Yii 1.xx dev job to make api to login

Task one mobile app when user logs in, need to have automatic access to a web page that is embedded in app from yii website which needs a user name and PW to access that page I propose the following: Mobile app requests access token to website -- website sends access token with a X minutes life (configurable, I recommend 90 seconds in order to secure sessions) and if account does not exist it is created, if it does exist there is no change. This token is added to a get parameter, for instance, user will be sent to: website/mobile-gateway?access_token=sadsuoadusahdusahd&request=jasndosadosaodsaiodjsiadjasod Where request is a base64 encoded json with login data (no passwords or sensitive data is never exposed as token verifies intentity) website validates the token and logs user in. If mobile users try to log-in, they use their mobile app password. In order to being able of validate passwords I think the better way is to send the password (AES128 encrypted to ensure protection), once it is received, laravel decrypts and validates ad answers if password is valid, if it is website allows login with both passwords for existing users and with the same credentials for the new ones. WE have a video of the whole job to show There is No mobile app work for u to do.