* Write score linking ADR

* Formatting fixes

* Nit

* Addressing review comments

* Final implementation

* Nit

* Updating ADR given discussions

* BD-24 Implement LTI AGS Score Publish Service and Results Service

* Address PR comments and add more validation

* Address PR comments

* Add tests; Fix error with scoreMaximum; Fix quality issues; Adjust user_id results url slightly

* Add permissions tests and address other PR comments

* Fix quality test

* Address PR comments

* Add ADR for LTI 1.3 variable definition

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* Update docs/decisions/0002-lti-1p3-variables.rst

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

* nit

* Remove student role from instructor/staff launches

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

As stated by @giovannicimolin:

  Due to a recent change in `Chrome`_ and `Firefox`_
  and the way they handle cookies, it’s not possible
  to access cookies marked as ``SameSite=None`` if
  they are not also Secure.

  This is to help avoid a few CSRF attacks.

  Secure cookies are only available when the request
  is done through `HTTPS`_, which is not the case on
  the devstack.

The workaround for this behaviour is to set
``DCS_SESSION_COOKIE_SAMESITE`` from ``'Lax'``
to ``None`` in the studio container's ``devstack.py``,
when using tools such as ``ngrok``.

This commit adds a note about this to the ``README.rst``
of the repository.

.. _Chrome:: https://twitter.com/ChromiumDev/status/1293236234932846596
.. _Firefox:: https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/
.. See ``Secure`` Attribute as a reference
.. _HTTPS:: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie

* Add initial version of LineItem Implementation

Signed-off-by: Giovanni Cimolin da Silva <giovannicimolin@gmail.com>

* Adding tests

* Add LTI tests and fix quality isses

* Quality nit

* Add missing requirement, upgrade

* Squash migrations

* Fix merge conflicts

* Addressing review comments

* Add django url testing support

* Add tests to django views, implement compat layer

* Addressing review comments

* Improve tests and test descriptions

* Nit

* Implement extensions and view support for LTI

* Add missing iss to token

* Add missing requirement, upgrade requirements

* Improving comment

* Add missing exception statement

* Update lti_consumer/lti_1p3/tests/extensions/rest_framework/test_authentication.py

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

Co-authored-by: Ned Batchelder <ned@nedbatchelder.com>

Fix the installation

Co-authored-by: Sankar Raj <sankar.raj@crystaldelta.com>

The setup.py references requirements/base.in, so it needs to be included
in the distribution by naming it in MANIFEST.in

This code isn't used?

[BD-24] Improve CI workflow

Fix the reported quality violations

Correct the license copies

Clean up a few things

[BD-24] [TNL-7318] BB-2355: Move LTI configuration to models.

This change moves the LTI configuration retrieval to
a Django model that will LTI configuration.
The current model proxies back the to blocks to keep
backwards compatibility.

See reasoning for change at:
https://github.com/edx/xblock-lti-consumer/blob/master/docs/decisions/0001-lti-extensions-plugin.rst

Send modal to parent window.

Because the courseware microfrontend loads units inside iframes,
the LTI modal ends up being squished and generally ugly.
This PR introduces a new message sent to the parent window to request
a modal containing the contents of the LTI launch iframe.

https://openedx.atlassian.net/browse/TNL-7410

[BD-24] [TNL-7318]: BB-2355 - Add decoding and scope verification methods

Convert is_past_due to a method

This is just to keep it in line with other xblocks that define
an is_past_due attribute. Nicer if they all have the same access
pattern.