TOTP as Primary Auth — Designing a Disposable Office Booking System in a Hurry A system design case study on using TOTP as the sole authentication mechanism for a short-lived internal tool: why identity providers were overkill, why unauthorized reads don't matter when the data is meant to be broadcast, and why sometimes the best architecture is the one you can ship this week.