ylqjgm
/
canvas-lms
mirror of https://github.com/instructure/canvas-lms.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
canvas-lms/config/security.yml.example

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

15 lines
397 B
Plaintext
Raw Normal View History

Add client_credentials grant_type Oauth2.0 client_credentials grant_type is added as a means to support LTI Advantage services. Will accept only the client_assertion_type of jwt-bearer and returns a JWS as the access token. LTI services using the jws will be able to authenticate, but other api endpoints will fail when using this jwt. closes PLAT-3659 Test Plan: - Create an oauth 2.0 request using a jwt signed by a developer key - Request should be validated and returns a jwt with the correct scopes Change-Id: I786b71e39f8d3c2c9c71aa3eff4ea490f6d56285 Reviewed-on: https://gerrit.instructure.com/161245 Tested-by: Jenkins QA-Review: Weston Dransfield <wdransfield@instructure.com> Reviewed-by: Weston Dransfield <wdransfield@instructure.com> Product-Review: Marc Alan Phillips <mphillips@instructure.com>
2018-08-18 06:06:12 +08:00
production: &default
Initial commit. closes #6988138
2011-02-01 09:57:29 +08:00
# replace this with a random string of at least 20 characters
encryption_key: 12345
LTI 1.3: Add security claims and sign with Canvas private key Closes PLAT-3633, PLAT-3634 Test Plan: - Do an LTI 1.3 launch in Canvas and verify the id token is signed with the current canvas secret key. - Verify the following claims are included and correct: * exp * iat * iss * nonce * sub Change-Id: I57699ac42bbe98a9fa03f82f3f9b9a16c6923011 Reviewed-on: https://gerrit.instructure.com/159855 Tested-by: Jenkins Reviewed-by: Marc Alan Phillips <mphillips@instructure.com> QA-Review: Marc Alan Phillips <mphillips@instructure.com> Product-Review: Marc Alan Phillips <mphillips@instructure.com>
2018-08-07 05:50:45 +08:00
lti_iss: 'https://canvas.instructure.com'
spec: fix some travis spec errors Attempt to fix our sis batch tempfile usage, which wasn't compatible with the travis environment. Found more SAML specs to mark as pending when SAML isn't enabled. Use webmock instead of our own home-grown solution, since Travis enforces webmock. Select only the users we're interested in sorting, to remove dependency on empty db. refs CNVS-10467 Change-Id: Icf9b093c6cc4a6b7b19da9dd2abab9f39457f817 Reviewed-on: https://gerrit.instructure.com/28949 Tested-by: Jenkins <jenkins@instructure.com> Reviewed-by: Cody Cutrer <cody@instructure.com> Product-Review: Brian Palmer <brianp@instructure.com> QA-Review: Brian Palmer <brianp@instructure.com>
2014-01-21 07:19:29 +08:00
Initial commit. closes #6988138
2011-02-01 09:57:29 +08:00
development:
Add client_credentials grant_type Oauth2.0 client_credentials grant_type is added as a means to support LTI Advantage services. Will accept only the client_assertion_type of jwt-bearer and returns a JWS as the access token. LTI services using the jws will be able to authenticate, but other api endpoints will fail when using this jwt. closes PLAT-3659 Test Plan: - Create an oauth 2.0 request using a jwt signed by a developer key - Request should be validated and returns a jwt with the correct scopes Change-Id: I786b71e39f8d3c2c9c71aa3eff4ea490f6d56285 Reviewed-on: https://gerrit.instructure.com/161245 Tested-by: Jenkins QA-Review: Weston Dransfield <wdransfield@instructure.com> Reviewed-by: Weston Dransfield <wdransfield@instructure.com> Product-Review: Marc Alan Phillips <mphillips@instructure.com>
2018-08-18 06:06:12 +08:00
<<: *default
spec: fix some travis spec errors Attempt to fix our sis batch tempfile usage, which wasn't compatible with the travis environment. Found more SAML specs to mark as pending when SAML isn't enabled. Use webmock instead of our own home-grown solution, since Travis enforces webmock. Select only the users we're interested in sorting, to remove dependency on empty db. refs CNVS-10467 Change-Id: Icf9b093c6cc4a6b7b19da9dd2abab9f39457f817 Reviewed-on: https://gerrit.instructure.com/28949 Tested-by: Jenkins <jenkins@instructure.com> Reviewed-by: Cody Cutrer <cody@instructure.com> Product-Review: Brian Palmer <brianp@instructure.com> QA-Review: Brian Palmer <brianp@instructure.com>
2014-01-21 07:19:29 +08:00
encryption_key: facdd3a131ddd8988b14f6e4e01039c93cfa0160
Use key for hashing tokens Good thing we haven't rotated any keys. Fixes PLAT-1237 Test Plan: - Create an access token - Rotate encryption_key by editing security.yml, and moving encryption_key to previous_encrytion_keys, and create a new encryption_keys - Make sure your access token is still valid Change-Id: I485830dcb39f845bf78c2cc83a01c0e0f2b866e8 Reviewed-on: https://gerrit.instructure.com/63045 Reviewed-by: Cody Cutrer <cody@instructure.com> Tested-by: Jenkins QA-Review: August Thornton <august@instructure.com> Product-Review: Brad Horrocks <bhorrocks@instructure.com>
2015-09-11 06:50:53 +08:00
previous_encryption_keys:
- 0610afc39c93010e4e6f41b8898ddd131a3ddcaf
spec: fix some travis spec errors Attempt to fix our sis batch tempfile usage, which wasn't compatible with the travis environment. Found more SAML specs to mark as pending when SAML isn't enabled. Use webmock instead of our own home-grown solution, since Travis enforces webmock. Select only the users we're interested in sorting, to remove dependency on empty db. refs CNVS-10467 Change-Id: Icf9b093c6cc4a6b7b19da9dd2abab9f39457f817 Reviewed-on: https://gerrit.instructure.com/28949 Tested-by: Jenkins <jenkins@instructure.com> Reviewed-by: Cody Cutrer <cody@instructure.com> Product-Review: Brian Palmer <brianp@instructure.com> QA-Review: Brian Palmer <brianp@instructure.com>
2014-01-21 07:19:29 +08:00
Initial commit. closes #6988138
2011-02-01 09:57:29 +08:00
test:
Add client_credentials grant_type Oauth2.0 client_credentials grant_type is added as a means to support LTI Advantage services. Will accept only the client_assertion_type of jwt-bearer and returns a JWS as the access token. LTI services using the jws will be able to authenticate, but other api endpoints will fail when using this jwt. closes PLAT-3659 Test Plan: - Create an oauth 2.0 request using a jwt signed by a developer key - Request should be validated and returns a jwt with the correct scopes Change-Id: I786b71e39f8d3c2c9c71aa3eff4ea490f6d56285 Reviewed-on: https://gerrit.instructure.com/161245 Tested-by: Jenkins QA-Review: Weston Dransfield <wdransfield@instructure.com> Reviewed-by: Weston Dransfield <wdransfield@instructure.com> Product-Review: Marc Alan Phillips <mphillips@instructure.com>
2018-08-18 06:06:12 +08:00
<<: *default
add long enough security.yml for test env Change-Id: I4baf75daa50c2caec223f73c05d3fc9371c6a0af Signed-off-by: Stephan Hagemann <stephan.hagemann@instructure.com> Reviewed-on: https://gerrit.instructure.com/28634 Product-Review: Bryan Madsen <bryan@instructure.com> Reviewed-by: Bryan Madsen <bryan@instructure.com> QA-Review: Bryan Madsen <bryan@instructure.com> Tested-by: Jenkins <jenkins@instructure.com>
2014-01-16 05:05:41 +08:00
encryption_key: facdd3a131ddd8988b14f6e4e01039c93cfa0160