2FA openconnect script without sudo privileges when opening browser

my_openconnect.md

Call this with something like the following

./my_openconnect \
  --authenticate \
  --external-browser $(which firefox-nightly) \
  -u USERNAME \
  --protocol=anyconnect \
  --authgroup=AUTH_GROUP \
  URL

Note: If you are a University of Glasgow student, the username will be your GUID and the protocol must be anyconnect.

my_openconnect.sh

#!/bin/bash

COOKIE=
eval `openconnect --authenticate "$@"`
if [ -z "$COOKIE" ]; then
    exit 1
fi
tmux rename-window "VPN"

sudo openconnect --servercert "$FINGERPRINT" "$CONNECT_URL" --cookie-on-stdin ${RESOLVE:+--resolve "$RESOLVE"} <<< "$COOKIE"