WordPress OTP Verification Plugin

I need a small, well-structured WordPress plugin that injects mobile-based OTP verification into two core workflows—new user registration and password-reset. When a visitor submits either form the plugin should pause completion, fire an OTP request through my own SMS gateway (I’ll supply the full API documentation), then validate the code before letting WordPress finish the process.

Preference & gateway
• I’m not using Twilio, Nexmo or MSG91. Everything must run through the custom gateway whose REST/JSON docs I’ll provide the moment the project starts.

Core expectations
• Hook cleanly into the native registration and lost-password endpoints—no theme hacks.
• Send, resend and expire codes on a timer that can be set in the admin panel.
• Add a settings page where I can paste API keys, sender ID, message template and choose country code behaviour.
• Log each request and response so I can debug delivery issues.
• Keep the code portable: standard WordPress coding standards, namespaced, object-oriented.
• Deliver a zip ready for upload plus concise install instructions.

Acceptance test
The plugin will be considered complete when a fresh WordPress install, with only this plugin activated, can create a new account and reset a password successfully after entering the SMS code delivered via my gateway.

That’s the whole scope; let’s keep it lightweight, secure and easy to maintain.