Learning Tools Interoperability®: Verifying Launch Messages
A fundamental part of any LTI® Tool Provider implementation is validating incoming launch messages - this section illustrates the steps required with some example code. For a tool provider this is the equivalent of processing the submission of a login page where a user has entered their username and password. In this case, however, the user credentials (along with other data) are received via an LTI launch message. If a tool provider also allows direct logins, then some of the code for processing these requests may be re-usable for handling LTI requests.
