Uploaded image for project: 'Sakai'
  1. Sakai
  2. SAK-42250

BasicLTI: Firefox - Clicking links in LTI Tool throws user out of Sakai

    XMLWordPrintable

    Details

    • 19 status:
      Verified
    • Test Plan:
      Hide
      1. Use Firefox for this test and open the browser console
      2. Create a new site and add External Tool 
      3. Add a student to the site
      4. Click on External Tool -> Edit and enter the following:
      5. Click Update Options
      6. When the tool launches, click one of the "Return to tool Consumer" links
      7. You can now either wait for a few seconds or click the External Tool heading displayed
      8. You will be thrown out of Sakai
      Show
      Use Firefox for this test and open the browser console Create a new site and add External Tool  Add a student to the site Click on External Tool -> Edit and enter the following: Remote Tool Url:  https://www.tsugi.org/lti-test/tool.php *Remote Tool Key: 12345 *Remote Tool Secret: secret Click Update Options When the tool launches, click one of the "Return to tool Consumer" links You can now either wait for a few seconds or click the External Tool heading displayed You will be thrown out of Sakai

      Description

      This seems to happen only in Firefox. After the LTI tool launches, there are a few links at the top of the page. When in Firefox, both as the instructor and the student, clicking on those links will throw the user out of Sakai within a few seconds. You can also click the External Tool heading and be thrown out faster.

      The issue is that the return-url in the iframe sets a fresh session cookie in the iframe and whatever the next requests (XHR or page refresh) the use is logged out.

      Testing Note: This does not happen when testing with Sakai and the tool on the same host (i.e. localhost)

      I'm getting a different message today than I did yesterday when this happens.  (Chuck: This message is a symptom of being logged out - but I fixed this too)

      7/30: TypeError: $PBJQ(...).popover is not a function morpheus.scripts.min.js:42:72
      <anonymous> morpheus.scripts.min.js:42
      jQuery 4
      i
      fireWith
      ready
      K

      7/31: TypeError: portal.timeoutDialog is undefined morpheus.scripts.min.js:105:37
      setup_timeout_config https://trunk-mysql.nightly.sakaiproject.org/library/skin/morpheus-default/js/morpheus.scripts.min.js?version=a0cee45f:105
      <anonymous> https://trunk-mysql.nightly.sakaiproject.org/library/skin/morpheus-default/js/morpheus.scripts.min.js?version=a0cee45f:104

       

        Gliffy Diagrams

          Attachments

            Issue Links

              Activity

                People

                • Assignee:
                  csev Charles Severance
                  Reporter:
                  agschmidt Andrea Schmidt
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  5 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Git Source Code