I've been looking into the code for both this and the underlying PYLTI Library.

I've run into issues in understanding how state is managed.

When I open the Edx platform. It makes a post request with some information about OAuth and some stuff about LTI to /index .
The backend, upon verifying the OAuth stuff, returns a web-page tailored to my student that is displayed on the Edx platform.

My question is... Let's say 4 users are using this LTI tool simultaneously. When they submit their answers, where does /grade get the information that tells me which student submitted their solution? Is LTI state passed to the add form, then submitted back to the /grade? Or does the pyLTI flask component just magically store user state and disambiguates one user's request from anothers?