Skip to content

Releases: oxctl/spring-security-lti13

0.3.0 Anonymous LTI launch

16 Sep 14:52
Compare
Choose a tag to compare

This release supports LTI launches from platforms when there isn't a currently logged in user (anonymous launches). In this situation there isn't a subject claim (sub) in the issued token. It's up to consuming applications to decide how to handle these launches.

What's Changed

  • Support anonymous launches LTI 1.3 launches. by @buckett in #47

Full Changelog: 0.2.0...0.3.0

0.2.0 Spring 6.x / Spring Boot 3.x Release

23 Aug 13:41
Compare
Choose a tag to compare

What's Changed

This release switches to supporting Spring 6.x and Spring Boot 3.x. This release won't work with the older releases and you should continue using the 0.1.x releases for that.

Other notable changes:

  • Requires that ClientRegistration are configured with their authorization_type set to implicit.
  • Rejects initiation if the client ID doesn't match. This means we generate an error, rather than the tool consumer producing an error on the next step.

Full Changelog: 0.1.11...0.2.0

0.1.10 Better errors on initiation request

23 Nov 10:56
Compare
Choose a tag to compare

When an initiation request isn't valid better errors are generated instead of just a 500.

0.1.8 Validate the issuer

24 Oct 10:19
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.1.7...0.1.8

0.1.6 Update for postMessage

02 May 09:34
Compare
Choose a tag to compare

What's Changed

  • Bump jackson-databind from 2.13.4.1 to 2.13.4.2 by @dependabot in #36
  • Switch from org.imsglobal.lti prefix to lti by @buckett in #38

Full Changelog: 0.1.5...0.1.6

0.1.4 Handle errors from LMS

08 Mar 10:54
Compare
Choose a tag to compare

What's Changed

Full Changelog: 0.1.3...0.1.4