added authentication via api key for some limited api methods (fix #64)

src/main/java/com/commafeed/backend/dao/UserDAO.java

@@ -29,4 +29,19 @@ public class UserDAO extends GenericDAO<User> {
 		return user;
 	}
 
+	public User findByApiKey(String key) {
+		CriteriaQuery<User> query = builder.createQuery(getType());
+		Root<User> root = query.from(getType());
+		query.where(builder.equal(root.get(User_.apiKey), key));
+		TypedQuery<User> q = em.createQuery(query);
+
+		User user = null;
+		try {
+			user = q.getSingleResult();
+		} catch (NoResultException e) {
+			user = null;
+		}
+		return user;
+	}
+
 }

src/main/java/com/commafeed/backend/model/User.java

@@ -31,6 +31,9 @@ public class User extends AbstractModel {
 	@Column(length = 256, nullable = false)
 	private byte[] password;
 
+	@Column(length = 40, unique = true)
+	private String apiKey;
+
 	@Column(length = 8, nullable = false)
 	private byte[] salt;
 
@@ -99,4 +102,12 @@ public class User extends AbstractModel {
 		this.lastLogin = lastLogin;
 	}
 
+	public String getApiKey() {
+		return apiKey;
+	}
+
+	public void setApiKey(String apiKey) {
+		this.apiKey = apiKey;
+	}
+
 }