From 7c44b188540963adb561547e40fc04d256c33e01 Mon Sep 17 00:00:00 2001
From: Skylar Ittner <admin@netsyms.com>
Date: Wed, 20 Dec 2017 17:37:40 -0700
Subject: [PATCH] Add checkAPIKey($key) function to login.php

---
 lib/login.php | 31 +++++++++++++++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/lib/login.php b/lib/login.php
index 326deae..385f28e 100644
--- a/lib/login.php
+++ b/lib/login.php
@@ -1,7 +1,7 @@
 <?php
 
 /**
- * Authentication and account functions.  Connects to a Portal instance.
+ * Authentication and account functions.  Connects to an AccountHub instance.
  */
 
 /**
@@ -35,6 +35,33 @@ function checkLoginServer() {
     }
 }
 
+/**
+ * Checks if the given AccountHub API key is valid by attempting to 
+ * access the API with it.
+ * @param String $key The API key to check
+ * @return boolean TRUE if the key is valid, FALSE if invalid or something went wrong
+ */
+function checkAPIKey($key) {
+    try {
+        $client = new GuzzleHttp\Client();
+
+        $response = $client
+                ->request('POST', PORTAL_API, [
+            'form_params' => [
+                'key' => $key,
+                'action' => "ping"
+            ]
+        ]);
+
+        if ($response->getStatusCode() === 200) {
+            return true;
+        }
+        return false;
+    } catch (Exception $e) {
+        return false;
+    }
+}
+
 ////////////////////////////////////////////////////////////////////////////////
 //                           Account handling                                 //
 ////////////////////////////////////////////////////////////////////////////////
@@ -213,7 +240,7 @@ function doLoginUser($username) {
     }
 
     $resp = json_decode($response->getBody(), TRUE);
-    
+
     if ($resp['status'] == "OK") {
         $userinfo = $resp['data'];
         $_SESSION['username'] = $username;