Introduction

To secure message interactions between the LMS and JuezLTI OAuth protocol is used. OAuth signing requires a key and shared secret to sign messages. The key is transmitted with each message, as well as an OAuth-generated signature based on the key. JuezLTI looks up the secret based on the provided key and re-computes the signature and compares the recomputed signature with the transmitted signature to verify the sender's credentials.

The steps involved to get the credentials are shown int the following image: Getting Credentials