Since October, 2023, GoReact has posted a banner in-app (see message below) that has requested users contact their LMS administrator to perform necessary security updates for LTI 1.1 prior to August, 2024. These updates are necessary to continue using GoReact securely.
Requested security updates for your GoReact 1.1 tool
The necessary updates you will need to make for your GoReact 1.1 tool may include:
- Making sure GoReact is installed at the organization/site level.
- Using the proper launch URL: https://lti.goreact.com/lti/v1 (or, .eu for our friends in the EU).
- Using the proper unique key/secret.
You can edit your existing tool to make sure that you are using the updated launch URL, and unique key/secret. If you're unsure of what your key/secret is, please reach out to our support team for assistance here: Support
Please refer to the error message that the instructor of the course provided you. It will look something like this:
The above error message will tell you which issue the instructor is experiencing. Below, we list out the error messages, what they mean, and how to resolve them.
- wrongDomain - This means that the GoReact tool URL is pointing toward our deprecated URL. You'll need to edit the tool, and make sure it's pointing toward our updated URL https://lti.goreact.com/lti/v1. For Canvas users, you may need to also go into the assignment, and make sure that the GoReact tool URL is updated there too.
- insecureKey - This means the LTI launch contains an insecure, and outdated Key. You'll need to update your GoReact tool installation to reflect the proper Key. If you're unsure of what your key/secret is, please reach out to our support team for assistance here: Support
- insecureSecret - This means the LTI launch contains an insecure, and outdated Secret. You'll need to update your GoReact tool installation to reflect the proper Secret. If you're unsure of what your key/secret is, please reach out to our support team for assistance here: Support