BLTI - Signature

Stefan Bräu

Hello!

I am trying to login a panopto user using the BLTI form. it seems (according to panopto support) that everything is correct. just the oauth-signature is incorrect.

Currently i create the signature this way:

$params_strings = array();

foreach ($params as $k => $v) {

$params_strings[] = $k . "=" . $v;

}

$base_string = "POST&" . urlencode($launch_url) . "&" . rawurlencode(implode("&", $params_strings));

$secret = urlencode($config->lti_secret) . "&";

$signature = base64_encode(hash_hmac("sha1", $base_string, $secret, true));

$params["oauth_signature"] = $signature;

Seems correct (according to oauth standard) to me - or am i missing something? attached you find my complete small test-script as php-file.

thanks, stefan

blti_ano.php.zip

Hiroshi Ohno

Hi Stefan,

Thank you for the inquiry.

I cannot tell anything from your description and we need the actual traffic log for further troubleshooting.

I know you already opened a support ticket. We are going to continue troubleshooting there.