Booking Manager Documentation

Overview & Scope

Booking Manager is an enterprise application for managing resource bookings — Vehicles, Rooms, Equipment, and other company assets. It enables organizations to set up their branch and department hierarchy, maintain a categorized resource catalog, process booking requests through a complete lifecycle, track physical check-in and check-out, and measure resource utilization over time.

Personas & Access

Access is organized around three personas, each with a distinct menu group and data scope:

Members manage the full operational workflow, while Guests interact exclusively with their own data through the Self Service portal. Role-based authorization is enforced on every screen and API endpoint.

Feature Modules

The application is built from the following functional modules:

Booking Lifecycle

Every booking travels through a defined lifecycle. A request is created as a Draft and Submitted by the requester. A Member or Admin then reviews the request and either Approves it or Rejects it (with a mandatory rejection reason). Approved bookings are Assigned a physical resource.

Once the resource is handed over, the booking moves to In Use — recorded via the check-in process. When the resource is returned, the check-out submission moves the booking to Pending Return Check, and a final inspection completes it. At any point before assignment, a booking may also be Cancelled.

Self Service

The Self Service portal gives Guest users full control over their own bookings:

• New Booking Request — submit a booking request with schedule and purpose. Branch and department are taken from the user's profile.
• My Booking History — view the complete history and current status of your own bookings.
• Check-In Confirmation — confirm physical receipt of an assigned resource and document its initial condition.
• Check-Out / Return Submission — initiate the return of a resource and submit return condition details.

All Self Service actions are strictly scoped to the signed-in user — Guests can only see and manage bookings they created.

Reporting & Analytics

Two reports help administrators understand how company assets are used:

• Utilization Report — resource utilization and occupancy rates broken down by branch, department, and individual resource. Both reports can be filtered and exported to Excel.
• Condition History — a chronological log of condition notes and inspection data for each asset, linked to the bookings that used it.

Together they support decisions such as purchasing additional assets, retiring underused equipment, and scheduling preventive maintenance.

Authentication

Full-featured authentication with ASP.NET Core Identity, JWT access tokens with refresh token rotation, and optional Firebase SSO.

// 1. Login → POST /api/auth/login with email+password
// 2. Response returns: { token, refreshToken, expiresAt, user }
// 3. When access token expires → POST /api/auth/refresh
//    with { refreshToken } → new token pair (rotation)
// 4. Refresh token is hashed (SHA256) and stored in DB

Role-Based Authorization

Pre-configured roles: Guest, Member, and Admin. New users automatically receive the Guest role.

public static class ApplicationRoles
{
    public const string AdminConst  = "Admin";
    public const string MemberConst = "Member";
    public const string GuestConst  = "Guest";
}

SSO Firebase

Indotalent supports Firebase Single Sign-On (SSO) as an optional authentication method. When enabled, users can sign in using their Google account via Firebase Authentication. The Firebase configuration is stored in appsettings.json under the SsoFirebase section.

To enable Firebase SSO, configure the following in appsettings.json:

"SsoFirebase": {
    "IsUsed": true,
    "ProjectId": "xxx",
    "ApiKey": "xxx",
    "AuthDomain": "xxx.firebaseapp.com",
    "StorageBucket": "xxx.firebasestorage.app",
    "MessagingSenderId": "xxx",
    "AppId": "xxx"
}

Set "IsUsed": true to enable Firebase SSO. Replace the placeholder values (xxx) with your actual Firebase project credentials from the Firebase Console. Set "IsUsed": false to disable Firebase SSO and use only the built-in Identity authentication.

AutoNumber Generation

Entities implementing IHasAutoNumber get auto-generated codes like COMP-0001.

Background Jobs (Hangfire)

Hangfire with built-in dashboard at /hangfire (Admin only). Supports recurring, fire-and-forget, and delayed jobs.

Multi-Database

Switch between InMemory, SQL Server, and PostgreSQL with a single config change. The application supports three database providers — simply toggle "IsUsed" to switch between them.

Configure your database provider in appsettings.json under DatabaseSettings:

"DatabaseSettings": {
    // InMemory (default, no external DB needed)
    "InMemory": {
        "IsUsed": true,
        "ConnectionString": "IndotalentDb",
        "TimeoutInSeconds": 1800
    },
    // Microsoft SQL Server
    "MsSQL": {
        "IsUsed": false,
        "ConnectionString": "Server=localhost\\SQLEXPRESS;Database=MyDb;Trusted_Connection=True;TrustServerCertificate=True",
        "TimeoutInSeconds": 1800
    },
    // PostgreSQL
    "PostgreSQL": {
        "IsUsed": false,
        "ConnectionString": "Host=localhost;Database=MyDb;Username=postgres;Password=yourpassword",
        "TimeoutInSeconds": 1800
    }
}

To switch providers, set the desired provider's "IsUsed" to true and the others to false. Only one provider can be active at a time. Update the ConnectionString to match your database server credentials.

Demo Mode

Indotalent includes a Demo Mode feature that, when enabled, automatically seeds the database with dummy demo data on application startup. This is useful for testing, presentations, or evaluation purposes without needing to manually enter data.

Configure Demo Mode in appsettings.json:

"DemoMode": {
    "IsDemo": true
}

Set "IsDemo": true to enable Demo Mode — the application will seed dummy data (sample users, roles, and demo records) on every startup. Set "IsDemo": false to disable it and start with a clean database.

AI Chat

Indotalent includes an AI Chat feature that can be enabled by configuring your preferred AI provider's API key. The application supports multiple AI providers including ChatGPT, Claude, Gemini, and DeepSeek.

Configure AI Chat in appsettings.json under AiSettings:

"AiSettings": {
    // Choose your provider: "ChatGPT", "Claude", "Gemini", or "DeepSeek"
    "Provider": "ChatGPT",
    "ChatGPT": {
        "ApiKey": "sk-your-chatgpt-api-key",
        "Model": "gpt-4o"
    },
    "Claude": {
        "ApiKey": "sk-ant-your-claude-api-key",
        "Model": "claude-3-opus-20240229"
    },
    "Gemini": {
        "ApiKey": "your-gemini-api-key",
        "Model": "gemini-1.5-pro"
    },
    "DeepSeek": {
        "ApiKey": "your-deepseek-api-key",
        "Model": "deepseek-v4-flash"
    }
}

To enable AI Chat, set the "Provider" field to your chosen provider name and fill in the corresponding "ApiKey" with your actual API key from that provider. Leave the API keys empty to disable the AI Chat feature.

Email Delivery

Multi-provider email service supporting SendGrid, Mailgun, SMTP, and Mailjet. Toggle "IsUsed" to switch between providers.

Configure email delivery in appsettings.json under EmailSettings:

"EmailSettings": {
    // SendGrid
    "SendGrid": {
        "IsUsed": false,
        "ApiKey": "SG.your-sendgrid-api-key",
        "FromEmail": "noreply@email.com"
    },
    // Mailgun
    "Mailgun": {
        "IsUsed": false,
        "ApiKey": "key-your-mailgun-api-key",
        "Domain": "mg.yourdomain.com",
        "FromEmail": "noreply@email.com"
    },
    // Mailjet
    "Mailjet": {
        "IsUsed": false,
        "ApiKey": "mj-your-public-key",
        "ApiSecret": "mj-your-private-key",
        "FromEmail": "noreply@email.com"
    },
    // SMTP (default)
    "Smtp": {
        "IsUsed": true,
        "Host": "smtp.gmail.com",
        "Port": 465,
        "UserName": "your-email@gmail.com",
        "Password": "your-app-password",
        "FromAddress": "your-email@gmail.com",
        "FromName": "no-reply"
    }
}

To switch email providers, set the desired provider's "IsUsed" to true and the others to false. Only one provider can be active at a time. Fill in the API keys and credentials for your chosen provider.

File Upload / Download

File storage service supporting local file system with upload, download, delete operations.

Health Checks

Built-in health check endpoints with dashboard UI at /Admin/HealthCheck/Index.

Logging (Serilog)

Structured logging with Serilog. Writes to rolling files with automatic 3-day cleanup via Hangfire.

Rate Limiting

Four rate limiting policies using System.Threading.RateLimiting, configurable via appsettings.json.