Restrict event access with a password
Follow-up to #56 (closed).
People that don't have access to an event because of restricted visibility should be able to access it if they have a password defined by the event organizers.
Implementation ideas:
- Apart from
Offer
, which is really not fitting, I don't find any AS vocabulary that fits the idea, so we'll probably go with custom vocab here. - Since the password is to be replicated on all instances, it's accessible to the instance admin. We could send it hashed, but the admin could still bruteforce it at their will.
- An other way is to make the password stay on the organizer's instance and other instances ask it to validate the password