feat: hidden location / attendee approvals

[reggi]

I love gathio. I love the idea of a self-hosted event service.

One thing I want is a way to only allow people I approve to see the location to an event. I whipped up a POC that does this.

• Adds a new event checkbox Require host approvals for attendees to see location
• Default web visits can't see location Location hidden until approved by default
• New attendees show as pending
• New attendees get ?p= parameter after submitting
• Hosts can ✅ and approve attendees

Untitled_small.mp4

I'm open to discussion this feature / copywriting / flow. Also possible to use localstorage with :eventid + :password making it easier for attendees to not need to remember their password.

[lowercasename]

Ah, this is such a great feature - you rock, thank you!

I will try and do a code review this week, but just a few things to think about in the meantime:

• It's a bit weird to call that the 'removal password' after this point, we may as well try and call it the 'attendee password' everywhere rather than carrying on as if it's only for removals.
• In the same vein, this feels like it should be more general than just a 'location hidden' setting. If we assume someone will want to extend this function in the future to hide other event data - maybe the list of attendees, the comments, or even the description, this gives us three choices: (1) lots of settings, one for every kind of data; (2) per-field privacy settings (i.e. is the description hidden from unapproved attendees Y/N, are the comments hidden from unapproved attendees Y/N; (3) a blanket default set of things that are always hidden from attendees, which the user can't change. All have their pros and cons, I think it's really important to think about which one you would want to aim for in future and set that one up for success.
• This doesn't currently work for federated events. At the very least, if the location is hidden from unverified attendees, it should be hidden in the description of the ActivityPub actor. A nice extension of this would be that if you get approved, the actor sends you a message with the location or at least a message telling you that you've been approved. This also makes the federated aspect of Gathio extra useful - it becomes another kind of authentication mechanism for attendees.

[nklisch]

Love this feature idea.