canvas-lms/lib/app_center
wdransfield 74208c4be1 Send access token when installing app
Fixes: PLAT-1851

Test Plan:
- Verify that your app center access token
  has at least some apps blacklisted
- obtain the app center id for on of the
  blacklisted applications (i.e. gamelab
  if eduappcenter.com/api/v1/lti_apps/gamelab
  was on the blacklist).
- Install an app from the app center but
  intercept the request made to
  "course/course_id/create_tool_with_verification"
  and change the 'app_center_api' value to
  the blacklisted id (Or just mimic the POST with
  curl, Postman, etc.).
- Verify that installation fails
- Verify that installing a non-blacklisted app
  succeeds.

Change-Id: I306a76927eb4677530de11db1ae6681b8f1c117b
Reviewed-on: https://gerrit.instructure.com/92144
Tested-by: Jenkins
Reviewed-by: Andrew Butterfield <abutterfield@instructure.com>
Reviewed-by: Nathan Mills <nathanm@instructure.com>
QA-Review: August Thornton <august@instructure.com>
Product-Review: Weston Dransfield <wdransfield@instructure.com>
2016-10-07 16:51:06 +00:00
..
app_api.rb Send access token when installing app 2016-10-07 16:51:06 +00:00