replaced session_paramerters with server params for security reasons

cleaned up comments
This commit is contained in:
Tom Staubitz
2017-01-12 15:10:34 +01:00
parent 41a61a8507
commit dd4c789fed
8 changed files with 20 additions and 28 deletions

View File

@ -1,10 +1,10 @@
module LtiHelper
def lti_outcome_service?(exercise_id)
#Todo replace session with lti_parameter /done
lti_parameters = LtiParameter.where(consumers_id: session[:consumer_id],
external_user_id: session[:external_user_external_id],
def lti_outcome_service?(exercise_id, external_user_id, consumer_id)
return false if external_user_id == '' || consumer_id == ''
lti_parameters = LtiParameter.where(consumers_id: consumer_id,
external_user_id: external_user_id,
exercises_id: exercise_id).lis_outcome_service_url?
!lti_parameters.nil? && lti_parameters.size > 0
# session[:lti_parameters].try(:has_key?, 'lis_outcome_service_url')
end
end