Define MVP

[miawinter98]

• [x] integration with Calendar / Mail clients: yes / no / which ones?
• [x] how to notify parties? E-Mail? SMTP integration server side?
• [x] export capabilities? ics appointment files? Internet calendar?
• [x] Authentication and Authorization: Single User, Multi-User, OIDC / OAuth (2)?
• [x] Permission structure? Roles? Fine grained permissions?
• [ ] Bot protection? Integration of external captcha services?
  • [ ] Do we need a threat-model?

[uniqueNullptr2]

integration with calendar/mail clients i looked through my mails and found some that use a special link for google and otherwise let you download an ics file I am not aware of others but speaking of MVP, ics should be the minimum. That would give anyone a way to import an event into their calendar how to notify parties for MVP let's stick with smtp. I am not aware of many other options though.

export capabilities from googling ics and internet calendar are the same I think? but yeah ics seems a good option for mvp

authentication in terms of mvp would it make much of a difference whether it is single user or multi user? In this case I would imagine everyone having their own personal calendar for scheduling

Permission structure for mvp I would say out of scope?

bot protection out of scope for mvp threat model might be good to put some thought into. but I have no experience with this

[miawinter98]

Yea ics is theoretically widely supported, but some mail providers are not very good at it (maybe even deliberately). Especially gmail and outlook are annoying in that regard.

Ics is internet calendar correct, I was just differentiating between a simple appointment (invitation) file, and a whole calendar (range).

Differentiating between single- and multi-user is pretty important actually. Like in JSI, there with single user you just provide a username and password in the environment, and the backend compares that in the login form with the added data, completely without any database. In a multi-user scenario one would need to implement a whole user sign-up and login flow, easily done with asp.net 8's new identity api endpoints, but still lots more work.

[uniqueNullptr2]

To be fair I never tried importing an ics anywhere. Im more of a "either I remember or I just forget" kinda girl.

regarding ics, I have no idea how big of a difference it would be to support only one or both. but supporting just single appointments would be a good first step

fair distinction. but I would just go straight to supporting a normal login flow.

furthermore, how do you wanna approach the project management. how would we do things. as in track the completion of individual features?

[miawinter98]

well, github, it's easy enough and has everything I personally would say is needed for management