A few improvements to dynamic registration:

• Fixed the regular LTI launch message type. This was not causing any issues, as the regular launch is always implied when performing dynamic registration.
• Added ability to modify dynamic registration options when creating a custom handler. Thank you @pfgray for the contribution!

The following example is a representation of the default Dynamic Registration flow with overriden custom parameters:

lti.onDynamicRegistration(async (req, res, next) => {
  try {
    if (!req.query.openid_configuration) return res.status(400).send({ status: 400, error: 'Bad Request', details: { message: 'Missing parameter: "openid_configuration".' } })
    const message = await lti.DynamicRegistration.register(req.query.openid_configuration, req.query.registration_token, {
      'https://purl.imsglobal.org/spec/lti-tool-configuration': {
        custom_parameters: {
          'custom1': 'value1',
          'custom2': 'value2'
        }
      }
    })
    res.setHeader('Content-type', 'text/html')
    res.send(message)
  } catch (err) {
    if (err.message === 'PLATFORM_ALREADY_REGISTERED') return res.status(403).send({ status: 403, error: 'Forbidden', details: { message: 'Platform already registered.' } })
    return res.status(500).send({ status: 500, error: 'Internal Server Error', details: { message: err.message } })
  }
})

Updating dynamic registration code to fix postMessage call.

The new return message is: '<script>(window.opener || window.parent).postMessage({subject:"org.imsglobal.lti.close"}, "*");</script>'

Updating dependencies to fix potencial vulnerabilities.

V5.6.6

2021-01-29

• Added the capability to remove the limit of number of pages returned by the Names and Roles Service.

V5.6.5

2021-01-27

• Fixed bug where Blackboard would not see access token request iat and exp claims.
• Fixed bug where Blackboard would not accept the generated access token due to the "bearer" word not being capitalized.

https://www.npmjs.com/package/ltijs