{"action":"created","issue":{"url":"https://api.github.com/repos/edx/edx-platform/issues/8347","labels_url":"https://api.github.com/repos/edx/edx-platform/issues/8347/labels{/name}","comments_url":"https://api.github.com/repos/edx/edx-platform/issues/8347/comments","events_url":"https://api.github.com/repos/edx/edx-platform/issues/8347/events","html_url":"https://github.com/edx/edx-platform/pull/8347","id":84739965,"number":8347,"title":"[LTI Provider] Basic LTI authentication","user":{"login":"mcgachey","id":3449356,"avatar_url":"https://avatars.githubusercontent.com/u/3449356?v=3","gravatar_id":"","url":"https://api.github.com/users/mcgachey","html_url":"https://github.com/mcgachey","followers_url":"https://api.github.com/users/mcgachey/followers","following_url":"https://api.github.com/users/mcgachey/following{/other_user}","gists_url":"https://api.github.com/users/mcgachey/gists{/gist_id}","starred_url":"https://api.github.com/users/mcgachey/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcgachey/subscriptions","organizations_url":"https://api.github.com/users/mcgachey/orgs","repos_url":"https://api.github.com/users/mcgachey/repos","events_url":"https://api.github.com/users/mcgachey/events{/privacy}","received_events_url":"https://api.github.com/users/mcgachey/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/edx/edx-platform/labels/engineering%20review","name":"engineering review","color":"c7def8"},{"url":"https://api.github.com/repos/edx/edx-platform/labels/open-source-contribution","name":"open-source-contribution","color":"bfe5bf"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-06-03T19:42:06Z","updated_at":"2015-06-11T17:53:25Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/edx/edx-platform/pulls/8347","html_url":"https://github.com/edx/edx-platform/pull/8347","diff_url":"https://github.com/edx/edx-platform/pull/8347.diff","patch_url":"https://github.com/edx/edx-platform/pull/8347.patch"},"body":"This change cleans up the work in progress request at https://github.com/edx/edx-platform/pull/8176\r\n\r\nThis is an initial authentication implementation that allows LTI users to log in transparently to\r\nedX. The behavior is driven by pilot users at Harvard; this was the most requested feature.\r\n\r\nThe patch creates a new database model that maps users' LTI identifiers to newly-created edX\r\naccounts. If an LTI launch comes in with a user_id field that is not in the database, a new edX\r\naccount is created with a random user name and password. This account is then stored in the database,\r\nso that it is permanently associated with the LTI user ID.\r\n\r\nThis patch takes a simplistic approach to session management. If a user is logged in with a\r\ndifferent account when they perform an LTI launch, they will be logged out and then re-logged\r\nin using their LTI account.\r\n\r\nIn order to keep the patch simple, I have split out some refactoring that needs to be done into\r\na separate branch that I'll post once this has been merged. Since we no longer redirect to the\r\nlogin page, we don't need to maintain two separate LTI endpoints (one for the LTI launch and\r\none for authenticated users), or deal with the session management that requires. There are\r\nalso multiple fetches of the LtiConsumer object (one in the view, one in the signature\r\nvalidation) that the later patch will consolidate into one."},"comment":{"url":"https://api.github.com/repos/edx/edx-platform/issues/comments/111222403","html_url":"https://github.com/edx/edx-platform/pull/8347#issuecomment-111222403","issue_url":"https://api.github.com/repos/edx/edx-platform/issues/8347","id":111222403,"user":{"login":"chrisndodge","id":2362917,"avatar_url":"https://avatars.githubusercontent.com/u/2362917?v=3","gravatar_id":"","url":"https://api.github.com/users/chrisndodge","html_url":"https://github.com/chrisndodge","followers_url":"https://api.github.com/users/chrisndodge/followers","following_url":"https://api.github.com/users/chrisndodge/following{/other_user}","gists_url":"https://api.github.com/users/chrisndodge/gists{/gist_id}","starred_url":"https://api.github.com/users/chrisndodge/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/chrisndodge/subscriptions","organizations_url":"https://api.github.com/users/chrisndodge/orgs","repos_url":"https://api.github.com/users/chrisndodge/repos","events_url":"https://api.github.com/users/chrisndodge/events{/privacy}","received_events_url":"https://api.github.com/users/chrisndodge/received_events","type":"User","site_admin":false},"created_at":"2015-06-11T17:53:25Z","updated_at":"2015-06-11T17:53:25Z","body":"If the micro site is on subdomain, then yes, if it's on its own fully qualified hostname like mitprofessionalx.mit.edu then no.\n\nSent from my iPhone\n\n> On Jun 11, 2015, at 1:34 PM, David Ormsbee <notifications@github.com> wrote:\n> \n> @chrisndodge: When you're logged into a microsite with a completely different URL from edX, the sessions don't carry over, do they?\n> \n> —\n> Reply to this email directly or view it on GitHub.\n> \n"}}