[FEATURE REQUEST] Consider masking API key on profile create <name>

[matanlurey]

I am not sure whether the current behavior is intentional or not, but I was walking through setting up a Fastly app for the first time, and went through this workflow:

$ fastly profile list

No profiles defined. To create a profile, run:
    fastly profile create <name>

$ fastly profile create hello-fastly

An API token is used to authenticate requests to the Fastly API. To create a token, visit
https://manage.fastly.com/account/personal/tokens

$ Fastly API token:

At this stage, when copying the API token in, there is no indication anything happened (no masked API key, or anything), so I made a mistake once or twice- it would be nice to show : * (assuming that's not a security issue I'm not aware of).

Thanks!

[Integralist]

Thanks @matanlurey

I'd agree with having some kind of indicator as just space is very ...unnerving 😄

Looks like it uses https://pkg.go.dev/golang.org/x/term#ReadPassword

I've not worked with that before and so I can't comment on how straightforward it would be to implement asterisks around it.

[matanlurey]

Yeah unfortunately a lot of the go ecosystem is quite, how do I say this ... minimalist :) It looks like there might be a reasonable path but I can't comment on how idiomatic this is.

Thanks for considering!