LTI 1.3 Deep Linking Integration with UbiCast – 404 Error Despite Correct Session/Cookie Setup

Site Operators Site Operations Help
, , , ,
1

Hello community,

We’re working on integrating UbiCast using LTI 1.3 Deep Linking into our Open edX platform, but the key deep linking workflow is not working.

The request to the deep linking launch URL (/lti/adv/launch/) always returns a 404 Not Found error. After checking the HAR file, it looks like the session and CSRF cookies may not be included in the request, possibly because the tool is launched inside an iframe.

According to the UbiCast team, the same integration works as expected in other platforms. so they suspect this could be a session or CSRF-related issue specific to Open edX.

we’ve already verified that the cookie/session settings are correctly configured:

  • SESSION_COOKIE_SAMESITE = "None"
  • SESSION_COOKIE_SECURE = True
  • CSRF_COOKIE_SAMESITE = "None"
  • CSRF_COOKIE_SECURE = True

We can also see the cookies being properly set in the browser’s DevTools.

If anyone has experience with LTI 1.3 Deep Linking in Open edX or has run into similar iframe-related session issues, we’d really appreciate your guidance.

2

Hi @mafermazu - would you be able to help with this?

@Ronak_Pansuriya1 I’ve recategorized your post to Site Operators, please ensure to pick a proper category when you post so the right eyes get on it.