Two-factor codes

use totp.qweruse totp_secret, totp_code from totp      // Quillo 0.6: only these

totp-rs = { version = "5", features = ["gen_secret", "otpauth"] }

// Setting up two-factor sign-in, and checking a code.////   quillo run totp.qwe      then open http://localhost:8080/setupuse "totp.qwer"route GET /setup {    let secret = totp_secret()    { secret, link: totp_url(secret, "Quillo Shop", "ada@example.com")? }}route GET /check {    let secret = totp_secret()    let code = totp_code(secret)?    { code, right: totp_verify(secret, code)?, wrong: totp_verify(secret, "000000")? }}

//! Two-factor sign-in with authenticator apps (TOTP, RFC 6238): secrets, codes, checks and the otpauth:// link.//! version: 1.0.0//!//! [dependencies]//! totp-rs = { version = "5", features = ["gen_secret", "otpauth"] }use totp_rs::{Algorithm, Secret, TOTP};fn totp(secret: &str, issuer: &str, account: &str) -> Result<TOTP, String> {    let bytes = Secret::Encoded(secret.trim().replace(' ', "").to_uppercase()).to_bytes().map_err(|e| format!("{:?}", e))?;    let issuer = if issuer.is_empty() { None } else { Some(issuer.to_string()) };    TOTP::new(Algorithm::SHA1, 6, 1, 30, bytes, issuer, account.to_string()).map_err(|e| e.to_string())}/// A new secret, as base32 text: keep it with the user, and show it once (as a link or a QR code).pub fn totp_secret() -> String {    match Secret::generate_secret().to_encoded() {        Secret::Encoded(s) => s,        Secret::Raw(_) => unreachable!(),    }}/// The 6-digit code for `secret` now, as an authenticator app shows it.pub fn totp_code(secret: &str) -> Result<String, String> {    totp(secret, "", "user")?.generate_current().map_err(|e| e.to_string())}/// Whether `code` is right for `secret` now, or 30 s either side. Count tries yourself: there are a million codes.pub fn totp_verify(secret: &str, code: &str) -> Result<bool, String> {    totp(secret, "", "user")?.check_current(code.trim()).map_err(|e| e.to_string())}/// The `otpauth://` link an app adds the account from: put it in a QR code (the qr plugin) for the set-up page.pub fn totp_url(secret: &str, issuer: &str, account: &str) -> Result<String, String> {    Ok(totp(secret, issuer, account)?.get_url())}