do not allow LTI access to admin course

openwebwork · Jan 20, 2024 · 518db6e · 518db6e
1 parent 2ed01cf
commit 518db6e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/WeBWorK/Authen.pm b/lib/WeBWorK/Authen.pm
@@ -189,6 +189,11 @@ sub verify {
 		return ($self->call_next_authen_method());
 	}
 
+	if ($c->ce->{courseName} eq 'admin' && ref($c->authen) =~ /LTI/) {
+		$c->stash(authen_error => maketext('Cannot authenticate into admin course using LTI authentication.'));
+		return ($self->call_next_authen_method());
+	}
+
 	my $result    = $self->do_verify;
 	my $error     = $self->{error};
 	my $log_error = $self->{log_error};