otp

#!/bin/sh

# Get a one-time password, or add a OTP secret to your pass-otp store.

# The assumption of this script is that all otp passwords are stored with the
# suffix `-otp`. This script automatically appends newly added otps as such.

# For OTP passwords to be generated properly, it is important for the local
# computer to have its time properly synced. This can be done with the command
# below which requires the package `ntp`.

ifinstalled pass pass-otp || exit 1

dir="${PASSWORD_STORE_DIR}"

choice="$({
    echo " add"
    echo " sync-time"
    find "$dir"/otp/*-otp.gpg
} | sed "s/.*\///;s/-otp.gpg//" | dmenu -i -l 10 -p " Pick a 2FA:")"

case $choice in
' add')
    ifinstalled maim zbar || exit 1
    temp=$(mktemp -p "$XDG_RUNTIME_DIR" --suffix=.png)
    otp="otp-test-script"
    trap 'rm -f $temp; pass rm -f $otp' HUP INT QUIT TERM PWR EXIT

    notify-send " Scan the image." "Scan the OTP QR code."

    maim -s "$temp" || exit 1
    info="$(zbarimg -q "$temp")"
    info="${info#QR-Code:}"

    if echo "$info" | pass otp insert "$otp"; then
        while true; do
            name="$(echo | dmenu -p " Give this One Time Password a one-word name:")"
            export name
            echo "$name" | grep -q -- "^[A-z0-9-]\+$" && break
        done
        pass mv "$otp" otp/"$name-otp"
        notify-send " Successfully added." "$name-otp has been created."
    else
        notify-send " No OTP data found." "Try to scan the image again more precisely."
    fi
    ;;
' sync-time')
    ifinstalled ntp || exit 1
    notify-send -u low " Synchronizing Time..." "Synching time with remote NTP servers..."
    updatedata="$(sudo ntpdate pool.ntp.org)" &&
        notify-send -u low " Synchronizing Time..." "Done. Time changed by ${updatedata#*offset }"
    ;;
*) pass otp -c "otp/${choice}-otp" ;;
esac