I need to retrieve a student calendar using the REST API, the results are being consumed by a third party app through our own API. I was able to emulate the user using a browser (3lo), but it requires user interaction to login to blackboard at least once. Its there any way to ask the calendar items of a student or impersonate it without prompting the students for credential?
My app knows who the user is without them logging in. But I used Two Legged OAuth, and only works with the appid:secret pair, if I try with user credentials I get :
Request :
POST /learn/api/public/v1/oauth2/token
basic authorization header
Form-urlencoded grant_type:client_credentials
Response:
{
"error": "invalid_client",
"error_description": "Invalid credentials"
}
Oh, sorry, I see now. I hadn't looked at the endpoints, just assumed an admin would be able to retrieve a particular user's calendars, but you just get the calendars for the calling user.
There's no masquerading, so I think you are stuck with 3LO.
Help
Privacy
Behind the Blackboard
Blackboard.com
It might depend on your application flow. Does your application know who the user is without relying on them logging into Learn? If so, can you use Two Legged OAuth (Basic Authentication )?