#!/usr/bin/env bash

 set -e -u -o pipefail

 DUAL_CONTROL="$(command -v dual_control || printf '')"

 DUAL_CONTROL="${DUAL_CONTROL:-./dual_control}"
 
 get_key() {
   "$DUAL_CONTROL" | awk '$1 == "Key:" { print $2 }'
 }
 
 get_token() {

   "$DUAL_CONTROL" | awk '$2 == "Token:" { print $0 }'

 }
 
 qr() {
   local VAL=$1

   local MODE=${2:-ANSI}

   shift 2 || true

 
   qrencode -t $MODE $VAL
 }
 
 get_url() {
   local user="$(whoami)"
   printf "otpauth://totp/${user}?secret=$1"
 }
 
 main() {
   pushd "$(dirname $0)" > /dev/null
   local KEY="$(get_key)"
   local KEY_URL="$(get_url "$KEY")"
   local NONINTERACTIVE="$1"
 

   if command -v qrencode > /dev/null; then

     qr $KEY_URL
   else
     echo "Run 'yum install qrencode' to get a QR code"
   fi
   echo
 
   "$DUAL_CONTROL"
   local MORE
   while [[ -z "$NONINTERACTIVE" ]]; do
     read -r -p 'Another token [Y/n]? ' MORE
     MORE="${MORE:-y}"
     if [[ "${MORE/Y/y}" != 'y' ]]; then
       break
     fi
     get_token
   done
 
   popd > /dev/null
 }
 

 case "${1:-}" in
 '-h')

   cat <<EOF
 USAGE:
   $(basename $0) [--help]
   $(basename $0) [is_not_interactive]
 EOF
   exit 0
   ;;

 *)

   main "${1:-}"

 esac