cli password confirmation (#38)

lib/minisign/cli.rb

@@ -67,6 +67,12 @@ def self.generate(options)
  else
  print 'Password: '
  password = prompt
+ print "\nPassword (one more time): "
+ password_confirmation = prompt
+ if password != password_confirmation
+ puts "\nPasswords don't match"
+ exit 1
+ end
  print "\nDeriving a key from the password in order to encrypt the secret key..."
  keypair = Minisign::KeyPair.new(password)
  File.write(secret_key, keypair.private_key)

spec/minisign/e2e_spec.rb

@@ -11,8 +11,7 @@
  keyname = 'ruby-encrypted'
  exe = 'minisign'
  password = SecureRandom.uuid
- # TODO: prompt a second time for password confirmation
- command = "echo '#{password}' | #{exe} -G -p #{path}/#{keyname}.pub -s #{path}/#{keyname}.key"
+ command = "echo '#{password}\n#{password}' | #{exe} -G -p #{path}/#{keyname}.pub -s #{path}/#{keyname}.key"
  `#{command}`
  # prompt -f
  expect(`#{command} 2>&1`).to match('Key generation aborted:')
@@ -22,6 +21,8 @@
  expect(output).to match("The public key was saved as #{path}/#{keyname}.pub - That one can be public.")
  public_key = File.read("#{path}/#{keyname}.pub").split("\n").pop
  expect(output.gsub('+', '')).to match("minisign -Vm <file> -P #{public_key}".gsub('+', ''))
+ command = "echo '#{password}\nnottherightpassword' | #{exe} -G -p #{path}/#{keyname}.pub -s #{path}/#{keyname}.key"
+ expect(`#{command} -f 2>&1`).to match("Passwords don't match")
  end
  it 'signs files' do
  path = 'test/generated'