--- loncom/interface/lonexttool.pm	2025/06/14 18:51:58	1.22.2.7
+++ loncom/interface/lonexttool.pm	2022/03/29 20:12:46	1.23
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Launch External Tool Provider (LTI)
 #
-# $Id: lonexttool.pm,v 1.22.2.7 2025/06/14 18:51:58 raeburn Exp $
+# $Id: lonexttool.pm,v 1.23 2022/03/29 20:12:46 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -96,20 +96,13 @@ sub handler {
     my $cdom = $env{'course.'.$env{'request.course.id'}.'.domain'};
     my $cnum = $env{'course.'.$env{'request.course.id'}.'.num'};
     my $chome = $env{'course.'.$env{'request.course.id'}.'.home'};
-    my ($idx,$crstool,$is_tool,%toolhash,%toolsettings,$desturl,$delay);
+    my ($idx,$is_tool,%toolhash,%toolsettings);
 
     if ($r->uri eq "/adm/$cdom/$cnum/$marker/$exttool") {
         %toolsettings=&Apache::lonnet::dump('exttool_'.$marker,$cdom,$cnum);
         if ($toolsettings{'id'}) {
-            my %ltitools;
-            if ($toolsettings{'id'} =~ /^c(\d+)$/) {
-                $idx = $1;
-                $crstool = 1;
-                %ltitools = &Apache::lonnet::get_course_lti($cnum,$cdom,'consumer');
-            } else {
-                $idx = $toolsettings{'id'};
-                %ltitools = &Apache::lonnet::get_domain_lti($cdom,'consumer');
-            }
+            $idx = $toolsettings{'id'};
+            my %ltitools = &Apache::lonnet::get_domain_lti($cdom,'consumer');
             if (ref($ltitools{$idx}) eq 'HASH') {
                 %toolhash = %{$ltitools{$idx}};
                 $toolhash{'display'} = {
@@ -120,41 +113,6 @@ sub handler {
                 foreach my $item (qw(crslabel crstitle crsappend gradable)) {
                     $toolhash{$item} = $toolsettings{$item};
                 }
-                if ($toolhash{'returnurl'}) {
-                    my $gotreturnurl;
-                    if (ref($toolhash{'crsconf'}) eq 'HASH') {
-                        if ($toolhash{'crsconf'}{'returnurl'}) {
-                            foreach my $item (qw(returnurl backtourl)) {
-                                $toolhash{$item} = $toolsettings{$item};
-                            }
-                            $gotreturnurl = 1;
-                        }
-                    }
-                    unless ($gotreturnurl) {
-                        $toolhash{'returnurl'} = 'default';     
-                    }
-                } else {
-                    $toolhash{'returnurl'} = 'none';
-                }
-                if ($toolhash{'desturl'}) {
-                    if ((ref($toolhash{'crsconf'}) eq 'HASH')) {
-                        if ($toolhash{'crsconf'}{'desturl'}) {
-                            if ((exists($toolsettings{'desturl'})) &&
-                                ($toolsettings{'desturl'} =~ m{^(https?\://|/)})) {
-                                $desturl = $toolsettings{'desturl'};
-                                if ((exists($toolsettings{'delay'})) &&
-                                    ($toolsettings{'delay'} =~ /^\d+\.?\d*$/)) {
-                                    $delay = $toolsettings{'delay'};
-                                }
-                            }
-                        } elsif ($toolhash{'defdest'} =~ m{^(https?\://|/)}) {
-                            $desturl = $toolhash{'defdest'};
-                            if ($toolhash{'defdelay'} =~ /^\d+\.?\d*$/) {
-                                $delay = $toolhash{'defdelay'};
-                            }
-                        }
-                    }
-                }
                 $is_tool = 1;
             }
         }
@@ -246,49 +204,27 @@ sub handler {
             }
         }
         my $submittext = &mt('Launch [_1]',$toolhash{'title'});
-        if (($toolhash{'url'} ne '') && ($launchok)) {
-            my %lti = &lti_params($r,$cnum,$cdom,$marker,$exttool,$idx,$submittext,\%toolhash);
+        if (($toolhash{'key'} ne '') && ($toolhash{'secret'} ne '') && 
+            ($toolhash{'url'} ne '') && ($launchok)) {
+            my %lti = &lti_params($r,$cnum,$cdom,$idx,$submittext,\%toolhash);
             my $url = $toolhash{'url'};
             if ($toolhash{'crsappend'} ne '') {
                 $url .= $toolhash{'crsappend'};
             }
-            if ($desturl ne '') {
-                my ($scheme,$provider,$path);
-                if ($url =~ m{^https?\://}) {
-                    ($scheme,$provider,$path) = ($url =~ m{^(https?\://)([^/]+)(|/.+)$});
-                    if ($desturl =~ m{^/}) {
-                        if ($path eq $desturl) {
-                            undef($desturl);
-                        } else {
-                            $desturl = $scheme.$provider.$desturl;
-                        }
-                    } elsif ($desturl =~ m{^https?\://}) {
-                        if ($url eq $desturl) {
-                            undef($desturl);
-                        }
-                    }
-                } elsif ($url eq $desturl) {
-                    undef($desturl);
-                }
-            }
-            my %info = (
-                         method => $toolhash{'sigmethod'},
-                       );
-            $r->print(&launch_html($cdom,$cnum,$crstool,$url,$idx,
-                                   $toolhash{'cipher'},$submittext,
-                                   \%lti,\%info,$desturl,$delay));
+            $r->print(&launch_html($url,$toolhash{'key'},$toolhash{'secret'},
+                                   $toolhash{'sigmethod'},$submittext,\%lti));
         } else {
-            $r->print('<div class="LC_warning">'.&mt('External Tool Unavailable').'</div>');
+            $r->print('<div>'.&mt('External Tool Unavailable').'</div>');
         }
     }
     return OK;
 }
 
 sub lti_params {
-    my ($r,$cnum,$cdom,$marker,$exttool,$idx,$submittext,$toolsref) = @_;
+    my ($r,$cnum,$cdom,$idx,$submittext,$toolsref) = @_;
     my ($version,$context_type,$msgtype,$toolname,$passback,$roster,$locale,
         $crslabel,$crstitle,$gradesecret,$rostersecret,%fields,%rolesmap,
-        %display,%custom,@userlangs,$incdom,$returnurl,$backtourl);
+        %display,%custom,@userlangs,$incdom);
     if (ref($toolsref) eq 'HASH') {
         $version = $toolsref->{'version'};
         $toolname = $toolsref->{'title'};
@@ -312,8 +248,6 @@ sub lti_params {
         }
         $crslabel = $toolsref->{'crslabel'};
         $crstitle = $toolsref->{'crstitle'};
-        $returnurl = $toolsref->{'returnurl'};
-        $backtourl = $toolsref->{'backtourl'};
     }
     if ($version eq '') {
         $version = 'LTI-1p0';
@@ -361,14 +295,11 @@ sub lti_params {
     if (scalar(@userlangs) == 1) {
         $locale = $userlangs[0];
     }
-    my ($title,$digest_symb,$resource_link_id);
-    my $ignorecachednull = 1;
-    my ($symb) = &Apache::lonnet::whichuser('',$ignorecachednull);
-    my $uri = "/adm/$cdom/$cnum/$marker/$exttool";
+    my ($title,$digest_symb);
+    my ($symb) = &Apache::lonnet::whichuser();
     if ($symb) {
         $digest_symb = &Encode::decode('UTF-8',$symb);
         $digest_symb = &Digest::SHA::sha1_hex($digest_symb);
-        $resource_link_id = $digest_symb;
         push(@possdigest,$digest_symb);
         my $navmap = Apache::lonnavmaps::navmap->new();
         if (ref($navmap)) {
@@ -377,16 +308,6 @@ sub lti_params {
                 $title = $res->compTitle();
             }
         }
-    } elsif ($env{'httpref.'.$uri} eq '/adm/coursedoc') {
-        my $digest_suppurl = &Encode::decode('UTF-8',$uri);
-        $digest_suppurl = &Digest::SHA::sha1_hex($digest_suppurl);
-        $resource_link_id = $digest_suppurl;
-        $title = &mt('Supplemental Content').': '.$marker.'_'.$exttool;
-    } else {
-        my $digest_url = &Encode::decode('UTF-8',$uri);
-        $digest_url = &Digest::SHA::sha1_hex($digest_url);
-        $resource_link_id = $digest_url;
-        $title = &mt('External Tool').': '.$marker.'_'.$exttool;
     }
     my $domdesc = &Apache::lonnet::domain($cdom);
     my $primary_id = &Apache::lonnet::domain($cdom,'primary');
@@ -397,7 +318,7 @@ sub lti_params {
         lti_version                            => $version,
         lti_message_type                       => $msgtype,
         resource_link_title                    => $title,
-        resource_link_id                       => $resource_link_id,
+        resource_link_id                       => $digest_symb,
         tool_consumer_instance_guid            => $lonhost,
         tool_consumer_instance_description     => $domdesc,
         tool_consumer_info_product_family_code => 'loncapa',
@@ -509,142 +430,32 @@ sub lti_params {
         $ltiparams{$key} = &Encode::decode('UTF-8',$ltiparams{$key});
     }
     $ltiparams{'basiclti_submit'} = $submittext;
-    if ($returnurl eq 'default') {
-        my $hostname = &Apache::lonnet::hostname($r->dir_config('lonHostID'));
-        my $protocol = 'http';
-        my $port = $r->get_server_port();
-        if ($port eq '443') {
-            $protocol = 'https';
-        }
-        if (&Apache::lonnet::get_proxy_alias()) {
-            my $hdrhost = $r->headers_in->get('Host');
-            if ($hdrhost ne '') {
-                $hostname = $r->headers_in->get('Host');
-            }
-        }
-        my $location = $protocol.'://'.$hostname;
-        if ($display{'target'} eq 'iframe') {
-            my $return_url;
-            if ($symb) {
-                my ($map,$id,$url)=&Apache::lonnet::decode_symb($symb);
-                my $mapurl = &Apache::lonnet::clutter($map);
-                my $mapsymb = &Apache::lonnet::symbread($map);
-                if ((&Apache::lonnet::EXT('resource.0.encrypturl',$mapsymb) =~ /^yes$/i) &&
-                    (!$env{'request.role.adv'})) { 
-                    $return_url = &Apache::lonenc::encrypted($mapurl);
-                } else {
-                    $return_url = $mapurl;
-                }
-                $return_url .= '?navmap=1';
-            } elsif ($env{'httpref.'.$uri} eq '/adm/coursedoc') {
-                $return_url = '/adm/supplemental';        
-            } else {
-                $return_url = '/adm/navmaps';
-            }
-            $ltiparams{'launch_presentation_return_url'} = $location.$return_url;
-        } else {
-            $uri = '/adm/wrapper'.$uri;
-            if ($env{'request.enc'}) {
-                $uri = &Apache::lonenc::encrypted($uri);
-            }
-            $ltiparams{'launch_presentation_return_url'} = $location.$uri;
-        }
-    } elsif ($returnurl eq 'custom') {
-        if ($backtourl ne '') {
-            $ltiparams{'launch_presentation_return_url'} = $backtourl;
-        }
-    }
     return %ltiparams;
 }
 
 sub launch_html {
-    my ($cdom,$cnum,$crstool,$url,$idx,$keynum,$submittext,$paramsref,
-        $inforef,$desturl,$delay) = @_;
-    my ($status,$hashref) =
-        &Apache::lonnet::sign_lti($cdom,$cnum,$crstool,'tools','launch',$url,$idx,$keynum,
-                                  $paramsref,$inforef);
-    unless ($status eq 'ok') {
-        return '<div class="LC_warning">'.&mt('External Tool Unavailable').'</div>';
-    }
-    my ($action,$js_html,$header,$title,$bodytag,$form,$divsty,$delay_in_ms);
-    if ($delay ne '') {
-        $delay_in_ms = int(1000 * $delay);
-    }
-    $action = &HTML::Entities::encode($url,'<>&"');
-    $title = &mt('Launcher');
-    $header = <<"END";
+    my ($url,$key,$secret,$sigmethod,$submittext,$paramsref) = @_;
+    my $hashref = &LONCAPA::ltiutils::sign_params($url,$key,$secret,$paramsref,$sigmethod);
+    my $action = &HTML::Entities::encode($url,'<>&"');
+    my $form = <<"END";
 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
 <html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
-END
-    if ($desturl) {
-        $divsty = 'none';
-        if ($delay_in_ms eq '') {
-            $delay_in_ms = 1000;
-        }
-        $bodytag = <<"END";
-<body onload="setTimeout(document.LCltiLaunchForm.submit(),$delay_in_ms);">
-END
-    } else {
-        $divsty = 'block';
-        $bodytag = <<"END";
 <body>
-END
-    }
-    $form = <<"END";
-<div id="LCltiLaunch" style="display:$divsty;">
+<div id="LCltiLaunch">
 <form name="LCltiLaunchForm" id="LCltiLaunchFormId" action="$action" method="post" encType="application/x-www-form-urlencoded">
 END
     if (ref($hashref) eq 'HASH') {
         foreach my $item (keys(%{$hashref})) {
             my $type = 'hidden';
             if ($item eq 'basiclti_submit') {
-                unless ($desturl) {
-                    $type = 'submit';
-                }
+                $type = 'submit';
             }
             $form .= '<input type="'.$type.'" name="'.$item.'" value="'.$hashref->{$item}.'" id="id_'.$item.'" />'."\n";
         }
     }
     $form .= "</form></div>\n";
-    my $footer = <<"END";
-</body>
-</html>
-END
-    if ($desturl) {
-        $js_html = $header.$bodytag.$form.$footer;
-        &js_escape(\$js_html);
-        &js_escape(\$desturl);
-        return <<"END";
-$header
-<head>
-<title>$title</title>
-<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
-<meta name="google" content="notranslate" />
-</head>
-<body onload="javascript:addcontent();">
-<iframe id="LC_launcher_iframe" style="position: absolute; width:0; height:0; border:0;">
-</iframe>
-<script type="text/javascript">
-// <![CDATA[
-function addcontent() {
-    if (document.getElementById('LC_launcher_iframe')) {
-        document.getElementById('LC_launcher_iframe').src = "data:text/html;charset=utf-8," + escape("$js_html");
-    }
-    setTimeout(() => {
-        document.location.href="$desturl";
-    }, $delay_in_ms);
-}
-// ]]>
-</script>
-$footer
-END
-    } else {
-        return <<"END";
-$header
-$bodytag
-$form
+    $form .= <<"ENDJS";
 <script type="text/javascript">
-// <![CDATA[
     document.getElementById("LCltiLaunch").style.display = "none";
     nei = document.createElement('input');
     nei.setAttribute('type','hidden');
@@ -652,11 +463,10 @@ $form
     nei.setAttribute('value','$submittext');
     document.getElementById("LCltiLaunchFormId").appendChild(nei);
     document.LCltiLaunchForm.submit();
-// ]]>
-</script>
-$footer
-END
-    }
+ </script>
+ENDJS
+    $form .= "</body></html>\n";
+    return $form;
 }
 
 sub gradabletool_access_check {