Additional command in 2fa that will spin up a http server with qr codes suitable for printing/scanning into a mobile device.

another constructor in keymakers.go

parsing/building uri strings can go in separate file, as can validation.

2fa expects full commands, like 'calc', 'list', 'init'. Program should support single letter commands.

use named regex; counting groups is hacky at best

need to get a bunch of sample uri and put together a test fixture.

my own auth cli

• Index page with QR code/otpauth URI and login credentials: / (GET)
• Login page: /login (GET, POST)
• Two-factor page: /authenticate (GET, POST)
• Private page: /dash
• Super secret page that requires recent 2-factor verification (to mimic account settings page, API key stuff you find on github, etc.): /account

Use middleware chains to handle security and redirection.

Since this is demo, just maintain an internal key-value server for token management. Break up those functions and illustrate how they could point at another service (ie Redis). Will have to mimic expiration for otp tokens.

make var and func names more consistent

Currently, returns a bool and an error, which is dumb. Let's return an error to indicate false and nil for true.

Clean up, proofread, expand