Developed and integrated a security-focused authentication feature for the AllStarLink/app_rpt repository, enabling privileged command access through RFC 6238-compliant TOTP-based DTMF authentication. The work involved backend development in C, leveraging the Asterisk API and OpenSSL 3.0’s EVP_MAC interface for HMAC-SHA1 verification, while ensuring strict RFC 4648 base32 decoding for user secrets. The implementation introduced robust session management, per-user lockout mechanisms, replay protection, and dynamic configuration, all accessible via CLI commands. Comprehensive documentation and configuration scaffolding were provided, establishing a foundation for auditable admin actions and enhancing the security posture of node administration workflows.