I have built a sms portal using Laravel + Auth0/Google_SSO + Wild Apricot (read only) API's, which works great. That Auth0 authenticated users against the Google user repository, but now have started building a second Laravel + Auth0 + Wild Apricot (read & write) API's where I want to first be able to use the Auth0 SSO to authenticate against Wild Apricot. I am using their "oauth capable" social login (URL: https://auth0.com/docs/authenticate/identity-providers/social-identity-providers/oauth2 ), which seems to work. I get the WA username/password login screen and it signs in, but there it stops and seems like the token that is issued is either not available or captured and then used in the subsequent API call to get user context/details. I get the following log error in Auth0:

{
"date": "2022-04-02T22:00:54.362Z",
"type": "f",
"description": "User failed to login",
"connection": "WildApricot",
"connectionid": "<connectionid>",
"clientid": "<clientid>",
"clientname": "All Applications",
"ip": "<ipaddress>",
"useragent": "Firefox 99.0.0 / Mac OS X 10.15.0",
"details": {
"body": {},
"qs": {
"code": "101dc95bae0c4c66925dcdef4f8ea79c",
"state": "j91jcYcN0vLvdgCC3oryf34j0SP0plRw"
},
"connection": "WildApricot",
"error": {
"message": null,
"oauthError": "invalidrequest",
"type": "request-error"
},
"sessionid": "NQCu9QS4XDgz6glf8K80uKjUyRoqVwnm"
},
"hostname": "<outauth0domain>",
"strategy": "oauth2",
"strategytype": "social",
"logid": "90020220402220059406141054250671160826950045098158588002",
"id": "90020220402220059406141054250671160826950045098158588002",
"isMobile": false
}

.. but if I open a second browser tab I am authenticated and can browse the website.. just not the Auth0 integration works. Presume the next step in that Auth0 chain is to grab the token, issue a WA API request to get the user details and hand that over to Laravel. I am not sure about the details in this process, but trying to dig.

There is an error in the browser as well, which says the following (see attached picture as well):

///
Bummer! Something failed
If you are seeing this, it means that your connection didn't work.
These are the details:

{
"error": "invalid_request"
}
///

Would be great to get some help in getting this done. I will also reach out to Auth0 to get some inputs and help as well if possible.

Thanks in advance!

/Jorgen

When creating new events (these are simple RSVP events) via the API interface, the web interface shows the new event in the default timezone of the Wild Apricot account. This means my start date is almost always wrong for these events.

If I am creating a. new event for Utah, for example, I have set the timezone fields of the API payload as follows ;

"Details": {
"DescriptionHtml": "A fun family event",
"PaymentInstructions": "None",
"TimeZone": {
"ZoneId": "USA & Canada",
"Name": "Mountain Time",
"UtcOffset": -6
},

<truncated>

. When I run my POST command I get back an event_id as a response, indicating successful creation of event.

However when I check in the web interface, my event is listed but on the wrong day as the account default is Pacific time.

How can I set the correct date for my new event via the API ?

Additionally event though this is a simple event (RSVP EventType), it seems I need to set "sessions StartDate" for my new event to be created. If I set that "sessions StartDate = None", I get a validation error indicating it is required field.

However the Swagger API only shows the Event StartDate as the required field, but I can set that to "None" and still create my event.

Is there another attribute that is required to be set to False to stop sessions. My events are mostly single day events with no multiple sessions.

I am using the public API to show the photos of members who have birthdays in a particular month. The page is restricted so that only members can view. I am able to get and display the names and birthdays of members. I am also able to get a link to their profile picture (https://api.wildapricot.org/publicview/v1/accounts/XXXXXX/Pictures/name_of_file.png) however, I am unable to display that photo on the page. It appears as a broken image link and I get an error that says "401 (Invalid credentials. Access to API not allowed.)" I am not sure why this is happening. Does anyone have any clues about why I am getting this error when trying to display a picture to which I have access? I have tried to use the link format from the directory. Directory picture links are as follows: https://myorg.wildapricot.org/Content/Pictures/UserPicture.ashx?memberId=123456&id=1234567890. I am not sure what the second "id" parameter is. Insight into that would be helpful as well.

I recently (2021-12-19) suspended and archived a member (ID 57031785). The contacts API is still returning the timestamp of the previous update (2021-06-18T10:58:17.37-07:00) for Profile Last Updated.

This invalidates any API usage that seeks to minimize server load and response time by fetching only changed records.

I believe this is a bug, and it prevents me from using the Contacts API effectively. I will have to do a full contacts dump every time I want to synchronize my local DB, and will increase the load on your server significantly, since this is done at least once a day, sometimes more than once.

If this is something you don't intend to correct, can you provide a list of which field changes cause Profile Last Updated to be set, and which don't.