We are experiencing issues with several users, more than 5% overall, where oxAuth fails to validate the TOTP code entered in the form. We have already ruled out time drift problems and cannot understand nor replicate the issue consistently. My guess is that users are slow in performing the various steps and server side session or cache are somehow responsible for the problem. Thanks