#!/usr/bin/env bash

source ~/cycling/.config

MFA_CODE=$(oathtool --totp -b "$TOTP_SECRET")

TOKENS=$(curl -s -X POST \
  "$SERVER/api/v1/auth/mfa/verify" \
  -H "Content-Type: application/json" \
  -H "X-Client-Type: mobile" \
  -d "{
    \"username\": \"$USER\",
    \"mfa_code\": \"$MFA_CODE\"
  }")

echo "$TOKENS" | jq -r '.access_token'