Feature Matrix

Authentication Methods

Feature	Available
Email + Password	✅
WebAuthn / Passkeys (FIDO2)	✅
TOTP (authenticator app)	✅
OTP / Magic Link (email)	✅
OTP / Magic Link (SMS)	✅
Google OAuth	✅
GitHub OAuth	✅
Apple Sign In	✅
Password Reset (via email code)	✅
Self-Service Sign-Up	✅ (configurable per sector)
Invitation Flow	✅

Multi-Factor Authentication

Feature	Available
MFA enforcement (require second factor)	✅
Multiple MFA methods per user	✅
MFA registration via <spartan-account-settings>	✅
Automatic method picker when multiple enrolled	✅

Token & Session Management

Feature	Available
JWT issuance (RSA-signed)	✅
Token introspection endpoint	✅
Traefik ForwardAuth integration	✅
Token forwarding headers (X-Auth-User, X-Auth-Subject)	✅

Multi-Tenancy

Feature	Available
Multiple sectors (isolated tenants)	✅
Per-sector security settings	✅
Per-sector OAuth providers	✅
Per-sector CORS / allowed origins	✅
Per-sector self-signup toggle	✅

Frontend

Feature	Available
<spartan-login> web component	✅
<spartan-account-settings> web component	✅
Shadow DOM (style isolation)	✅
Custom CSS via styles attribute	✅
Localization: English, French, Spanish, Japanese	✅
Vue 3 integration	✅
React integration	✅
Vanilla HTML / JavaScript	✅

Infrastructure

Feature	Available
Horizontally scalable	✅
Docker deployment	✅
In-memory datastore (dev / testing)	✅
LibSQL datastore	✅
MariaDB datastore	✅
PostgreSQL datastore	✅
Webhooks (extensibility)	✅

Developer Experience

Feature	Available
AI coding skills (AGENTS.md)	✅
OpenAPI / Swagger spec	✅
gRPC API with grpc-gateway HTTP bridge	✅