Z2JH with LTIAuthenticator 1.3 (road to Sakai Integration)

JupyterHub Zero to JupyterHub on Kubernetes
1

Hi.

I have deployed GKE cluster with Z2JH Helm Chart 3.3.7.

I want to integrate Sakai with LTI 1.3 authenticator (Getting Started — LTI Autenticator for JupyterHub documentation), which I suppose it’s deployed with Z2JH Helm Chart.

I’m struggling with LTI integration config. Can someone bring me a hand?

My config.yaml is:

hub:
  config:
    JupyterHub:
      authenticator_class: "ltiauthenticator.lti13.auth.LTI13Authenticator"
    LTI13Authenticator:
      issuer: "https://sakai.domain.org/site/site1"
      authorize_url: "https://sakai.domain.org/imsoidc/lti13/oidc_auth" 
      client_id:
        - "xxxx"
      jwks_endpoint: "https://sakai.domain.org/imsblis/lti13/token/xxxx"
      uri_scheme: "https"

When I push ‘Sign in with LTI 1.3’ button on JH site, I receive:

400 : Bad Request
Required LTI 1.3 arg iss not in request

Logs in hub pod are:

[I JupyterHub log:192] 302 GET /hub/ -> /hub/login?next=%2Fhub%2F (@::ffff:10.212.0.1) 2.13ms
[I JupyterHub _xsrf_utils:125] Setting new xsrf cookie for b'None:LiLE-q15YUDXM2_yV4Vr29sAiurPEstCBR-3Vb_mzS0=' {'path': '/hub/', 'max_age': 3600}
[I JupyterHub log:192] 200 GET /hub/login?next=%2Fhub%2F (@::ffff:10.212.0.1) 32.56ms
[W JupyterHub web:1873] 400 GET /hub/lti13/oauth_login?next=%2Fhub%2F (::ffff:10.212.0.1): Required LTI 1.3 arg iss not in request
[W JupyterHub log:192] 400 GET /hub/lti13/oauth_login?next=%2Fhub%2F (@::ffff:10.212.0.1) 25.47ms

iss arg must be passed when I push ‘Sign in with LTI 1.3’ button? what is my misunderstood?

Thanks in advance,
Oliver