Treat passphrase like password in import-recovery-device

Closes #8567

cli/src/commands/device/import_recovery_device.rs

@@ -12,16 +12,12 @@ crate::clap_parser_with_shared_opts_builder!(
         /// Recovery file
         #[arg(short, long)]
         input: PathBuf,
-        /// Passphrase
-        #[arg(short, long)]
-        passphrase: String,
     }
 );
 
 pub async fn main(args: Args) -> anyhow::Result<()> {
     let Args {
         input,
-        passphrase,
         config_dir,
         password_stdin,
     } = args;
@@ -31,12 +27,20 @@ pub async fn main(args: Args) -> anyhow::Result<()> {
         config_dir.display(),
     );
 
-    let mut handle = start_spinner("Loading recovery device file".into());
-
-    // TODO this is a recovery device: a new local device must be created
-    let device = load_recovery_device(&input, passphrase.into()).await?;
+    let device = {
+        let passphrase = read_password(if password_stdin {
+            ReadPasswordFrom::Stdin
+        } else {
+            ReadPasswordFrom::Tty {
+                prompt: "Enter passphrase for the recovery file:",
+            }
+        })?;
+        let mut handle = start_spinner("Loading recovery device file".into());
+        let res = load_recovery_device(&input, passphrase.into()).await?;
 
-    handle.stop_with_newline();
+        handle.stop_with_newline();
+        res
+    };
 
     let password = choose_password(if password_stdin {
         ReadPasswordFrom::Stdin

cli/tests/integration/device/import_recovery_device.rs

@@ -17,13 +17,11 @@ async fn import_recovery_device(tmp_path: TmpPath) {
         .unwrap();
 
     crate::assert_cmd_success!(
-        with_password = DEFAULT_DEVICE_PASSWORD,
+        with_password = format!("{}\n{DEFAULT_DEVICE_PASSWORD}", *passphrase),
         "device",
         "import-recovery-device",
         "--input",
-        &input.to_string_lossy(),
-        "--passphrase",
-        &passphrase
+        &input.to_string_lossy()
     )
     .stdout(predicates::str::contains("Saved new device"));
 }

newsfragments/8567.feature.rst

@@ -0,0 +1 @@
+Remove passphrase from CLI options of ``device import-recovery-device``, it is now read from the standard input like the password.