To build a Python module for Multi-Factor Authentication (MFA) using Time-based One-Time Passwords (TOTP), you can use the pyotp library. Here's a Python module that includes functions to generate TOTP codes and verify them [1][2]:

Install the pyotp library using pip:

pip install pyotp

Create a Python module named mfa_module.py:

import pyotp

class MFA:
    def __init__(self, secret_key):
        self.secret_key = secret_key

    def generate_secret(self):
        return pyotp.random_base32()

    def generate_totp_uri(self, account_name):
        return pyotp.totp.TOTP(self.secret_key).provisioning_uri(name=account_name, issuer_name="YourApp")

    def generate_totp(self):
        return pyotp.TOTP(self.secret_key).now()

    def verify_totp(self, code):
        totp = pyotp.TOTP(self.secret_key)
        return totp.verify(code)

This module, mfa_module.py, defines a class MFA with the following methods:
* generate_secret(): Generates a random secret key for MFA.
* generate_totp_uri(account_name): Generates a TOTP provisioning URI for use with authenticator apps (e.g., Google Authenticator).
* generate_totp(): Generates a TOTP code based on the secret key.
* verify_totp(code): Verifies if the provided TOTP code is valid based on the secret key.

Here's an example of how you can use the module to set up MFA for a user and verify a TOTP code:

from mfa_module import MFA

# Example: Set up MFA for a user
user_secret_key = 'YourRandomSecretKey'  # Replace with your secret key or use generate_secret()
mfa = MFA(user_secret_key)

# Generate the provisioning URI and show it to the user to set up their authenticator app
provisioning_uri = mfa.generate_totp_uri("[e-mail]")
print("Provisioning URI for authenticator app:")
print(provisioning_uri)

# Example: Verify a TOTP code
user_input_code = input("Enter the TOTP code from your authenticator app: ")
if mfa.verify_totp(user_input_code):
    print("TOTP code is valid. MFA is successful.")
else:
    print("TOTP code is invalid. MFA failed.")

Replace `YourRandomSecretKey` with a random secret key generated for your users. Users should use the provisioning URI to set up their authenticator apps (e.g., Google Authenticator) for MFA. When they log in, they will enter the TOTP code generated by the app, which you can verify using the verify_totp() method.