Learning Tools Interoperability: Verifying Launch Messages

Learning Tools Interoperability®: Verifying Launch Messages

A fundamental part of any LTI® Tool Provider implementation is validating incoming launch messages - this section illustrates the steps required with some example code.  For a tool provider this is the equivalent of processing the submission of a login page where a user has entered their username and password.  In this case, however, the user credentials (along with other data) are received via an LTI launch message.  If a tool provider also allows direct logins, then some of the code for processing these requests may be re-usable for handling LTI requests.