References

IETF specs

Passlib TOTP Tutorial

An example of how Dropbox enables two-factor authentication using TOTP