Based on how-to-implement-two-factor-authentication-2fa-in-golang.
What the article doesn't say is that you need a configuration for the app with google authenticator. I haven't implemented that as yet.
Hiding the api key with .gitignore
is essential before you commit. You have been reminded.