From bfae187a5981a6cf77958fa20351ab3247cd9877 Mon Sep 17 00:00:00 2001
From: Skylar Ittner <admin@netsyms.com>
Date: Sat, 12 Oct 2019 23:30:40 -0600
Subject: [PATCH] Add API call for adding app password

---
 api/actions/addapppassword.php | 14 ++++++++++++++
 api/apisettings.php            | 10 +++++++++-
 2 files changed, 23 insertions(+), 1 deletion(-)
 create mode 100644 api/actions/addapppassword.php

diff --git a/api/actions/addapppassword.php b/api/actions/addapppassword.php
new file mode 100644
index 0000000..356e0d2
--- /dev/null
+++ b/api/actions/addapppassword.php
@@ -0,0 +1,14 @@
+<?php
+
+/*
+ * This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/.
+ */
+
+$code = strtoupper(substr(md5(mt_rand() . uniqid("", true)), 0, 20));
+$desc = htmlspecialchars($VARS['desc']);
+$chunk_code = str_replace(" ", "-", trim(chunk_split($code, 5, ' ')));
+$database->insert('apppasswords', ['uid' => User::byUsername($VARS['username'])->getUID(), 'hash' => password_hash($chunk_code, PASSWORD_DEFAULT), 'description' => $desc]);
+
+sendJsonResp("", "OK", ["pass" => $chunk_code]);
diff --git a/api/apisettings.php b/api/apisettings.php
index 810c674..a4ee992 100644
--- a/api/apisettings.php
+++ b/api/apisettings.php
@@ -255,5 +255,13 @@ $APIS = [
             "code" => "string"
         ],
         "keytype" => "AUTH"
-    ]
+    ],
+     "addapppassword" => [
+        "load" => "addapppassword.php",
+        "vars" => [
+            "desc" => "string",
+            "username" => "string"
+        ],
+        "keytype" => "FULL"
+    ],
 ];