From acb451319ae906351ea92e5d95bf6bf68805f5c2 Mon Sep 17 00:00:00 2001
From: robertosuarez <roberto.suarez@cinfo.es>
Date: Tue, 28 Jul 2026 10:52:00 +0200
Subject: [PATCH 1/4] Plugin: LTI Provider: Fix OIDC state cookie lost in
 iframe by requiring Secure with SameSite=None

---
 plugin/lti_provider/db/lti13_cookie.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugin/lti_provider/db/lti13_cookie.php b/plugin/lti_provider/db/lti13_cookie.php
index 6b5afc70091..6798e70980f 100644
--- a/plugin/lti_provider/db/lti13_cookie.php
+++ b/plugin/lti_provider/db/lti13_cookie.php
@@ -31,7 +31,7 @@ public function setCookie($name, $value, $exp = 3600, $options = []): self
         // SameSite none and secure will be required for tools to work inside iframes
         $sameSiteOptions = [
             'samesite' => 'None',
-            'secure' => false,
+            'secure' => true,
             'httponly' => true,
         ];
 

From b6b9fad477b18b10f51355d08369280c64ff01ee Mon Sep 17 00:00:00 2001
From: robertosuarez <roberto.suarez@cinfo.es>
Date: Tue, 28 Jul 2026 10:56:47 +0200
Subject: [PATCH 2/4] Plugin: LTI Provider: Fix tool type combo not updating
 when selected through the radiobuttons

---
 plugin/lti_provider/src/Form/FrmAdd.php  |  3 ---
 plugin/lti_provider/src/Form/FrmEdit.php |  3 ---
 plugin/lti_provider/view/add.tpl         | 15 +++++++++------
 3 files changed, 9 insertions(+), 12 deletions(-)

diff --git a/plugin/lti_provider/src/Form/FrmAdd.php b/plugin/lti_provider/src/Form/FrmAdd.php
index 8bc095c4072..b61b9110941 100644
--- a/plugin/lti_provider/src/Form/FrmAdd.php
+++ b/plugin/lti_provider/src/Form/FrmAdd.php
@@ -53,9 +53,6 @@ public function build(): void
             [
                 'quiz' => $plugin->get_lang('Quizzes'),
                 'lp' => $plugin->get_lang('Learnpaths'),
-            ],
-            [
-                'onclick' => 'selectToolProvider(this.value)',
             ]
         );
 
diff --git a/plugin/lti_provider/src/Form/FrmEdit.php b/plugin/lti_provider/src/Form/FrmEdit.php
index 57a583ea1b2..f458098adb6 100644
--- a/plugin/lti_provider/src/Form/FrmEdit.php
+++ b/plugin/lti_provider/src/Form/FrmEdit.php
@@ -53,9 +53,6 @@ public function build()
             [
                 'quiz' => $plugin->get_lang('Quizzes'),
                 'lp' => $plugin->get_lang('Learnpaths'),
-            ],
-            [
-                'onclick' => 'selectToolProvider(this.value)',
             ]
         );
 
diff --git a/plugin/lti_provider/view/add.tpl b/plugin/lti_provider/view/add.tpl
index 30c37490ba6..7d69819e975 100644
--- a/plugin/lti_provider/view/add.tpl
+++ b/plugin/lti_provider/view/add.tpl
@@ -4,16 +4,19 @@
     </div>
 </div>
 <script>
-  $(function() {
-    if ($("input[name='tool_type']").length > 0) {
-      var toolType = $("input[name='tool_type']:checked").val();
-      selectToolProvider(toolType)
-    }
-  });
   function selectToolProvider(tool) {
     $(".sbox-tool").attr('disabled', 'disabled');
     $(".select-tool").hide();
     $("#select-"+tool).show();
     $("#sbox-tool-"+tool).removeAttr('disabled');
   }
+  $(function() {
+    if ($("input[name='tool_type']").length > 0) {
+      var toolType = $("input[name='tool_type']:checked").val();
+      selectToolProvider(toolType);
+      $("input[name='tool_type']").on('change', function() {
+        selectToolProvider($(this).val());
+      });
+    }
+  });
 </script>

From d4b8b3152b12165a1d411f3acb19af585059b842 Mon Sep 17 00:00:00 2001
From: robertosuarez <roberto.suarez@cinfo.es>
Date: Tue, 28 Jul 2026 10:57:10 +0200
Subject: [PATCH 3/4] Plugin: LTI Provider: Add search/autocomplete (select2)
 to the quiz/learnpath selector

---
 plugin/lti_provider/view/add.tpl | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/plugin/lti_provider/view/add.tpl b/plugin/lti_provider/view/add.tpl
index 7d69819e975..6695606efde 100644
--- a/plugin/lti_provider/view/add.tpl
+++ b/plugin/lti_provider/view/add.tpl
@@ -5,10 +5,17 @@
 </div>
 <script>
   function selectToolProvider(tool) {
+    $(".sbox-tool").each(function() {
+      if ($(this).hasClass('select2-hidden-accessible')) {
+        $(this).select2('destroy');
+      }
+    });
     $(".sbox-tool").attr('disabled', 'disabled');
     $(".select-tool").hide();
     $("#select-"+tool).show();
-    $("#sbox-tool-"+tool).removeAttr('disabled');
+    var $select = $("#sbox-tool-"+tool);
+    $select.removeAttr('disabled');
+    $select.select2({ width: '100%' });
   }
   $(function() {
     if ($("input[name='tool_type']").length > 0) {

From 29d4fc77495438437c9d1ef567a9cc5b71d62535 Mon Sep 17 00:00:00 2001
From: robertosuarez <roberto.suarez@cinfo.es>
Date: Tue, 28 Jul 2026 11:43:16 +0200
Subject: [PATCH 4/4] Plugin: LTI Provider: Add option to duplicate a
 registered platform

---
 plugin/lti_provider/duplicate.php           | 47 +++++++++++++++++++++
 plugin/lti_provider/lang/english.php        |  2 +
 plugin/lti_provider/lang/french.php         |  2 +
 plugin/lti_provider/lang/spanish.php        |  2 +
 plugin/lti_provider/view/provider_admin.tpl |  3 ++
 5 files changed, 56 insertions(+)
 create mode 100644 plugin/lti_provider/duplicate.php

diff --git a/plugin/lti_provider/duplicate.php b/plugin/lti_provider/duplicate.php
new file mode 100644
index 00000000000..6bec63045a8
--- /dev/null
+++ b/plugin/lti_provider/duplicate.php
@@ -0,0 +1,47 @@
+<?php
+/* For license terms, see /license.txt */
+
+$cidReset = true;
+
+require_once __DIR__.'/../../main/inc/global.inc.php';
+use Chamilo\PluginBundle\Entity\LtiProvider\Platform;
+
+require_once __DIR__.'/LtiProviderPlugin.php';
+
+api_protect_admin_script();
+
+if (!isset($_REQUEST['id'])) {
+    api_not_allowed(true);
+}
+
+$platformId = (int) $_REQUEST['id'];
+
+$plugin = LtiProviderPlugin::create();
+$em = Database::getManager();
+
+/** @var Platform $platform */
+$platform = $em->find('ChamiloPluginBundle:LtiProvider\Platform', $platformId);
+
+if (!$platform) {
+    api_not_allowed(true);
+}
+
+$newPlatform = new Platform();
+$newPlatform->setIssuer($platform->getIssuer());
+$newPlatform->setClientId($platform->getClientId());
+$newPlatform->setAuthLoginUrl($platform->getAuthLoginUrl());
+$newPlatform->setAuthTokenUrl($platform->getAuthTokenUrl());
+$newPlatform->setKeySetUrl($platform->getKeySetUrl());
+$newPlatform->setDeploymentId($platform->getDeploymentId());
+$newPlatform->setKid($platform->getKid());
+$newPlatform->setToolProvider($platform->getToolProvider());
+
+$em->persist($newPlatform);
+$em->flush();
+
+Display::addFlash(
+    Display::return_message($plugin->get_lang('PlatformDuplicated'), 'success')
+);
+
+header('Location: '.api_get_path(WEB_PLUGIN_PATH).'lti_provider/edit.php?id='.$newPlatform->getId());
+exit;
diff --git a/plugin/lti_provider/lang/english.php b/plugin/lti_provider/lang/english.php
index 9856a3307c1..310d73e557c 100644
--- a/plugin/lti_provider/lang/english.php
+++ b/plugin/lti_provider/lang/english.php
@@ -13,6 +13,8 @@
 $strings['PlatformName'] = 'LMS (issuer)';
 $strings['PlatformEdited'] = 'Platform details edited';
 $strings['PlatformDeleted'] = 'Platform deleted';
+$strings['PlatformDuplicated'] = 'Platform duplicated';
+$strings['Duplicate'] = 'Duplicate';
 $strings['ClientId'] = 'Client ID';
 $strings['LaunchUrl'] = 'Launch URL';
 $strings['LoginUrl'] = 'Login URL';
diff --git a/plugin/lti_provider/lang/french.php b/plugin/lti_provider/lang/french.php
index 65cf98532bd..6ad439c1e10 100644
--- a/plugin/lti_provider/lang/french.php
+++ b/plugin/lti_provider/lang/french.php
@@ -11,6 +11,8 @@
 $strings['PlatformName'] = 'LMS (émetteur)';
 $strings['PlatformEdited'] = 'Détails de la plateforme modifiés';
 $strings['PlatformDeleted'] = 'Plateforme supprimée';
+$strings['PlatformDuplicated'] = 'Plateforme dupliquée';
+$strings['Duplicate'] = 'Dupliquer';
 $strings['ClientId'] = 'Client ID';
 $strings['LaunchUrl'] = 'Lancer l\'URL';
 $strings['LoginUrl'] = 'URL de connexion';
diff --git a/plugin/lti_provider/lang/spanish.php b/plugin/lti_provider/lang/spanish.php
index 4ea2886bfce..9430f99f6e6 100644
--- a/plugin/lti_provider/lang/spanish.php
+++ b/plugin/lti_provider/lang/spanish.php
@@ -13,6 +13,8 @@
 $strings['PlatformName'] = 'LMS (emisor)';
 $strings['PlatformEdited'] = 'Detalles de la plataforma editados';
 $strings['PlatformDeleted'] = 'Plataforma eliminada';
+$strings['PlatformDuplicated'] = 'Plataforma duplicada';
+$strings['Duplicate'] = 'Duplicar';
 $strings['ClientId'] = 'ID de cliente';
 $strings['LaunchUrl'] = 'URL de lanzamiento';
 $strings['LoginUrl'] = 'URL de inicio de sesión';
diff --git a/plugin/lti_provider/view/provider_admin.tpl b/plugin/lti_provider/view/provider_admin.tpl
index acaffc00d77..8ed0f5a9a04 100644
--- a/plugin/lti_provider/view/provider_admin.tpl
+++ b/plugin/lti_provider/view/provider_admin.tpl
@@ -39,6 +39,9 @@
                         <a href="{{ _p.web_plugin }}lti_provider/edit.php?{{ url_params }}">
                             {{ 'edit.png'|img(22, 'Edit'|get_lang) }}
                         </a>
+                        <a href="{{ _p.web_plugin }}lti_provider/duplicate.php?{{ url_params }}">
+                            {{ 'copy.png'|img(22, 'Duplicate'|get_plugin_lang('LtiProviderPlugin')) }}
+                        </a>
                         <a href="{{ _p.web_plugin }}lti_provider/delete.php?{{ url_params }}">
                             {{ 'delete.png'|img(22, 'Delete'|get_lang) }}
                         </a>