OTP confirmation — TOTP sign-in — strict time window

Goal: sign in as [email protected]. Only the code of the current 30-second window is accepted, and the first code must be right.