contentitem_return.php

<?php
// This file is part of Moodle - http://moodle.org/
//
// Moodle is free software: you can redistribute it and/or modify
// it under the terms of the GNU General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.
//
// Moodle is distributed in the hope that it will be useful,
// but WITHOUT ANY WARRANTY; without even the implied warranty of
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
// GNU General Public License for more details.
//
// You should have received a copy of the GNU General Public License
// along with Moodle.  If not, see <http://www.gnu.org/licenses/>.

/**
 * This script handles the content item return process.
 *
 * It processes LTI content item returns, validates the response, and either
 * triggers an error callback or dispatches the content items to the parent window.
 *
 * @package    tiny_panoptoltibutton
 * @copyright  2025 Panopto
 * @author     Panopto
 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
 */

// phpcs:ignore moodle.Files.RequireLogin.Missing -- Login is enforced via tiny_panoptoltibutton_require_login_or_repost() below.
require_once(dirname(__FILE__) . '/../../../../../config.php');
require_once(dirname(__FILE__) . '/locallib.php');
require_once($CFG->dirroot . '/blocks/panopto/lib/panopto_data.php');
require_once($CFG->dirroot . '/blocks/panopto/lib/lti/panoptoblock_lti_utility.php');
require_once($CFG->dirroot . '/mod/lti/lib.php');
require_once($CFG->dirroot . '/mod/lti/locallib.php');

$courseid = required_param('course', PARAM_INT);
$id = required_param('id', PARAM_INT);
$callback = required_param('callback', PARAM_ALPHANUMEXT);
$jwt = optional_param('JWT', '', PARAM_RAW);

tiny_panoptoltibutton_require_login_or_repost($courseid);

$context = context_course::instance($courseid);

$config = lti_get_type_type_config($id);
$islti1p3 = $config->lti_ltiversion === LTI_VERSION_1P3;

if (!empty($jwt)) {
    $params = lti_convert_from_jwt($id, $jwt);
    $consumerkey = $params['oauth_consumer_key'] ?? '';
    $messagetype = $params['lti_message_type'] ?? '';
    $items = $params['content_items'] ?? '';
    $version = $params['lti_version'] ?? '';
    $errormsg = $params['lti_errormsg'] ?? '';
    $msg = $params['lti_msg'] ?? '';
} else {
    $consumerkey = required_param('oauth_consumer_key', PARAM_RAW);
    $messagetype = required_param('lti_message_type', PARAM_TEXT);
    $version = required_param('lti_version', PARAM_TEXT);
    $items = optional_param('content_items', '', PARAM_RAW_TRIMMED);
    $errormsg = optional_param('lti_errormsg', '', PARAM_TEXT);
    $msg = optional_param('lti_msg', '', PARAM_TEXT);
}

$contentitems = json_decode($items);

$errors = [];

if (!is_object($contentitems) && !is_array($contentitems)) {
    $errors[] = 'invalidjson';
}

if ($islti1p3) {
    $doctarget = $contentitems->{'@graph'}[0]->placementAdvice->presentationDocumentTarget
                    ? $contentitems->{'@graph'}[0]->placementAdvice->presentationDocumentTarget
                    : ($contentitems->{'@graph'}[0]->iframe ? "iframe" : "frame");
    $thumbnail = $contentitems->{'@graph'}[0]->thumbnail;
    if ($doctarget == 'iframe' && !empty($thumbnail)) {
        $contentitems->{'@graph'}[0]->placementAdvice->presentationDocumentTarget = 'frame';
        $contentitems->{'@graph'}[0]->placementAdvice->windowTarget = '_blank';
        $contentitems->{'@graph'}[0]->{'@type'} = 'ContentItem';
        $contentitems->{'@graph'}[0]->mediaType = 'text/html';
    }
}

// Provision the course for LTI.
\panopto_data::provision_course_for_lti($courseid);
?>

<script type="text/javascript">
    <?php
    /**
     * Check for errors and handle accordingly.
     *
     * @package    tiny_panoptoltibutton
     * @copyright  2025 Panopto
     * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
     */
    if (count($errors) > 0) : ?>
        /**
         * Trigger the handleError callback with the errors.
         *
         * @package    tiny_panoptoltibutton
         * @copyright  2025 Panopto
         * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
         */
        parent.document.CALLBACKS.handleError(<?php echo json_encode($errors); ?>);
        <?php
        /**
         * Handle successful content item return.
         *
         * @package    tiny_panoptoltibutton
         * @copyright  2025 Panopto
         * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
         */
    else : ?>
        /**
         * Trigger the handleContent callback with the content items.
         *
         * @package    tiny_panoptoltibutton
         * @copyright  2025 Panopto
         * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
         */
        parent.document.CALLBACKS.
                <?php
                /**
                 * Trigger the handleContent callback with the content items.
                 *
                 * @package    tiny_panoptoltibutton
                 * @copyright  2025 Panopto
                 * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
                 */
                echo $callback ?>(
                    <?php
                    /**
                     * Trigger the handleContent callback with the content items.
                     *
                     * @package    tiny_panoptoltibutton
                     * @copyright  2025 Panopto
                     * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
                     */
                    echo json_encode($contentitems) ?>);
        <?php
        /**
         * End of if-else statement.
         *
         * @package    tiny_panoptoltibutton
         * @copyright  2025 Panopto
         * @license    http://www.gnu.org/copyleft/gpl.html GNU GPL v3 or later
         */
    endif; ?>
</script>