From 97741f780ef5ecd5831189f358861286b978784b Mon Sep 17 00:00:00 2001
From: Markos Gogoulos <markos@sixfeetup.com>
Date: Thu, 29 Jan 2026 16:03:35 +0200
Subject: [PATCH] wtv

---
 lti/views.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/lti/views.py b/lti/views.py
index 34714733..d0d3b984 100644
--- a/lti/views.py
+++ b/lti/views.py
@@ -129,8 +129,9 @@ class OIDCLoginView(View):
                     if lti_message_hint:
                         launch_data['lti_message_hint'] = lti_message_hint
 
-                    # Store using the UUID part of state
-                    session_service.save_launch_data(f'state-{state_uuid}', launch_data)
+                    # CRITICAL: Store using the FULL encoded state, not just the UUID
+                    # PyLTI1p3 looks for the full state value during validation
+                    session_service.save_launch_data(f'state-{state}', launch_data)
 
                     # Also store lti_message_hint in regular session for retry mechanism
                     # (state-specific storage might be lost due to cookie issues)