The LtiOauthVerifier always creates a new SimpleOAuthValidator for each and every call of the verify method. So usedNonces is always empty and the check will never fail. Also if LtiOauthVerifier itself is a singleton.
I think this is a bug. Or did I miss something here?
The LtiOauthVerifier always creates a new SimpleOAuthValidator for each and every call of the verify method. So usedNonces is always empty and the check will never fail. Also if LtiOauthVerifier itself is a singleton.
I think this is a bug. Or did I miss something here?