Salon/docs/adr/0003-authentica-otp-provider.md

ADR 0003: Authentica As Primary OTP Provider

Status

Accepted

Context

MVP auth is phone-first; production OTP delivery needed for KSA.

Decision

Use Authentica as production OTP provider. Keep console provider for local development/tests.

Consequences

• Production auth depends on Authentica credentials + uptime.
• Local development remains simple.
• Adding backup provider needs new adapter + runbook updates.

Alternatives Considered

• Console-only: not viable for production.
• Multi-provider from day one: deferred for scope control.

Related

• backend/apps/accounts/services/otp.py
• backend/salon_api/settings.py
• docs/runbooks/auth_otp_failures.md