Package edu.ksu.lti.launch.security

Class CanvasInstanceChecker

java.lang.Object

edu.ksu.lti.launch.security.CanvasInstanceChecker

@Component
public class CanvasInstanceChecker
extends Object

Checks which Canvas instance this application is running in. When the periodic overwrite of beta/test happens in hosted Canvas instances, you can end up with Canvas test pointing at production LTI applications. This can potentially result in test data being pushed into production SIS or other systems that this LTI application may interact with.

This checker is invoked during launch and will throw an exception if the Canvas URL coming in from the LTI launch request doesn't match the configured Canvas URL or secondary URL if you have a vanity domain.

Constructor Summary

Constructors

Constructor	Description
CanvasInstanceChecker(ConfigService configService)

Method Summary

Modifier and Type	Method	Description
void	assertValidInstance(LtiSession ltiSession)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CanvasInstanceChecker

@Autowired
public CanvasInstanceChecker(ConfigService configService)

Method Detail

assertValidInstance

public void assertValidInstance(LtiSession ltiSession)