Raise error when both password and key_file are provided

README.md

@@ -52,7 +52,7 @@ All parameters are optional in the raw schema except `host` and `username` — t
 
 #### Validation rules enforced by the service
 
-- Either `password` or `key_file` must be provided
+- Either `password` or `key_file` must be provided, but not both
 - Either `command` or `input` or both must be provided
 - If `key_file` is provided, the file must exist on the Home Assistant filesystem
 - `known_hosts` may not be provided when `check_known_hosts` is `false`

__init__.py

@@ -31,6 +31,13 @@ async def _validate_service_data(hass: HomeAssistant, data: dict[str, Any]) -> N
             translation_key="password_or_key_file_required",
         )
 
+    if has_password and has_key_file:
+        raise ServiceValidationError(
+            "Password and key file cannot both be provided.",
+            translation_domain=DOMAIN,
+            translation_key="password_and_key_file",
+        )
+
     has_command: bool = bool(data.get(CONF_COMMAND))
     has_input: bool = bool(data.get(CONF_INPUT))
 

strings.json

@@ -53,6 +53,9 @@
     "password_or_key_file_required": {
       "message": "Either password or key file must be provided."
     },
+    "password_and_key_file": {
+      "message": "Password and key file cannot both be provided."
+    },
     "command_or_input": {
       "message": "Either command or input must be provided."
     },

tests/unit_tests/test_validate_service_data.py

@@ -29,6 +29,11 @@ async def test_no_password_no_key_file_raises(self):
             await _validate_service_data(self.mock_hass, {"command": "echo hi"})
         self.assertEqual(ctx.exception.translation_key, "password_or_key_file_required")
 
+    async def test_password_and_key_file_raises(self):
+        with self.assertRaises(ServiceValidationError) as ctx:
+            await _validate_service_data(self.mock_hass, {"password": "secret", "key_file": "/home/user/.ssh/id_rsa", "command": "echo hi"})
+        self.assertEqual(ctx.exception.translation_key, "password_and_key_file")
+
     async def test_no_command_no_input_raises(self):
         with self.assertRaises(ServiceValidationError) as ctx:
             await _validate_service_data(self.mock_hass, {"password": "secret"})

translations/de.json

@@ -49,6 +49,9 @@
     "password_or_key_file_required": {
       "message": "Entweder Passwort oder Schlüsseldatei muss angegeben werden."
     },
+    "password_and_key_file": {
+      "message": "Passwort und Schlüsseldatei können nicht gleichzeitig angegeben werden."
+    },
     "command_or_input": {
       "message": "Entweder Befehl oder Eingabe muss angegeben werden."
     },

translations/en.json

@@ -49,6 +49,9 @@
     "password_or_key_file_required": {
       "message": "Either password or key file must be provided."
     },
+    "password_and_key_file": {
+      "message": "Password and key file cannot both be provided."
+    },
     "command_or_input": {
       "message": "Either command or input must be provided."
     },