Based heavily upon the Drupal TFA module TOTP plugin, which itself was based heavily upon the Drupal Google Authenticator login module.