2FA, OTP, WTF?

Walks through implementing One Time Passwords, what happens under the hood of expiring tokens, and a legitimate use case for QR codes, plus how to pick the right 2FA approach for an application.