Instructor'))
+   * );
+   * ```
+   */
+  async getMembers(session: LTISession): Promise<Member[]> {
+    if (!session) {
+      throw new Error('session is required');
+    }
+
+    const response = await this.nrpsService.getMembers(session);
+    const data = await response.json();
+    console.log(data);
+    const validated = NRPSContextMembershipResponseSchema.parse(data);
+
+    // Transform to clean camelCase format
+    return validated.members.map((member) => ({
+      status: member.status,
+      name: member.name,
+      picture: member.picture,
+      givenName: member.given_name,
+      familyName: member.family_name,
+      middleName: member.middle_name,
+      email: member.email,
+      userId: member.user_id,
+      lisPersonSourcedId: member.lis_person_sourcedid,
+      roles: member.roles,
+    }));
+  }
+
   // Client management
 
   /**

package/src/schemas/lti13/nrps/contextMembership.schema.ts

@@ -0,0 +1,55 @@
+import * as z from 'zod';
+
+/**
+ * Schema for individual member in NRPS response
+ */
+export const NRPSMemberResponseSchema = z.object({
+  status: z.string(),
+  name: z.string(),
+  picture: z.url().optional(),
+  given_name: z.string().optional(),
+  family_name: z.string().optional(),
+  middle_name: z.string().optional(),
+  email: z.string().optional(), // Platforms don't force email regexp conformance
+  user_id: z.string(),
+  lis_person_sourcedid: z.string().optional(),
+  roles: z.array(z.string()),
+});
+
+/**
+ * Schema for context information in NRPS response
+ */
+export const NRPSContextResponseSchema = z.object({
+  id: z.string(),
+  label: z.string(),
+  title: z.string(),
+});
+
+/**
+ * Schema for full NRPS context membership response
+ */
+export const NRPSContextMembershipResponseSchema = z.object({
+  id: z.url(),
+  context: NRPSContextResponseSchema,
+  members: z.array(NRPSMemberResponseSchema),
+});
+
+/**
+ * Clean public API schemas (camelCase for JS/TS consumers)
+ */
+export const MemberSchema = z.object({
+  status: z.string(),
+  name: z.string(),
+  picture: z.url().optional(),
+  givenName: z.string().optional(),
+  familyName: z.string().optional(),
+  middleName: z.string().optional(),
+  email: z.string().optional(), // Platforms don't force email regexp conformance
+  userId: z.string(),
+  lisPersonSourcedId: z.string().optional(),
+  roles: z.array(z.string()),
+});
+
+// Export clean types for public API
+export type Member = z.infer<typeof MemberSchema>;
+export type Context = z.infer<typeof NRPSContextResponseSchema>;

package/src/services/nrps.service.ts

@@ -0,0 +1,80 @@
+import type { BaseLogger } from 'pino';
+
+import type { LTISession } from '../interfaces/ltiSession.js';
+import type { LTIStorage } from '../interfaces/ltiStorage.js';
+import { getValidLaunchConfig } from '../utils/launchConfigValidation.js';
+
+import type { TokenService } from './token.service.js';
+
+/**
+ * Names and Role Provisioning Services (NRPS) implementation for LTI 1.3.
+ * Provides methods to retrieve course membership and user information from the platform.
+ *
+ * @see https://www.imsglobal.org/spec/lti-nrps/v2p0
+ */
+export class NRPSService {
+  constructor(
+    private tokenService: TokenService,
+    private storage: LTIStorage,
+    private logger: BaseLogger,
+  ) {}
+
+  /**
+   * Retrieves all members (users) in the current course/context from the platform.
+   * Returns raw response that should be parsed by the calling service.
+   *
+   * @param session - Active LTI session containing NRPS service endpoints
+   * @returns Raw HTTP response containing membership data
+   * @throws {Error} When NRPS is not available for this session or request fails
+   */
+  async getMembers(session: LTISession): Promise<Response> {
+    if (!session.services?.nrps?.membershipUrl) {
+      throw new Error('NRPS not available for this session');
+    }
+
+    const token = await this.getNRPSToken(
+      session,
+      'https://purl.imsglobal.org/spec/lti-nrps/scope/contextmembership.readonly',
+    );
+
+    const response = await fetch(session.services.nrps.membershipUrl, {
+      method: 'GET',
+      headers: {
+        Authorization: `Bearer ${token}`,
+        Accept: 'application/vnd.ims.lti-nrps.v2.membershipcontainer+json',
+      },
+    });
+
+    await this.validateNRPSResponse(response, 'get members');
+    return response;
+  }
+
+  private async getNRPSToken(session: LTISession, scope: string): Promise<string> {
+    const launchConfig = await getValidLaunchConfig(
+      this.storage,
+      session.platform.issuer,
+      session.platform.clientId,
+      session.platform.deploymentId,
+    );
+
+    return this.tokenService.getBearerToken(
+      session.platform.clientId,
+      launchConfig.tokenUrl,
+      scope,
+    );
+  }
+
+  private async validateNRPSResponse(
+    response: Response,
+    operation: string,
+  ): Promise<void> {
+    if (!response.ok) {
+      const error = await response.json();
+      this.logger.error(
+        { error, status: response.status, statusText: response.statusText },
+        `NRPS ${operation} failed`,
+      );
+      throw new Error(`NRPS ${operation} failed: ${response.statusText} ${error}`);
+    }
+  }
+}