diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 39be79612f595306a31b686aef02ded4e0911598..258478610176e6aa71b97badd2ebc4203cb64986 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -15,6 +15,13 @@ Please See the [releases tab](https://github.com/edx/xblock-lti-consumer/release Unreleased ~~~~~~~~~~ +5.0.1 - 2022-10-17 +------------------ +* Fixed a bug that prevented LTI 1.3 launches from occurring in the browser due to Django's clickjacking protection. + + * Added the xframe_options_exempt view decorator to launch_gate_endpoint to allow loading response in an <iframe> tags +* Fixed a bug in the URL used for an LTI 1.3 launch; the library now sends LTI 1.3 launches to the redirect_uri provided + by the Tool in the authentication request, instead of the preregistered target_link_uri. 5.0.0 - 2022-10-12 ------------------ @@ -23,9 +30,10 @@ BREAKING CHANGE: Please note that additional breaking changes will be forthcoming in future versions of this library. * Modified Python API methods to take Lti1p3LaunchData as a required argument -** get_lti_1p3_launch_info -** get_lti_1p3_launch_start_url -** get_lti_1p3_content_url + + * get_lti_1p3_launch_info + * get_lti_1p3_launch_start_url + * get_lti_1p3_content_url * Added an Lti1p3LaunchData data class * Added caching for Lti1p3LaunchData to limit data sent in request query or form parameters diff --git a/lti_consumer/__init__.py b/lti_consumer/__init__.py index 0e15340785ea2f0e2a1dbbcd7522144122c86585..45f490566f8c7fedf76ac50f74a2f412e428d747 100644 --- a/lti_consumer/__init__.py +++ b/lti_consumer/__init__.py @@ -4,4 +4,4 @@ Runtime will load the XBlock class from here. from .apps import LTIConsumerApp from .lti_xblock import LtiConsumerXBlock -__version__ = '5.0.0' +__version__ = '5.0.1'