@breadstone/archipel-mcp 0.0.7 → 0.0.9

package/data/packages/platform-authentication/api/{Class.MicrosoftStrategy.md → Class.MicrosoftConnector.md}

@@ -1,30 +1,36 @@
 ---
-title: 'Class: MicrosoftStrategy'
+title: 'Class: MicrosoftConnector'
 generated: true
 editUrl: false
 ---
 
-# Class: MicrosoftStrategy
+# Class: MicrosoftConnector
 
-Defined in: [libs/platform-authentication/src/strategies/MicrosoftStrategy.ts:19](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/MicrosoftStrategy.ts#L19)
+Defined in: [libs/platform-authentication/src/connectors/MicrosoftConnector.ts:20](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/connectors/MicrosoftConnector.ts#L20)
 
-The `MicrosoftStrategy` integrates Microsoft OAuth authentication.
+The `MicrosoftConnector` integrates Microsoft OAuth authentication.
 
 ## Extends
 
-- `Strategy`\<`this`\> & `PassportStrategyMixin`\<`unknown`, `this`\>
+- `_ConnectorBase`\<_typeof_ `Strategy`, `this`\>
+
+## Indexable
+
+```ts
+[key: string]: any
+```
 
 ## Constructors
 
 ### Constructor
 
 ```ts
-new MicrosoftStrategy(socialAuth, configService): MicrosoftStrategy;
+new MicrosoftConnector(socialAuth, configService): MicrosoftConnector;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/MicrosoftStrategy.ts:35](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/MicrosoftStrategy.ts#L35)
+Defined in: [libs/platform-authentication/src/connectors/MicrosoftConnector.ts:36](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/connectors/MicrosoftConnector.ts#L36)
 
-Initializes a new instance of the `MicrosoftStrategy` class.
+Initializes a new instance of the `MicrosoftConnector` class.
 
 #### Parameters
 
@@ -35,12 +41,12 @@ Initializes a new instance of the `MicrosoftStrategy` class.
 
 #### Returns
 
-`MicrosoftStrategy`
+`MicrosoftConnector`
 
 #### Overrides
 
 ```ts
-PassportStrategy(Strategy, 'microsoft').constructor;
+ConnectorBase(Strategy, 'microsoft').constructor;
 ```
 
 ## Methods
@@ -54,7 +60,7 @@ validate(
 profile): Promise<IAuthSubject>;
 ```
 
-Defined in: [libs/platform-authentication/src/strategies/MicrosoftStrategy.ts:66](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/strategies/MicrosoftStrategy.ts#L66)
+Defined in: [libs/platform-authentication/src/connectors/MicrosoftConnector.ts:68](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/connectors/MicrosoftConnector.ts#L68)
 
 Validates the Microsoft authentication payload.
 
@@ -75,5 +81,5 @@ The authenticated user.
 #### Overrides
 
 ```ts
-PassportStrategy(Strategy, 'microsoft').validate;
+ConnectorBase(Strategy, 'microsoft').validate;
 ```

package/data/packages/platform-authentication/api/Class.TotpMfaChannel.md

@@ -0,0 +1,145 @@
+---
+title: 'Class: TotpMfaChannel'
+generated: true
+editUrl: false
+---
+
+# Class: TotpMfaChannel
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L16)
+
+## Implements
+
+- `IMfaChannel`
+
+## Constructors
+
+### Constructor
+
+```ts
+new TotpMfaChannel(
+   mfaSubject,
+   configService,
+   encryptionService,
+   otpService): TotpMfaChannel;
+```
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:31](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L31)
+
+#### Parameters
+
+| Parameter           | Type                                     |
+| ------------------- | ---------------------------------------- |
+| `mfaSubject`        | [`MfaSubjectPort`](Class.MfaSubjectPort) |
+| `configService`     | `ConfigService`                          |
+| `encryptionService` | `MfaEncryptionService`                   |
+| `otpService`        | `IOtpService`                            |
+
+#### Returns
+
+`TotpMfaChannel`
+
+## Properties
+
+### method
+
+```ts
+readonly method: "totp" = 'totp';
+```
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:19](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L19)
+
+Unique identifier of the MFA method (e.g., `totp`, `sms`, `email`).
+
+#### Implementation of
+
+```ts
+IMfaChannel.method;
+```
+
+## Methods
+
+### initSetup()
+
+```ts
+initSetup(userId, _context?): Promise<IMfaSetup>;
+```
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:48](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L48)
+
+Initializes the setup flow for the channel and persists any channel-specific bootstrap state.
+
+#### Parameters
+
+| Parameter   | Type               | Description                            |
+| ----------- | ------------------ | -------------------------------------- |
+| `userId`    | `string`           | Identifier of the user starting setup. |
+| `_context?` | `IMfaSetupContext` | -                                      |
+
+#### Returns
+
+`Promise`\<[`IMfaSetup`](Interface.IMfaSetup)\>
+
+#### Implementation of
+
+```ts
+IMfaChannel.initSetup;
+```
+
+---
+
+### verifyChallenge()
+
+```ts
+verifyChallenge(userId, code): Promise<boolean>;
+```
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:107](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L107)
+
+Verifies a challenge code during login.
+
+#### Parameters
+
+| Parameter | Type     | Description                        |
+| --------- | -------- | ---------------------------------- |
+| `userId`  | `string` | Identifier of the challenged user. |
+| `code`    | `string` | User supplied challenge code.      |
+
+#### Returns
+
+`Promise`\<`boolean`\>
+
+#### Implementation of
+
+```ts
+IMfaChannel.verifyChallenge;
+```
+
+---
+
+### verifySetup()
+
+```ts
+verifySetup(userId, code): Promise<boolean>;
+```
+
+Defined in: [libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts:82](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/mfa/channels/TotpMfaChannel.ts#L82)
+
+Verifies the first setup code and marks the channel as ready for challenges.
+
+#### Parameters
+
+| Parameter | Type     | Description                             |
+| --------- | -------- | --------------------------------------- |
+| `userId`  | `string` | Identifier of the user finishing setup. |
+| `code`    | `string` | User supplied setup code.               |
+
+#### Returns
+
+`Promise`\<`boolean`\>
+
+#### Implementation of
+
+```ts
+IMfaChannel.verifySetup;
+```

package/data/packages/platform-authentication/api/Class.VerificationService.md

@@ -6,7 +6,7 @@ editUrl: false
 
 # Class: VerificationService
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:17](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L17)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:18](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L18)
 
 Manages email / PIN verification tokens via the [VerificationSubjectPort](Class.VerificationSubjectPort).
 
@@ -22,7 +22,7 @@ new VerificationService(
    configService): VerificationService;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:38](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L38)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:39](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L39)
 
 Constructs a new instance of the `VerificationService` class.
 
@@ -47,7 +47,7 @@ Constructs a new instance of the `VerificationService` class.
 buildVerificationLink(token): string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:148](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L148)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:149](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L149)
 
 Constructs the verification link.
 
@@ -71,7 +71,7 @@ The URL to verify the email.
 exhibitToken(data): Promise<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:61](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L61)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:62](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L62)
 
 Exhibits a new verification token.
 
@@ -95,7 +95,7 @@ The verification token.
 redeemToken(token): Promise<Record<string, string>>;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:74](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L74)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:75](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L75)
 
 Redeems the user's token.
 
@@ -119,7 +119,7 @@ The token data.
 verifyPin(pin, login): Promise<boolean>;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:105](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L105)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:106](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L106)
 
 #### Parameters
 
@@ -140,7 +140,7 @@ Defined in: [libs/platform-authentication/src/services/VerificationService.ts:10
 verifyToken(token): Promise<boolean>;
 ```
 
-Defined in: [libs/platform-authentication/src/services/VerificationService.ts:84](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L84)
+Defined in: [libs/platform-authentication/src/services/VerificationService.ts:85](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/VerificationService.ts#L85)
 
 Verifies the user's token.
 

package/data/packages/platform-authentication/api/Interface.IAuthModuleOptions.md

@@ -22,7 +22,21 @@ Defined in: [libs/platform-authentication/src/AuthModule.ts:99](https://github.c
 
 Optional additional configuration entries to register (e.g. provider-specific OAuth keys).
 Import them from the provider-specific sub-paths
-(e.g. `APPLE_AUTH_CONFIG_ENTRIES` from `@breadstone/archipel-platform-authentication/apple`).
+(e.g. `APPLE_AUTH_CONFIG_ENTRIES` from `@breadstone/archipel-platform-authentication/connectors/apple`).
+
+---
+
+### additionalProviders?
+
+```ts
+optional additionalProviders?: Provider[];
+```
+
+Defined in: [libs/platform-authentication/src/AuthModule.ts:121](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L121)
+
+Optional additional providers required by optional features (e.g. TOTP MFA).
+Import them from the provider-specific sub-paths
+(e.g. `TOTP_MFA_PROVIDERS` from `@breadstone/archipel-platform-authentication/mfa/totp`).
 
 ---
 
@@ -34,7 +48,23 @@ authSubject: Type<AuthSubjectPort>;
 
 Defined in: [libs/platform-authentication/src/AuthModule.ts:63](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L63)
 
-Implementation of the auth subject port (user lookup for JWT/Local/Anonymous strategies).
+Implementation of the auth subject port (user lookup for JWT/Local/Anonymous connectors).
+
+---
+
+### mfaChannels?
+
+```ts
+optional mfaChannels?: Type<any>[];
+```
+
+Defined in: [libs/platform-authentication/src/AuthModule.ts:114](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L114)
+
+Optional array of additional MFA channel types to register (e.g. `TotpMfaChannel`).
+Import them from the provider-specific sub-paths
+(e.g. `@breadstone/archipel-platform-authentication/mfa/totp`).
+
+Built-in channels (SMS, Email, Push) are always registered.
 
 ---
 
@@ -70,22 +100,22 @@ optional socialAuth?: Type<SocialAuthPort>;
 
 Defined in: [libs/platform-authentication/src/AuthModule.ts:84](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L84)
 
-Optional implementation of the social auth port (OAuth strategies).
-When provided together with `socialStrategies`, the social auth flow is enabled.
+Optional implementation of the social auth port (OAuth connectors).
+When provided together with `socialConnectors`, the social auth flow is enabled.
 
 ---
 
-### socialStrategies?
+### socialConnectors?
 
 ```ts
-optional socialStrategies?: Type<any>[];
+optional socialConnectors?: Type<any>[];
 ```
 
 Defined in: [libs/platform-authentication/src/AuthModule.ts:92](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/AuthModule.ts#L92)
 
-Optional array of social strategy types to register (e.g. `AppleStrategy`, `GithubStrategy`).
+Optional array of social connector types to register (e.g. `AppleConnector`, `GithubConnector`).
 Import them from the provider-specific sub-paths
-(e.g. `@breadstone/archipel-platform-authentication/apple`).
+(e.g. `@breadstone/archipel-platform-authentication/connectors/apple`).
 Requires `socialAuth` to be set.
 
 ---

package/data/packages/platform-authentication/api/Interface.IMfaChallengeState.md

@@ -6,7 +6,7 @@ editUrl: false
 
 # Interface: IMfaChallengeState
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:9](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L9)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:10](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L10)
 
 ## Properties
 
@@ -16,7 +16,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:9](ht
 allowedMethods: string[];
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:12](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L12)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:13](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L13)
 
 ---
 
@@ -26,7 +26,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:12](h
 attempts: number;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:20](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L20)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:21](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L21)
 
 ---
 
@@ -36,7 +36,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:20](h
 optional clientName?: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:17](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L17)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:18](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L18)
 
 ---
 
@@ -46,7 +46,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:17](h
 createdAt: Date;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:18](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L18)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:19](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L19)
 
 ---
 
@@ -56,7 +56,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:18](h
 expiresAt: Date;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:19](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L19)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:20](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L20)
 
 ---
 
@@ -66,7 +66,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:19](h
 id: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:10](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L10)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:11](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L11)
 
 ---
 
@@ -76,7 +76,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:10](h
 optional ipAddress?: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:14](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L14)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:15](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L15)
 
 ---
 
@@ -86,7 +86,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:14](h
 optional location?: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L16)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:17](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L17)
 
 ---
 
@@ -96,7 +96,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:16](h
 optional preferredMethod?: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:13](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L13)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:14](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L14)
 
 ---
 
@@ -106,7 +106,7 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:13](h
 optional userAgent?: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:15](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L15)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L16)
 
 ---
 
@@ -116,4 +116,4 @@ Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:15](h
 userId: string;
 ```
 
-Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:11](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L11)
+Defined in: [libs/platform-authentication/src/services/ChallengeService.ts:12](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/services/ChallengeService.ts#L12)

package/data/packages/platform-authentication/api/Variable.APPLE_AUTH_CONFIG_ENTRIES.md

@@ -10,6 +10,6 @@ editUrl: false
 const APPLE_AUTH_CONFIG_ENTRIES: ReadonlyArray<Omit<IConfigRegistryEntry, 'module'>>;
 ```
 
-Defined in: [libs/platform-authentication/src/apple/env.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/apple/env.ts#L16)
+Defined in: [libs/platform-authentication/src/connectors/apple/env.ts:16](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/connectors/apple/env.ts#L16)
 
 Configuration entries required by Apple Sign-In authentication.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:115](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L115)
+Defined in: [libs/platform-authentication/src/env.ts:118](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L118)
 
 Apple Sign-In callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:106](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L106)
+Defined in: [libs/platform-authentication/src/env.ts:109](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L109)
 
 Apple Sign-In client (service) ID.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_KEY_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_KEY_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:112](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L112)
+Defined in: [libs/platform-authentication/src/env.ts:115](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L115)
 
 Apple Sign-In key ID.

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_PRIVATE_KEY.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_PRIVATE_KEY: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:103](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L103)
+Defined in: [libs/platform-authentication/src/env.ts:106](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L106)
 
 Apple Sign-In private key (PEM string).

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_SCOPE.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_SCOPE: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:118](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L118)
+Defined in: [libs/platform-authentication/src/env.ts:121](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L121)
 
 Comma-separated list of Apple Sign-In scopes (e.g. `'name,email'`).

package/data/packages/platform-authentication/api/Variable.AUTH_APPLE_TEAM_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_APPLE_TEAM_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:109](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L109)
+Defined in: [libs/platform-authentication/src/env.ts:112](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L112)
 
 Apple developer team ID.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:131](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L131)
+Defined in: [libs/platform-authentication/src/env.ts:134](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L134)
 
 GitHub OAuth callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:125](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L125)
+Defined in: [libs/platform-authentication/src/env.ts:128](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L128)
 
 GitHub OAuth client ID.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_CLIENT_SECRET.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_CLIENT_SECRET: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:128](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L128)
+Defined in: [libs/platform-authentication/src/env.ts:131](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L131)
 
 GitHub OAuth client secret.

package/data/packages/platform-authentication/api/Variable.AUTH_GITHUB_SCOPE.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GITHUB_SCOPE: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:134](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L134)
+Defined in: [libs/platform-authentication/src/env.ts:137](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L137)
 
 Comma-separated list of GitHub OAuth scopes (e.g. `'user:email,read:user'`).

package/data/packages/platform-authentication/api/Variable.AUTH_GOOGLE_CALLBACK_URL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GOOGLE_CALLBACK_URL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:74](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L74)
+Defined in: [libs/platform-authentication/src/env.ts:77](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L77)
 
 Google OAuth2 callback URL.

package/data/packages/platform-authentication/api/Variable.AUTH_GOOGLE_CLIENT_ID.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GOOGLE_CLIENT_ID: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:68](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L68)
+Defined in: [libs/platform-authentication/src/env.ts:71](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L71)
 
 Google OAuth2 client ID.

package/data/packages/platform-authentication/api/Variable.AUTH_GOOGLE_CLIENT_SECRET.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GOOGLE_CLIENT_SECRET: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:71](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L71)
+Defined in: [libs/platform-authentication/src/env.ts:74](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L74)
 
 Google OAuth2 client secret.

package/data/packages/platform-authentication/api/Variable.AUTH_GOOGLE_SCOPE.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_GOOGLE_SCOPE: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:77](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L77)
+Defined in: [libs/platform-authentication/src/env.ts:80](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L80)
 
 Comma-separated list of Google OAuth scopes (e.g. `'email,profile'`).

package/data/packages/platform-authentication/api/Variable.AUTH_MFA_EMAIL_CODE_TTL.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MFA_EMAIL_CODE_TTL: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:48](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L48)
+Defined in: [libs/platform-authentication/src/env.ts:51](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L51)
 
 Time-to-live for email OTP codes (e.g. `'10m'`).

package/data/packages/platform-authentication/api/Variable.AUTH_MFA_EMAIL_MIN_RESEND.md

@@ -10,6 +10,6 @@ editUrl: false
 const AUTH_MFA_EMAIL_MIN_RESEND: IConfigKey<string>;
 ```
 
-Defined in: [libs/platform-authentication/src/env.ts:51](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L51)
+Defined in: [libs/platform-authentication/src/env.ts:54](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L54)
 
 Minimum interval between email OTP resend requests (e.g. `'30s'`).

package/data/packages/platform-authentication/api/Variable.AUTH_MFA_ISSUER.md

@@ -0,0 +1,15 @@
+---
+title: 'Variable: AUTH\_MFA\_ISSUER'
+generated: true
+editUrl: false
+---
+
+# Variable: AUTH_MFA_ISSUER
+
+```ts
+const AUTH_MFA_ISSUER: IConfigKey<string>;
+```
+
+Defined in: [libs/platform-authentication/src/env.ts:34](https://github.com/RueDeRennes/archipel/blob/main/libs/platform-authentication/src/env.ts#L34)
+
+Issuer name shown in authenticator apps for TOTP MFA.