by Joshua Johnston.
Hi David,
I have not used the lms.php test script but we have a python app that uses moodle as an lti provider. We set secret to a value we came up with on the consumer side. As of now, the secret can be anything as long as it isn't empty. As long as you provide the correct shared secret the consumer secret contents does not matter as long as it has something in it.