Implementing TOTP Two-Factor Authentication from Scratch in Python

Most developers reach for a library when they need TOTP. That's fine for production — but if you don't understand what's underneath, you'll misconfigure the time window, miss the replay-attack problem...