This is a starter template for projects that want to…

1. Authenticate users' identities
2. Access the Canvas APIs (either to provide information to the users or as the users)
3. Embed the presentation layer of the project back into Canvas

This came about as a result of Hack Night at InstructureCon 2015, when it became clear to me that desire to both authenticate users and access the API using OAuth-provided tokens was more than could be done through simple OAuth authentication. (Well, it can be done, but it generates two OAuth tokens in the user's account and causes them to think that they are being logged in twice: once to authenticate their identity (which can be persistent -- "check to remember this login") and once to generate an API key. This seemed confusing, at best.)

1. Start by forking this repository.
2. Load your fork on to your favorite LAMP server (ideally including SSL-authentication -- Canvas plays nicer that way, and it's just plain more secure).
3. Be sure to run composer install (Composer rocks) -- this has a few dependencies defined in composer.json.
4. Point your browser at https://<install-url>/admin/ and you will run the install script. You will need to have your MySQL credentials handy, as well as your Canvas developer credentials. Answer whatever questions it asks. This will generate a secrets.xml file for you (if you don't want to make one yourself, based on secrets-example.xml) and it will password-protect the admin directory.

• When you return to https://<install-url>/admin/ thereafter, you will be redirected to consumers.php which provides some rudimentary LTI Consumer management for the tool.
• metadata-example.xml lists some of the basic $metadata keys, along with some default values and the validation regexes (which the AppMetadata object may start actually using eventually). A lot of other possible keys are evident in config.xml.

4. Modify the CanvasAPIviaLTI class as needed -- most of your app logic can just go into app.php, which is loaded after a user has been authenticated (via launch.php).
5. Including common.inc.php will provide access to several handy global variables (as well as populating the $_SESSION variable with relevant information):
6. SimpleXMLElement $secrets, the secrets.xml file.
7. mysqli $sql, a database connection to your MySQL server.
8. AppMetadata $metadata, an associative array bound to the app_metadata table in your database.
9. When it comes time for users to install the api, they can do it 'By Url' using https://<install-url>/config.xml and a key and secret from https://<install-url>/admin/consumers.php.
   • Nota bene: the root .htaccess file does some jiggery-pokery to protect *.inc.php and secrets.xml and it forces config.xml to be treated by Apache as a PHP file.

I'm working hard to try to leave the master fork of this repository in vaguely working order (that is: it should "just work" if you use it). But I am continuing to actively tweak and update this template based on my own usage of it in other projects in the develop fork, for those not risk-averse or just simply curious.

Since GitHub doesn't allow one to fork one's own repositories into new projects in the same account, it may be interesting to list a few of my projects that draw on (or have been updated by) this starter project:

• Canvas ⇄ ICS Sync 2.0 pulled this project in to convert an administrative script into a working LTI and LAMP-based service that allows users to sync calendar ICS feeds into Canvas (and do other interesting calendar managment, including exporting ICS feeds of individual courses).
• Grading Analytics 2.0 pulled this project in to convert an administrative script into a working LTI and LAMP-based service that collects and presents data about how teachers make use of Canvas within their courses. This has been the topic of several InstructureCon presentations (2014, 2015).
• CanvasHack is a direct "fork" of this project that will allow a number of my CSS/Javascript/API combo hacks to be more modularly managed and installed. It's very much a gleam in my eye right now, rather than an actual thing.