1 |
efrain |
1 |
<?php
|
|
|
2 |
// This file is part of Moodle - http://moodle.org/
|
|
|
3 |
//
|
|
|
4 |
// Moodle is free software: you can redistribute it and/or modify
|
|
|
5 |
// it under the terms of the GNU General Public License as published by
|
|
|
6 |
// the Free Software Foundation, either version 3 of the License, or
|
|
|
7 |
// (at your option) any later version.
|
|
|
8 |
//
|
|
|
9 |
// Moodle is distributed in the hope that it will be useful,
|
|
|
10 |
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
11 |
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
12 |
// GNU General Public License for more details.
|
|
|
13 |
//
|
|
|
14 |
// You should have received a copy of the GNU General Public License
|
|
|
15 |
// along with Moodle. If not, see <http://www.gnu.org/licenses/>.
|
|
|
16 |
|
|
|
17 |
/**
|
|
|
18 |
* Extends the IMS Tool provider library for the LTI enrolment.
|
|
|
19 |
*
|
|
|
20 |
* @package enrol_lti
|
|
|
21 |
* @copyright 2016 John Okely <john@moodle.com>
|
|
|
22 |
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
|
23 |
*/
|
|
|
24 |
|
|
|
25 |
namespace enrol_lti;
|
|
|
26 |
|
|
|
27 |
defined('MOODLE_INTERNAL') || die;
|
|
|
28 |
|
|
|
29 |
use context;
|
|
|
30 |
use core\notification;
|
|
|
31 |
use core_user;
|
|
|
32 |
use enrol_lti\output\registration;
|
|
|
33 |
use html_writer;
|
|
|
34 |
use IMSGlobal\LTI\Profile\Item;
|
|
|
35 |
use IMSGlobal\LTI\Profile\Message;
|
|
|
36 |
use IMSGlobal\LTI\Profile\ResourceHandler;
|
|
|
37 |
use IMSGlobal\LTI\Profile\ServiceDefinition;
|
|
|
38 |
use IMSGlobal\LTI\ToolProvider\ToolProvider;
|
|
|
39 |
use moodle_exception;
|
|
|
40 |
use moodle_url;
|
|
|
41 |
use stdClass;
|
|
|
42 |
|
|
|
43 |
require_once($CFG->dirroot . '/user/lib.php');
|
|
|
44 |
|
|
|
45 |
/**
|
|
|
46 |
* Extends the IMS Tool provider library for the LTI enrolment.
|
|
|
47 |
*
|
|
|
48 |
* @package enrol_lti
|
|
|
49 |
* @copyright 2016 John Okely <john@moodle.com>
|
|
|
50 |
* @license http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
|
|
|
51 |
*/
|
|
|
52 |
class tool_provider extends ToolProvider {
|
|
|
53 |
|
|
|
54 |
/**
|
|
|
55 |
* @var stdClass $tool The object representing the enrol instance providing this LTI tool
|
|
|
56 |
*/
|
|
|
57 |
protected $tool;
|
|
|
58 |
|
|
|
59 |
/**
|
|
|
60 |
* Remove $this->baseUrl (wwwroot) from a given url string and return it.
|
|
|
61 |
*
|
|
|
62 |
* @param string $url The url from which to remove the base url
|
|
|
63 |
* @return string|null A string of the relative path to the url, or null if it couldn't be determined.
|
|
|
64 |
*/
|
|
|
65 |
protected function strip_base_url($url) {
|
|
|
66 |
if (substr($url, 0, strlen($this->baseUrl)) == $this->baseUrl) {
|
|
|
67 |
return substr($url, strlen($this->baseUrl));
|
|
|
68 |
}
|
|
|
69 |
return null;
|
|
|
70 |
}
|
|
|
71 |
|
|
|
72 |
/**
|
|
|
73 |
* Create a new instance of tool_provider to handle all the LTI tool provider interactions.
|
|
|
74 |
*
|
|
|
75 |
* @param int $toolid The id of the tool to be provided.
|
|
|
76 |
*/
|
|
|
77 |
public function __construct($toolid) {
|
|
|
78 |
global $CFG, $SITE;
|
|
|
79 |
|
|
|
80 |
$token = helper::generate_proxy_token($toolid);
|
|
|
81 |
|
|
|
82 |
$tool = helper::get_lti_tool($toolid);
|
|
|
83 |
$this->tool = $tool;
|
|
|
84 |
|
|
|
85 |
$dataconnector = new data_connector();
|
|
|
86 |
parent::__construct($dataconnector);
|
|
|
87 |
|
|
|
88 |
// Override debugMode and set to the configured value.
|
|
|
89 |
$this->debugMode = $CFG->debugdeveloper;
|
|
|
90 |
|
|
|
91 |
$this->baseUrl = $CFG->wwwroot;
|
|
|
92 |
$toolpath = helper::get_launch_url($toolid);
|
|
|
93 |
$toolpath = $this->strip_base_url($toolpath);
|
|
|
94 |
|
|
|
95 |
$vendorid = $SITE->shortname;
|
|
|
96 |
$vendorname = $SITE->fullname;
|
|
|
97 |
$vendordescription = trim(html_to_text($SITE->summary));
|
|
|
98 |
$this->vendor = new Item($vendorid, $vendorname, $vendordescription, $CFG->wwwroot);
|
|
|
99 |
|
|
|
100 |
$name = helper::get_name($tool);
|
|
|
101 |
$description = helper::get_description($tool);
|
|
|
102 |
$icon = helper::get_icon($tool)->out();
|
|
|
103 |
$icon = $this->strip_base_url($icon);
|
|
|
104 |
|
|
|
105 |
$this->product = new Item(
|
|
|
106 |
$token,
|
|
|
107 |
$name,
|
|
|
108 |
$description,
|
|
|
109 |
helper::get_proxy_url($tool),
|
|
|
110 |
'1.0'
|
|
|
111 |
);
|
|
|
112 |
|
|
|
113 |
$requiredmessages = [
|
|
|
114 |
new Message(
|
|
|
115 |
'basic-lti-launch-request',
|
|
|
116 |
$toolpath,
|
|
|
117 |
[
|
|
|
118 |
'Context.id',
|
|
|
119 |
'CourseSection.title',
|
|
|
120 |
'CourseSection.label',
|
|
|
121 |
'CourseSection.sourcedId',
|
|
|
122 |
'CourseSection.longDescription',
|
|
|
123 |
'CourseSection.timeFrame.begin',
|
|
|
124 |
'ResourceLink.id',
|
|
|
125 |
'ResourceLink.title',
|
|
|
126 |
'ResourceLink.description',
|
|
|
127 |
'User.id',
|
|
|
128 |
'User.username',
|
|
|
129 |
'Person.name.full',
|
|
|
130 |
'Person.name.given',
|
|
|
131 |
'Person.name.family',
|
|
|
132 |
'Person.email.primary',
|
|
|
133 |
'Person.sourcedId',
|
|
|
134 |
'Person.name.middle',
|
|
|
135 |
'Person.address.street1',
|
|
|
136 |
'Person.address.locality',
|
|
|
137 |
'Person.address.country',
|
|
|
138 |
'Person.address.timezone',
|
|
|
139 |
'Person.phone.primary',
|
|
|
140 |
'Person.phone.mobile',
|
|
|
141 |
'Person.webaddress',
|
|
|
142 |
'Membership.role',
|
|
|
143 |
'Result.sourcedId',
|
|
|
144 |
'Result.autocreate'
|
|
|
145 |
]
|
|
|
146 |
)
|
|
|
147 |
];
|
|
|
148 |
$optionalmessages = [
|
|
|
149 |
];
|
|
|
150 |
|
|
|
151 |
$this->resourceHandlers[] = new ResourceHandler(
|
|
|
152 |
new Item(
|
|
|
153 |
$token,
|
|
|
154 |
helper::get_name($tool),
|
|
|
155 |
$description
|
|
|
156 |
),
|
|
|
157 |
$icon,
|
|
|
158 |
$requiredmessages,
|
|
|
159 |
$optionalmessages
|
|
|
160 |
);
|
|
|
161 |
|
|
|
162 |
$this->requiredServices[] = new ServiceDefinition(['application/vnd.ims.lti.v2.toolproxy+json'], ['POST']);
|
|
|
163 |
$this->requiredServices[] = new ServiceDefinition(['application/vnd.ims.lis.v2.membershipcontainer+json'], ['GET']);
|
|
|
164 |
}
|
|
|
165 |
|
|
|
166 |
/**
|
|
|
167 |
* Override onError for custom error handling.
|
|
|
168 |
* @return void
|
|
|
169 |
*/
|
|
|
170 |
protected function onError() {
|
|
|
171 |
global $OUTPUT;
|
|
|
172 |
|
|
|
173 |
$message = $this->message;
|
|
|
174 |
if ($this->debugMode && !empty($this->reason)) {
|
|
|
175 |
$message = $this->reason;
|
|
|
176 |
}
|
|
|
177 |
|
|
|
178 |
// Display the error message from the provider's side if the consumer has not specified a URL to pass the error to.
|
|
|
179 |
if (empty($this->returnUrl)) {
|
|
|
180 |
$this->errorOutput = $OUTPUT->notification(get_string('failedrequest', 'enrol_lti', ['reason' => $message]), 'error');
|
|
|
181 |
}
|
|
|
182 |
}
|
|
|
183 |
|
|
|
184 |
/**
|
|
|
185 |
* Override onLaunch with tool logic.
|
|
|
186 |
* @return void
|
|
|
187 |
*/
|
|
|
188 |
protected function onLaunch() {
|
|
|
189 |
global $DB, $SESSION, $CFG;
|
|
|
190 |
|
|
|
191 |
// Check for valid consumer.
|
|
|
192 |
if (empty($this->consumer) || $this->dataConnector->loadToolConsumer($this->consumer) === false) {
|
|
|
193 |
$this->ok = false;
|
|
|
194 |
$this->message = get_string('invalidtoolconsumer', 'enrol_lti');
|
|
|
195 |
return;
|
|
|
196 |
}
|
|
|
197 |
|
|
|
198 |
$url = helper::get_launch_url($this->tool->id);
|
|
|
199 |
// If a tool proxy has been stored for the current consumer trying to access a tool,
|
|
|
200 |
// check that the tool is being launched from the correct url.
|
|
|
201 |
$correctlaunchurl = false;
|
|
|
202 |
if (!empty($this->consumer->toolProxy)) {
|
|
|
203 |
$proxy = json_decode($this->consumer->toolProxy);
|
|
|
204 |
$handlers = $proxy->tool_profile->resource_handler;
|
|
|
205 |
foreach ($handlers as $handler) {
|
|
|
206 |
foreach ($handler->message as $message) {
|
|
|
207 |
$handlerurl = new moodle_url($message->path);
|
|
|
208 |
$fullpath = $handlerurl->out(false);
|
|
|
209 |
if ($message->message_type == "basic-lti-launch-request" && $fullpath == $url) {
|
|
|
210 |
$correctlaunchurl = true;
|
|
|
211 |
break 2;
|
|
|
212 |
}
|
|
|
213 |
}
|
|
|
214 |
}
|
|
|
215 |
} else if ($this->tool->secret == $this->consumer->secret) {
|
|
|
216 |
// Test if the LTI1 secret for this tool is being used. Then we know the correct tool is being launched.
|
|
|
217 |
$correctlaunchurl = true;
|
|
|
218 |
}
|
|
|
219 |
if (!$correctlaunchurl) {
|
|
|
220 |
$this->ok = false;
|
|
|
221 |
$this->message = get_string('invalidrequest', 'enrol_lti');
|
|
|
222 |
return;
|
|
|
223 |
}
|
|
|
224 |
|
|
|
225 |
// Before we do anything check that the context is valid.
|
|
|
226 |
$tool = $this->tool;
|
|
|
227 |
$context = context::instance_by_id($tool->contextid);
|
|
|
228 |
|
|
|
229 |
// Set the user data.
|
|
|
230 |
$user = new stdClass();
|
|
|
231 |
$user->username = helper::create_username($this->consumer->getKey(), $this->user->ltiUserId);
|
|
|
232 |
if (!empty($this->user->firstname)) {
|
|
|
233 |
$user->firstname = $this->user->firstname;
|
|
|
234 |
} else {
|
|
|
235 |
$user->firstname = $this->user->getRecordId();
|
|
|
236 |
}
|
|
|
237 |
if (!empty($this->user->lastname)) {
|
|
|
238 |
$user->lastname = $this->user->lastname;
|
|
|
239 |
} else {
|
|
|
240 |
$user->lastname = $this->tool->contextid;
|
|
|
241 |
}
|
|
|
242 |
|
|
|
243 |
$user->email = core_user::clean_field($this->user->email, 'email');
|
|
|
244 |
|
|
|
245 |
// Get the user data from the LTI consumer.
|
|
|
246 |
$user = helper::assign_user_tool_data($tool, $user);
|
|
|
247 |
|
|
|
248 |
// Check if the user exists.
|
|
|
249 |
if (!$dbuser = $DB->get_record('user', ['username' => $user->username, 'deleted' => 0])) {
|
|
|
250 |
// If the email was stripped/not set then fill it with a default one. This
|
|
|
251 |
// stops the user from being redirected to edit their profile page.
|
|
|
252 |
if (empty($user->email)) {
|
|
|
253 |
$user->email = $user->username . "@example.com";
|
|
|
254 |
}
|
|
|
255 |
|
|
|
256 |
$user->auth = 'lti';
|
|
|
257 |
$user->id = \user_create_user($user);
|
|
|
258 |
|
|
|
259 |
// Get the updated user record.
|
|
|
260 |
$user = $DB->get_record('user', ['id' => $user->id]);
|
|
|
261 |
} else {
|
|
|
262 |
if (helper::user_match($user, $dbuser)) {
|
|
|
263 |
$user = $dbuser;
|
|
|
264 |
} else {
|
|
|
265 |
// If email is empty remove it, so we don't update the user with an empty email.
|
|
|
266 |
if (empty($user->email)) {
|
|
|
267 |
unset($user->email);
|
|
|
268 |
}
|
|
|
269 |
|
|
|
270 |
$user->id = $dbuser->id;
|
|
|
271 |
\user_update_user($user);
|
|
|
272 |
|
|
|
273 |
// Get the updated user record.
|
|
|
274 |
$user = $DB->get_record('user', ['id' => $user->id]);
|
|
|
275 |
}
|
|
|
276 |
}
|
|
|
277 |
|
|
|
278 |
// Update user image.
|
|
|
279 |
if (isset($this->user) && isset($this->user->image) && !empty($this->user->image)) {
|
|
|
280 |
$image = $this->user->image;
|
|
|
281 |
} else {
|
|
|
282 |
// Use custom_user_image parameter as a fallback.
|
|
|
283 |
$image = $this->resourceLink->getSetting('custom_user_image');
|
|
|
284 |
}
|
|
|
285 |
|
|
|
286 |
// Check if there is an image to process.
|
|
|
287 |
if ($image) {
|
|
|
288 |
helper::update_user_profile_image($user->id, $image);
|
|
|
289 |
}
|
|
|
290 |
|
|
|
291 |
// Check if we need to force the page layout to embedded.
|
|
|
292 |
$isforceembed = $this->resourceLink->getSetting('custom_force_embed') == 1;
|
|
|
293 |
|
|
|
294 |
// Check if we are an instructor.
|
|
|
295 |
$isinstructor = $this->user->isStaff() || $this->user->isAdmin();
|
|
|
296 |
|
|
|
297 |
if ($context->contextlevel == CONTEXT_COURSE) {
|
|
|
298 |
$courseid = $context->instanceid;
|
|
|
299 |
$urltogo = new moodle_url('/course/view.php', ['id' => $courseid]);
|
|
|
300 |
|
|
|
301 |
} else if ($context->contextlevel == CONTEXT_MODULE) {
|
|
|
302 |
$cm = get_coursemodule_from_id(false, $context->instanceid, 0, false, MUST_EXIST);
|
|
|
303 |
$urltogo = new moodle_url('/mod/' . $cm->modname . '/view.php', ['id' => $cm->id]);
|
|
|
304 |
|
|
|
305 |
// If we are a student in the course module context we do not want to display blocks.
|
|
|
306 |
if (!$isforceembed && !$isinstructor) {
|
|
|
307 |
$isforceembed = true;
|
|
|
308 |
}
|
|
|
309 |
} else {
|
|
|
310 |
throw new \moodle_exception('invalidcontext');
|
|
|
311 |
exit();
|
|
|
312 |
}
|
|
|
313 |
|
|
|
314 |
// Force page layout to embedded if necessary.
|
|
|
315 |
if ($isforceembed) {
|
|
|
316 |
$SESSION->forcepagelayout = 'embedded';
|
|
|
317 |
} else {
|
|
|
318 |
// May still be set from previous session, so unset it.
|
|
|
319 |
unset($SESSION->forcepagelayout);
|
|
|
320 |
}
|
|
|
321 |
|
|
|
322 |
// Enrol the user in the course with no role.
|
|
|
323 |
$result = helper::enrol_user($tool, $user->id);
|
|
|
324 |
|
|
|
325 |
// Display an error, if there is one.
|
|
|
326 |
if ($result !== helper::ENROLMENT_SUCCESSFUL) {
|
|
|
327 |
throw new \moodle_exception($result, 'enrol_lti');
|
|
|
328 |
exit();
|
|
|
329 |
}
|
|
|
330 |
|
|
|
331 |
// Give the user the role in the given context.
|
|
|
332 |
$roleid = $isinstructor ? $tool->roleinstructor : $tool->rolelearner;
|
|
|
333 |
role_assign($roleid, $user->id, $tool->contextid);
|
|
|
334 |
|
|
|
335 |
// Login user.
|
|
|
336 |
$sourceid = $this->user->ltiResultSourcedId;
|
|
|
337 |
$serviceurl = $this->resourceLink->getSetting('lis_outcome_service_url');
|
|
|
338 |
|
|
|
339 |
// Check if we have recorded this user before.
|
|
|
340 |
if ($userlog = $DB->get_record('enrol_lti_users', ['toolid' => $tool->id, 'userid' => $user->id])) {
|
|
|
341 |
if ($userlog->sourceid != $sourceid) {
|
|
|
342 |
$userlog->sourceid = $sourceid;
|
|
|
343 |
}
|
|
|
344 |
if ($userlog->serviceurl != $serviceurl) {
|
|
|
345 |
$userlog->serviceurl = $serviceurl;
|
|
|
346 |
}
|
|
|
347 |
if (empty($userlog->consumersecret)) {
|
|
|
348 |
$userlog->consumersecret = $this->consumer->secret;
|
|
|
349 |
}
|
|
|
350 |
$userlog->lastaccess = time();
|
|
|
351 |
$DB->update_record('enrol_lti_users', $userlog);
|
|
|
352 |
} else {
|
|
|
353 |
// Add the user details so we can use it later when syncing grades and members.
|
|
|
354 |
$userlog = new stdClass();
|
|
|
355 |
$userlog->userid = $user->id;
|
|
|
356 |
$userlog->toolid = $tool->id;
|
|
|
357 |
$userlog->serviceurl = $serviceurl;
|
|
|
358 |
$userlog->sourceid = $sourceid;
|
|
|
359 |
$userlog->consumerkey = $this->consumer->getKey();
|
|
|
360 |
$userlog->consumersecret = $this->consumer->secret;
|
|
|
361 |
$userlog->lastgrade = 0;
|
|
|
362 |
$userlog->lastaccess = time();
|
|
|
363 |
$userlog->timecreated = time();
|
|
|
364 |
$userlog->membershipsurl = $this->resourceLink->getSetting('ext_ims_lis_memberships_url');
|
|
|
365 |
$userlog->membershipsid = $this->resourceLink->getSetting('ext_ims_lis_memberships_id');
|
|
|
366 |
|
|
|
367 |
$DB->insert_record('enrol_lti_users', $userlog);
|
|
|
368 |
}
|
|
|
369 |
|
|
|
370 |
// Finalise the user log in.
|
|
|
371 |
complete_user_login($user);
|
|
|
372 |
|
|
|
373 |
// Everything's good. Set appropriate OK flag and message values.
|
|
|
374 |
$this->ok = true;
|
|
|
375 |
$this->message = get_string('success');
|
|
|
376 |
|
|
|
377 |
if (empty($CFG->allowframembedding)) {
|
|
|
378 |
// Provide an alternative link.
|
|
|
379 |
$stropentool = get_string('opentool', 'enrol_lti');
|
|
|
380 |
echo html_writer::tag('p', get_string('frameembeddingnotenabled', 'enrol_lti'));
|
|
|
381 |
echo html_writer::link($urltogo, $stropentool, ['target' => '_blank']);
|
|
|
382 |
} else {
|
|
|
383 |
// All done, redirect the user to where they want to go.
|
|
|
384 |
redirect($urltogo);
|
|
|
385 |
}
|
|
|
386 |
}
|
|
|
387 |
|
|
|
388 |
/**
|
|
|
389 |
* Override onRegister with registration code.
|
|
|
390 |
*/
|
|
|
391 |
protected function onRegister() {
|
|
|
392 |
global $PAGE;
|
|
|
393 |
|
|
|
394 |
if (empty($this->consumer)) {
|
|
|
395 |
$this->ok = false;
|
|
|
396 |
$this->message = get_string('invalidtoolconsumer', 'enrol_lti');
|
|
|
397 |
return;
|
|
|
398 |
}
|
|
|
399 |
|
|
|
400 |
if (empty($this->returnUrl)) {
|
|
|
401 |
$this->ok = false;
|
|
|
402 |
$this->message = get_string('returnurlnotset', 'enrol_lti');
|
|
|
403 |
return;
|
|
|
404 |
}
|
|
|
405 |
|
|
|
406 |
if ($this->doToolProxyService()) {
|
|
|
407 |
// Map tool consumer and published tool, if necessary.
|
|
|
408 |
$this->map_tool_to_consumer();
|
|
|
409 |
|
|
|
410 |
// Indicate successful processing in message.
|
|
|
411 |
$this->message = get_string('successfulregistration', 'enrol_lti');
|
|
|
412 |
|
|
|
413 |
// Prepare response.
|
|
|
414 |
$returnurl = new moodle_url($this->returnUrl);
|
|
|
415 |
$returnurl->param('lti_msg', get_string("successfulregistration", "enrol_lti"));
|
|
|
416 |
$returnurl->param('status', 'success');
|
|
|
417 |
$guid = $this->consumer->getKey();
|
|
|
418 |
$returnurl->param('tool_proxy_guid', $guid);
|
|
|
419 |
|
|
|
420 |
$returnurlout = $returnurl->out(false);
|
|
|
421 |
|
|
|
422 |
$registration = new registration($returnurlout);
|
|
|
423 |
$output = $PAGE->get_renderer('enrol_lti');
|
|
|
424 |
echo $output->render($registration);
|
|
|
425 |
|
|
|
426 |
} else {
|
|
|
427 |
// Tell the consumer that the registration failed.
|
|
|
428 |
$this->ok = false;
|
|
|
429 |
$this->message = get_string('couldnotestablishproxy', 'enrol_lti');
|
|
|
430 |
}
|
|
|
431 |
}
|
|
|
432 |
|
|
|
433 |
/**
|
|
|
434 |
* Performs mapping of the tool consumer to a published tool.
|
|
|
435 |
*
|
|
|
436 |
* @throws moodle_exception
|
|
|
437 |
*/
|
|
|
438 |
public function map_tool_to_consumer() {
|
|
|
439 |
global $DB;
|
|
|
440 |
|
|
|
441 |
if (empty($this->consumer)) {
|
|
|
442 |
throw new moodle_exception('invalidtoolconsumer', 'enrol_lti');
|
|
|
443 |
}
|
|
|
444 |
|
|
|
445 |
// Map the consumer to the tool.
|
|
|
446 |
$mappingparams = [
|
|
|
447 |
'toolid' => $this->tool->id,
|
|
|
448 |
'consumerid' => $this->consumer->getRecordId()
|
|
|
449 |
];
|
|
|
450 |
$mappingexists = $DB->record_exists('enrol_lti_tool_consumer_map', $mappingparams);
|
|
|
451 |
if (!$mappingexists) {
|
|
|
452 |
$DB->insert_record('enrol_lti_tool_consumer_map', (object) $mappingparams);
|
|
|
453 |
}
|
|
|
454 |
}
|
|
|
455 |
}
|