secret, params) if !provider.valid_request?(request) response['WWW-Authenticate'] = "OAuth realm=\"http://#{request.env['HTTP_HOST']}\"" throw(:halt, [401, "Not authorized\n"]) end # check timestamp and nonce @username = provider.username if provider.outcome_service? # It's a launch for grading erb :assessment else # normal tool launch without grade write-back provider.lti_msg = "Sorry that tool was so boring" erb :boring_tool end https://github.com/instructure/lti_tool_provider_example Monday, January 28, 13