Introduce CLI (#14)

[blackheaven]

No description provided.

[cdepillabout]

This seems like a reasonable CLI tool to provide.

I think the README, CHANGELOG, etc, still need to be cleaned up, but the general direction seem reasonable.

@Vlix any objection to providing a tool like this?

[cdepillabout]

Left a few comments if we decide we want this CLI tool.

[Vlix]

Thanks for the PR!

I've left a few comments with some questions and/or suggestions, but at first glance it seems fine as a first MVP. (If we want to provide a useful, secure CLI, this will definitely take many many additions and tweaks in the coming years 😅 )

[Vlix]

@Vlix any objection to providing a tool like this?

This is actually one of the issues that we have open right now #14 😄

@blackheaven Thank you for the effort of setting this up 👍
It'll probably take a good few iterations before we're happy with a first release of a password CLI, but we have to start somewhere. 😎

[Vlix]

I'd also like to see some tests for the CLI to make sure it functions as expected.
Not sure how those would look like. Maybe something using the process library?

[blackheaven]

updated, let me know what you think

[cdepillabout]

I'd also like to see some tests for the CLI to make sure it functions as expected.
Not sure how those would look like. Maybe something using the process library?

One of the problems with this is that Cabal / cabal-install / stack don't really give you any guarantee what sort of environment test-stanza's will be run in. So you're not really guaranteed that the test suite will be run in an environment with the executable available.

I don't necessarily think we shouldn't add tests like this, but let's make it either disabled by default, or add a flag to the .cabal file to easily disable it for users that have trouble with it because of their build system.

[Vlix]

I've tested a bit, and would indeed like to have the hSetEcho stdin (that's the handle to turn echoing off when typing in the terminal, right?) set to False during requesting the password. (set it back to True with finally)
Also, doing password-cli hash {algo} --help doesn't actually give any explanation of the options. Only a summary of them at the top in the USAGE section.

And a few more requests:

• Add - password-cli to the stack.yaml's packages: array
• Bump the resolver to 21.13

[Vlix]

It's beginning to look pretty good.

Thanks for all the effort 😄

[Vlix]

@cdepillabout Do you want to take one more look and check if anything essential is missing? Or anything unsafe / unsecure?

I'm probably going to add more documentation and extend the README after this is merged in, and maybe add some extra options while I'm at it.
Before publishing, we probably want to make the CLI a bit more feature complete, but this is a solid start, methinks, and this PR can at least be merged into the main code base.

[cdepillabout]

LGTM, thanks for this!