I'm attempting to configure our third party website using Apache and modauthopenidc to invoke the SSO authentication endpoints on our WildApricot website.

I've gotten as far as manually assembling a correct authentication request URL:

https://discoamigos.wildapricot.org/sys/login/OAuthLogin?response_type=authorization_code&scope=contacts_me&client_id=...&state=...&redirect_uri=...&nonce=...&claimed_account_id=...

That shows me a login dialog as expected... However, when trying to use mod-auth-openidc to generate the authorization URL, it doesn't allow the requesttype of "authorizationcode". It only lets me set the request type to "code", which seems to break the authentication page fetch on the WA end.

This would seem to be an issue with Oauth2 'standards'. It would seem requesttype="authorizationcode" isn't a part of Oauth2? Should I be looking at a different solution other than trying to use modauthopenidc to integrate with WildApricot SSO?

My end goal is to protect a few web paths on my 3rd party website using the SSO service on our WildApricot. Any suggestions?