From cf90f0b38204127b8466014a9d4c8489c4f4567a Mon Sep 17 00:00:00 2001
From: andre <1+andre@noreply.192.168.100.5>
Date: Sat, 23 May 2026 11:18:45 +0200
Subject: [PATCH] =?UTF-8?q?Endurain/auth-n-upload.sh=20hinzugef=C3=BCgt?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 Endurain/auth-n-upload.sh | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 Endurain/auth-n-upload.sh

diff --git a/Endurain/auth-n-upload.sh b/Endurain/auth-n-upload.sh
new file mode 100644
index 0000000..d1afc17
--- /dev/null
+++ b/Endurain/auth-n-upload.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+SERVER="http://192.168.100.5:10000"
+USER="admin"
+PASS="admin"
+
+# Login starten
+curl -s -X POST \
+  "$SERVER/api/v1/auth/login" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -H "X-Client-Type: mobile" \
+  -d "username=$USER&password=$PASS" >/dev/null
+
+TOTP_SECRET="RXYMA5MLSBADJX4XM3UG74LTVOS6QQ6J"
+MFA=$(oathtool --totp -b "$TOTP_SECRET")
+
+# MFA verifizieren
+TOKENS=$(curl -s -X POST \
+  "$SERVER/api/v1/auth/mfa/verify" \
+  -H "Content-Type: application/json" \
+  -H "X-Client-Type: mobile" \
+  -d "{
+    \"username\": \"$USER\",
+    \"mfa_code\": \"$MFA\"
+  }")
+ACCESS_TOKEN=$(echo "$TOKENS" | jq -r '.access_token')
+
+curl -X POST \
+  "$SERVER/api/v1/activities/create/upload" \
+  -H "Authorization: Bearer $ACCESS_TOKEN" \
+  -H "X-Client-Type: mobile" \
+  -F "file=@activity.gpx"