Popular services like Google and Apple show users a prompt when a login attempt is made. There is no requirement for a software one-time token. An example would be the user logging into a service and then confirming the login attempt on a registered device. The function of push notification is to alert the user of a login attempt while relaying location information. The user may approve or deny the attempt.