SPIKE: Start fetching course rosters using LTIA API

[marcospri]

A number of features would require or could be improved with up to dates rosters for the course.

Tasks

Course rosters

• PoC PoC: Fetch course rosters #6598
• Make LTI http service take an LTIRegistration #6596
• Take both a list of strings and comma separated string in get_roles #6600
• Move HUser h_username and h_userid generation to helper functions #6599
• Migration for LMSCourse.lti_context_memberships #6601
• Add lti_context_membership_url to the LMSCourse model #6602
• Store LTI1.3 context_memberships_url in LMSCourse when available #6606
• Single course roster fetch #6605
• Migration to create CourseRoster #6607
• Model for CourseRoster #6608
• Store course rosters in the DB #6609
• Add comments to the CourseRoster model
• Celery task to fetch course roster asynchronously #6610
• Celery task to schedule fetching rosters #6611

Assignment rosters

• Migration for assignment.lti_v13_resource_link_id #6614
• Model changes for assignment.lti_v13_resource_link_id #6615
• Store LTI1.3 assignment ID explicitly in the DB #6616
• Take and forward an optional assignment id in the LTI Name and Roles API #6617
• Migration for AssignmentRoster #6635
• Model changes for AssignmentRoster #6636
• Fetch assignment rosters #6637
• Clarify Name and roles parameter

Start fetching rosters:

• Schedule fetching roster h-periodic#485
• Schedule roster fetching hourly h-periodic#486
• More frequent roster fetching h-periodic#488

Issues found while fetching rosters

• Handle: "Requested ResourceLink bound to unexpected external tool" while fetching assignment rosters #6653
• Avoid re-fetching rosters that have failed recently #6676

Per LMS settings

I've tested this in the following LMS:

Canvas

This setting needs to be enabled, not sure if we mention these in our install instructions or what default are being used here.

Fetching rosters works as expected when that setting is enabled.

D2L

Names and roles needs to be checked.

Our install instructions already ask to get it checked:

https://web.hypothes.is/help/installing-hypothesis-in-d2l-lti-1-3-worldwide/

Fetching rosters works as expected when that setting is enabled.

Blackboard

Membership Service needs to be yes:

Our install instructions already ask for it:

https://web.hypothes.is/help/installing-hypothesis-in-blackboard-lti-1-3-worldwide/

Fetching rosters works as expected when that setting is enabled.

Moodle

Name and roles needs to be allowed

Our install instructors don't ask for it:

https://web.hypothes.is/help/installing-hypothesis-in-moodle-lti-1-3-worldwide/

---

• The code to talk to this service is already in place.

Instead of commiting to fetch the rosters for all courses we can:

• Create new course_roster table. We'll use this instead of GroupMembership/User to avoid skewing data reading from those tables.

• Add a button in the admin pages to fetch roster for that particular course

• Fetch the course membership via LTIA API.

If this proves to be successful next steps are:

• Update KB articles so we explicitly mention enabling this for all LTI1.3 installs in LMS that do require a setting.

• Start fetching rosters for courses in a cadence that makes sense for the first f

eature to use it (Grading improvements, dashboards...).