Best way to create and validate keys?

[matthewcummings]

I need to implement functionality which does the following:

• Allows for API key creation per user
• Allows a user to delete (revoke) keys

I also need an endpoint which I can use to check that an API key is valid.

I'm not sure where to start with this and I'm wondering if you have any recommendations or good examples for me to follow.