Consumer_key and shared_secret JSON fields are being removed when added to a Developer Key via Paste JSON

Issue Documented: 2025-01-17
Canvas

This behavior has been resolved and deployed to the production environment as of 1/15/25.

Description

A partner, Atomic Jolt, reported seeing the “consumer_key” & “shared_secret” JSON fields added to a Developer Key via Paste JSON being stripped when saving the key.

Expected Behavior

These additional fields should not be removed since they were available up until recently.

Workaround

No workaround exists at this time.

Steps to Reproduce

Prerequisite:

  • A JSON with LTI Developer Key settings containing the fields “consumer_key”: "key, “shared_secret”: “secret”

  1. Create a new LTI Developer Key

  1. Change the configure method to 'Paste JSON' and see how the the fields “consumer_key”: "key, “shared_secret”: “secret” are present.

  1. Save the key, and go back to editing it. See how the fields have been removed.

  1. Try installing the tool at the course/account level, see how the "consumer_key" value is set to "fake" instead of 'key'.

Additional Info

INTEROP-9064

Known issues indicate notable behaviors that have been escalated to the Canvas engineering team. Known issues are not a guarantee for an immediate resolution. This document is for informational purposes only and does not replace the Support process. If you are encountering the behavior outlined in this document, please ensure you have submitted a Support case (per your institution's escalation process) so Canvas Support can adequately gauge the overall customer impact and prioritize appropriately.

Labels (1)