Behind the 6-digit code: Building HOTP and TOTP from scratch (blog.dogac.dev)