bitwarden -> teleport login.sh

function bw_unlock() {
  if ! bw unlock --check;
  then
    export BW_SESSION="$(bw unlock --raw)"
  fi
}

function tsh_login() {
  bw_unlock
  password=$(bw get password <teleport-vault-name>)
  otp=$(bw get totp <teleport-vault-name>)
  user=<your_name>

  if ! tsh status; then
    expect -c "
        spawn tsh login --proxy=teleport.iamport.co --user=$user --auth=local --mfa-mode=otp
        expect {
            -re \"Enter password for Teleport user $user:\" {
                send -- \"$password\r\"
                exp_continue
            }
            -re \"Enter an OTP code from a device:\" {
                send -- \"$otp\r\"
            }
        }
        interact
    "
  fi
}