This commit is contained in:
Markos Gogoulos
2026-01-29 16:03:35 +02:00
parent 78cce0eb10
commit 97741f780e

View File

@@ -129,8 +129,9 @@ class OIDCLoginView(View):
if lti_message_hint: if lti_message_hint:
launch_data['lti_message_hint'] = lti_message_hint launch_data['lti_message_hint'] = lti_message_hint
# Store using the UUID part of state # CRITICAL: Store using the FULL encoded state, not just the UUID
session_service.save_launch_data(f'state-{state_uuid}', launch_data) # PyLTI1p3 looks for the full state value during validation
session_service.save_launch_data(f'state-{state}', launch_data)
# Also store lti_message_hint in regular session for retry mechanism # Also store lti_message_hint in regular session for retry mechanism
# (state-specific storage might be lost due to cookie issues) # (state-specific storage might be lost due to cookie issues)