From e5d0ce2fbef6deeb1db7e88a99789ef86a250846 Mon Sep 17 00:00:00 2001 From: Hauke Klement Date: Thu, 22 Jan 2015 10:01:50 +0100 Subject: [PATCH] reactivated OAuth nonce uniqueness check --- app/controllers/sessions_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb index 0bfebe99..6f46ee06 100644 --- a/app/controllers/sessions_controller.rb +++ b/app/controllers/sessions_controller.rb @@ -1,7 +1,7 @@ class SessionsController < ApplicationController include Lti - [:require_oauth_parameters, :require_valid_consumer_key, :require_valid_oauth_signature, :require_valid_exercise_token].each do |method_name| + [:require_oauth_parameters, :require_valid_consumer_key, :require_valid_oauth_signature, :require_unique_oauth_nonce, :require_valid_exercise_token].each do |method_name| before_action(method_name, only: :create_through_lti) end