fix(Deep Linking): Fixing Deep Linking JWT. Iat and Exp are now gener…

…ated by library.
Cvmcosta · Jan 27, 2021 · a00b3c2 · a00b3c2
1 parent 6221a94
commit a00b3c2
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 5 deletions.
diff --git a/dist/Provider/Services/DeepLinking.js b/dist/Provider/Services/DeepLinking.js
@@ -103,8 +103,6 @@ class DeepLinking {
     const jwtBody = {
       iss: await platform.platformClientId(),
       aud: idtoken.iss,
-      iat: Date.now() / 1000,
-      exp: Date.now() / 1000 + 60,
       nonce: encodeURIComponent([...Array(25)].map(_ => (Math.random() * 36 | 0).toString(36)).join``),
       'https://purl.imsglobal.org/spec/lti/claim/deployment_id': idtoken.deploymentId,
       'https://purl.imsglobal.org/spec/lti/claim/message_type': 'LtiDeepLinkingResponse',
@@ -140,6 +138,7 @@ class DeepLinking {
     jwtBody['https://purl.imsglobal.org/spec/lti-dl/claim/content_items'] = selectedContentItems;
     const message = jwt.sign(jwtBody, await platform.platformPrivateKey(), {
       algorithm: 'RS256',
+      expiresIn: 60,
       keyid: await platform.platformKid()
     });
     return message;

diff --git a/src/Provider/Services/DeepLinking.js b/src/Provider/Services/DeepLinking.js
@@ -72,8 +72,6 @@ class DeepLinking {
     const jwtBody = {
       iss: await platform.platformClientId(),
       aud: idtoken.iss,
-      iat: Date.now() / 1000,
-      exp: Date.now() / 1000 + 60,
       nonce: encodeURIComponent([...Array(25)].map(_ => (Math.random() * 36 | 0).toString(36)).join``),
       'https://purl.imsglobal.org/spec/lti/claim/deployment_id': idtoken.deploymentId,
       'https://purl.imsglobal.org/spec/lti/claim/message_type': 'LtiDeepLinkingResponse',
@@ -112,7 +110,7 @@ class DeepLinking {
     provDeepLinkingDebug(selectedContentItems)
     jwtBody['https://purl.imsglobal.org/spec/lti-dl/claim/content_items'] = selectedContentItems
 
-    const message = jwt.sign(jwtBody, await platform.platformPrivateKey(), { algorithm: 'RS256', keyid: await platform.platformKid() })
+    const message = jwt.sign(jwtBody, await platform.platformPrivateKey(), { algorithm: 'RS256', expiresIn: 60, keyid: await platform.platformKid() })
     return message
   }
 }