1 files changed, 55 insertions, 0 deletions
diff --git a/internal/command/twofactorverify/twofactorverify.go b/internal/command/twofactorverify/twofactorverify.go
new file mode 100644
index 0000000..afd8e47
--- /dev/null
+++ b/internal/command/twofactorverify/twofactorverify.go
@@ -0,0 +1,55 @@
+package twofactorverify
+
+import (
+	"context"
+	"fmt"
+	"io"
+
+	"gitlab.com/gitlab-org/gitlab-shell/internal/command/commandargs"
+	"gitlab.com/gitlab-org/gitlab-shell/internal/command/readwriter"
+	"gitlab.com/gitlab-org/gitlab-shell/internal/config"
+	"gitlab.com/gitlab-org/gitlab-shell/internal/gitlabnet/twofactorverify"
+)
+
+type Command struct {
+	Config     *config.Config
+	Args       *commandargs.Shell
+	ReadWriter *readwriter.ReadWriter
+}
+
+func (c *Command) Execute(ctx context.Context) error {
+	err := c.verifyOTP(ctx, c.getOTP())
+	if err != nil {
+		return err
+	}
+
+	return nil
+}
+
+func (c *Command) getOTP() string {
+	prompt := "OTP: "
+	fmt.Fprint(c.ReadWriter.Out, prompt)
+
+	var answer string
+	otpLength := int64(64)
+	reader := io.LimitReader(c.ReadWriter.In, otpLength)
+	fmt.Fscanln(reader, &answer)
+
+	return answer
+}
+
+func (c *Command) verifyOTP(ctx context.Context, otp string) error {
+	client, err := twofactorverify.NewClient(c.Config)
+	if err != nil {
+		return err
+	}
+
+	err = client.VerifyOTP(ctx, c.Args, otp)
+	if err == nil {
+		fmt.Fprint(c.ReadWriter.Out, "\nOTP validation successful. Git operations are allowed for the next 15 minutes.\n")
+	} else {
+		fmt.Fprintf(c.ReadWriter.Out, "\nOTP validation failed.\n%v\n", err)
+	}
+
+	return nil
+}