feat: add code_mfa_enabled support to ory_project_config

[KT-Doan]

Description

Add the missing code_mfa_enabled attribute to the ory_project_config resource, allowing users to configure the code method as a second factor for MFA via Terraform.

This was reported in #122 — the mfa_enabled setting under selfservice->methods->code was not exposed in the provider.

Related Issues

Fixes #122

Type of Change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update

Checklist

• I have read the CONTRIBUTING guide
• My code follows the existing code style
• I have added tests that prove my fix/feature works
• I have updated documentation as needed
• All new and existing tests pass (make test)
• I have run the linter (make format)

Testing

• Unit tests
• Acceptance tests
• Manual testing

Changes

• Model: Added CodeMFAEnabled field (tfsdk:"code_mfa_enabled")
• Schema: Added code_mfa_enabled boolean attribute with description
• Write (buildPatches): Maps to API path /services/identity/config/selfservice/methods/code/mfa_enabled
• Read (readProjectConfig): Reads from selfservice.methods.code.mfa_enabled
• Tests: Added TestAccProjectConfigResource_codeMFA with create, import, update, and no-diff verification steps
• Examples: Updated ory_project_config example to show code_mfa_enabled usage
• Docs: Auto-regenerated via make format

Acceptance Test Results

=== RUN   TestAccProjectConfigResource_codeMFA
--- PASS: TestAccProjectConfigResource_codeMFA (10.03s)

Pre-commit Checks

• make build — pass
• make format — pass (0 lint issues)
• make test-short — pass (all unit tests pass)
• make sec — pass (govulncheck, gosec, gitleaks all clean)
• make sec-trivy — pass (no vulnerabilities)

Usage

resource "ory_project_config" "main" {
  enable_code      = true
  code_mfa_enabled = true
}

[Copilot]

Pull request overview

Adds support for configuring code-based MFA (selfservice.methods.code.mfa_enabled) via the ory_project_config Terraform resource.

Changes:

• Exposes new code_mfa_enabled boolean in the resource model and schema.
• Maps the attribute to the corresponding Ory Identity config write/read paths.
• Adds acceptance coverage plus example + generated docs updates.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
internal/resources/projectconfig/resource.go	Adds the code_mfa_enabled schema/model field and wire-up to API patch/read mappings.
internal/resources/projectconfig/resource_test.go	Adds an acceptance test covering create/import/update and plan-only verification.
internal/resources/projectconfig/testdata/code_mfa.tf.tmpl	Introduces test config template for toggling code_mfa_enabled.
examples/resources/ory_project_config/resource.tf	Documents usage of code_mfa_enabled in the example config.
docs/resources/project_config.md	Updates generated docs to include code_mfa_enabled and example snippet.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[Copilot]

Pull request overview

Adds Terraform support for configuring selfservice.methods.code.mfa_enabled via a new code_mfa_enabled attribute on the ory_project_config resource (fixing the gap reported in #122).

Changes:

• Added code_mfa_enabled to the resource model/schema and wired it to API read/write mappings.
• Added acceptance test coverage for create/import/update/no-diff behavior.
• Updated example and generated docs to include the new attribute.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
internal/resources/projectconfig/testdata/code_mfa.tf.tmpl	Adds acceptance-test template to configure code_mfa_enabled.
internal/resources/projectconfig/resource_test.go	Adds acceptance test validating CRUD/import and no-perpetual-diff for code_mfa_enabled.
internal/resources/projectconfig/resource.go	Extends model/schema and maps code_mfa_enabled to the Ory config paths for read/write.
examples/resources/ory_project_config/resource.tf	Updates example usage to demonstrate code_mfa_enabled.
docs/resources/project_config.md	Updates generated docs and example snippet to include code_mfa_enabled.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.