(PHP 7 >= 7.2.0, PHP 8)
sodium_crypto_auth_verify — Verifies that the tag is valid for the message
$mac, string $message, string $key): boolVerify the authentication tag is valid for a given message and key.
Unlike with digital signatures (e.g. sodium_crypto_sign_verify_detached()), any party capable of verifying a message is also capable of authenticating their own messages. (Hence, symmetric authentication.)
macAuthentication tag produced by sodium_crypto_auth()
messageMessage
keyAuthentication key
Returns true on success or false on failure.