Event Guest Management Platform

Client Requirements

The client needed a professional digital solution for managing invitations and RSVPs for a private celebration event. Traditional paper invitations and manual tracking were inefficient and lacked real-time visibility into guest responses.

Specific Problems to Solve

• Invitation Security: Prevent unauthorized access while allowing legitimate guests easy entry
• RSVP Tracking: Real-time visibility into who's attending, declining, or hasn't responded
• Plus-One Management: Track additional guests and dietary restrictions for catering planning
• Communication: Ability to broadcast updates to all invited guests via WhatsApp
• Bulk Operations: Import large guest lists efficiently without manual entry
• Device Control: Prevent invitation code sharing beyond intended recipients
• Privacy Protection: Keep event details confidential and limit access to invited guests only

System Design

Built as a decoupled full-stack application with RESTful API backend and responsive React frontend. Designed for scalability, security, and ease of deployment.

Database Schema

• Guests Table: id, name, phone_number, unique_code, rsvp_status, email, is_family, plus_one_count, dietary_restrictions, notes, device_id, device_id_2, invite_sent
• Admins Table: id, username, hashed_password (bcrypt)
• Relationships: One admin manages many guests, one guest can link to two devices

API Endpoints

• POST /token - Admin authentication (OAuth2 flow)
• GET /guests/ - List all guests (admin only)
• POST /guests/ - Create new guest (admin only)
• DELETE /guests/{code} - Remove guest (admin only)
• POST /guests/upload-csv - Bulk import (admin only)
• POST /guests/broadcast - WhatsApp broadcast (admin only)
• POST /guests/{code}/mark-sent - Toggle invite sent status (admin only)
• GET /rsvp/{code} - Validate invitation code (public)
• POST /rsvp/claim/{code} - Link device to invitation (public)
• POST /rsvp/{code} - Submit RSVP response (public)
• GET /guests/validate-device/{id} - Check if device is linked (public)

Security Features

• Password Hashing: Bcrypt for admin credentials
• JWT Tokens: Secure session management with expiration
• Device Restrictions: Maximum 2 devices per invitation code
• CORS Protection: Configured allowed origins for API access
• RSVP Prevention: Blocks double-submission after initial response
• Code Uniqueness: Database constraints ensure no duplicate codes

Guest Journey

• Step 1: Receive invitation with unique 6-character code via WhatsApp or other channel
• Step 2: Visit event website and enter invitation code
• Step 3: Device automatically links to invitation (secure, one-time process)
• Step 4: View event details (date, location, dress code, etc.)
• Step 5: Submit RSVP (Attending/Declined) with optional details (email, plus-ones, dietary restrictions, notes)
• Step 6: Receive confirmation and can return to view details anytime on linked device

Admin Experience

• Login: Secure OAuth2 authentication to admin dashboard
• Import Guests: Upload CSV with names and phone numbers (bulk operation)
• View Dashboard: See real-time statistics (total invited, attending, declined, pending)
• Track Invitations: Mark which codes have been sent to guests
• Monitor RSVPs: Filter by status, family members, dietary restrictions
• Send Updates: Broadcast WhatsApp messages to all guests or filtered groups
• Manage Guests: Add, edit, or remove individual guests as needed
• Export Data: Download guest list with RSVP details for vendor coordination

Design Principles

• Mobile-First: Majority of guests access from smartphones
• Minimal Friction: 6-character codes easy to type and remember
• Clear Feedback: Immediate confirmation of actions
• Elegant Aesthetics: Professional design befitting special occasion
• Privacy Focused: Guest data protected and confidential

Client Benefits

• Time Savings: Automated invitation delivery and RSVP tracking eliminated hours of manual work
• Real-Time Visibility: Instant dashboard showing attendance status for planning purposes
• Professional Presentation: Digital-first approach enhanced event prestige and guest experience
• Data Organization: Centralized system replaced spreadsheets and paper lists
• Communication Efficiency: WhatsApp integration enabled instant updates to all guests
• Accurate Headcount: Plus-one tracking provided precise numbers for venue and catering
• Dietary Management: Collected restrictions automatically during RSVP for vendor coordination

Technical Achievements

• Secure Authentication: OAuth2 + JWT implementation protecting admin access
• Device Linking: Novel approach preventing invitation code sharing
• Scalable Architecture: Handles hundreds of guests without performance degradation
• Clean API Design: RESTful endpoints following industry best practices
• Data Integrity: Unique constraints and validation preventing duplicate or invalid entries
• Responsive Design: Seamless experience across desktop, tablet, and mobile devices

Key Learnings

• Simplicity Wins: 6-character codes struck perfect balance between security and usability
• Device Linking: Limiting to 2 devices per code prevented abuse while allowing legitimate sharing
• WhatsApp Integration: Familiar platform reduced barriers to guest communication
• Mobile-First Critical: Over 80% of guest interactions came from mobile devices
• Real-Time Analytics: Dashboard visibility enabled proactive planning and decision-making