mahara-contributors team mailing list archive

[Peter Spicer <1859605@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

When using the assignsubmission_mahara plugin to connect Moodle
assignments to Mahara, the link to view the portfolio works fine to open
Mahara, but the preview iframe in Moodle doesn't.

This is because MNET auth doesn't set up the session in the same way as
LTI does with the CSP being set to allow such things. Fixing this is
mostly a matter of copying the setup code into the MNET landing page:

    $parts = parse_url($remotewwwroot);
    $cspurl = $parts['scheme'] . '://' . $parts['host'];
    $SESSION->set('csp-ancestor-exemption', $cspurl);

I am mindful that LTI is considered the future direction of Mahara, but
we have customers who use MNET and can't move to LTI because it does not
meet their needs at this time, and this improves the workflow a tiny bit
for them without a significant overhaul of anything.

Happy to submit as a formal patch for all currently supported versions
of Mahara if that would help.

** Affects: mahara
     Importance: Undecided
         Status: New


** Tags: mnet

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1859605

Title:
  Mahara portfolio as Moodle assignment cannot be previewed

Status in Mahara:
  New

Bug description:
  When using the assignsubmission_mahara plugin to connect Moodle
  assignments to Mahara, the link to view the portfolio works fine to
  open Mahara, but the preview iframe in Moodle doesn't.

  This is because MNET auth doesn't set up the session in the same way
  as LTI does with the CSP being set to allow such things. Fixing this
  is mostly a matter of copying the setup code into the MNET landing
  page:

      $parts = parse_url($remotewwwroot);
      $cspurl = $parts['scheme'] . '://' . $parts['host'];
      $SESSION->set('csp-ancestor-exemption', $cspurl);

  I am mindful that LTI is considered the future direction of Mahara,
  but we have customers who use MNET and can't move to LTI because it
  does not meet their needs at this time, and this improves the workflow
  a tiny bit for them without a significant overhaul of anything.

  Happy to submit as a formal patch for all currently supported versions
  of Mahara if that would help.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1859605/+subscriptions