SergeyMosin / Appointments

Nextcloud Appointments App
GNU Affero General Public License v3.0
166 stars 48 forks source link

Second layer for cancellation links needed (Antivirus checks make the use of Appointments impossible) #293

Closed jacotec closed 2 years ago

jacotec commented 2 years ago

I found that some customers are never able to book an appointment at all. All selected appointments are automatically canceled after a very short time although the customer did nothing.

Investigating the root cause for this I found that the issue is the fact, that the "cancel" link in the confirmation email works immediately once it's simply called.

Many customers have an antivirus / antimalware scan on their email server which checks if any links in the mail are malicious. And just that check cancels the appointment immediately without any human background action - which makes Appointments unusable.

(The same happens to the confirmation link as well)

For every link which is sent via email there should be a second confirmation layer on the App's web page:

When the confirmation link is clicked, the website should show the appointment data with "Do you would like to confirm the appointment - Yes/No" buttons.

But even more important, for the cancellation link the web page should show the appointment data with "Do you want to cancel your appointment - Yes/No".

This would make Appointments really usable for everyone running antivirus checks on their email servers.

SergeyMosin commented 2 years ago

Thanks for the report. I'll add a fix for this into the next release.

However, I think only the "Yes" button is needed, because it is unclear what is expected to happen when the "No" button is clicked.

jacotec commented 2 years ago

@SergeyMosin Agree! At least there yould be one more action on the web page. Thanks for adding!

SergeyMosin commented 2 years ago

available in v1.11.14

image

image

image