ENG-3903: add error handling for missing target uri #155
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Add validation for target_link_uri in LTI resource messages. Twice in the last week, two orgs have messed up this param (target_link_uri) not being in a launch and thrown a 500. This will catch the error nicely. :)
Purpose
This PR adds validation for the required target_link_uri claim in LTI Resource Link Requests, improving message security and conformance to the LTI 1.3 specification.
Importance
The target_link_uri is a required claim in LTI 1.3 resource link launches that specifies the intended destination URI for the launch. Validating this field:
Implementation
Standards Reference
This change ensures conformance with the IMS Global LTI 1.3 Core Specification which requires the https://purl.imsglobal.org/spec/lti/claim/target_link_uri claim for all resource link
launch messages.
Testing
composer test
before opening this PRcomposer lint-fix
before opening this PR