Lti
- Written for
- ＋ Written for
- Deprecated
- ＋ Deprecated
- Applies to
- ＋ Applies to
Lti
Public — no authentication required.
3 routes. Each row is one endpoint with its explanation and whether it honours the Idempotency-Key header.
Method & path | Idem | Explanation |
|---|---|---|
| LTI 1.3 OIDC login initiation. Looks up the platform by (iss, client_id) and 302s to its authorization endpoint with a state+nonce (response_type=id_token, response_mode=form_post, prompt=none). | |
| LTI 1.3 OIDC login initiation (form-post variant of GET /lti/login). | |
| LTI 1.3 launch callback. Verifies the platform id_token (JWKS signature, iss, aud=client_id, single-use nonce), enforces the deployment_id allowlist and LtiResourceLinkRequest/1.3.0, JITs the user, and lands them on target_link_uri with SameSite=None session cookies for the LMS iframe. |