Yii Dev to help with this important job
Budget: $30 – $250 USD
Task one
mobile app when user logs in, need to have automatic access to a web page that is embedded in app from yii website which needs a user name and PW to access that page
I propose the following: Mobile app requests access token to florida.com Florida.com sends access token with a X minutes life (configurable, I recommend 90 seconds in order to secure sessions) and if account does not exist it is created, if it does exist there is no change. This token is added to a get parameter, for instance, user will be sent to: florida.com/mobile-gateway?access_token=sadsuoadusahdusahd&request=jasndosadosaodsaiodjsiadjasod Where request is a base64 encoded json with login data (no passwords or sensitive data is never exposed as token verifies intentity) Florida.com validates the token and logs user in. If mobile users try to log-in, they use their mobile app password. In order to being able of validate passwords I think the better way is to send the password (AES128 encrypted to ensure protection), once it is received, laravel decrypts and validates ad answers if password is valid, if it is florida.com allows login with both passwords for existing users and with the same credentials for the new ones.
See video https://www.dropbox.com/s/mmkua6x7gda6ol0/yii-app.mp4?dl=0
mobile app when user logs in, need to have automatic access to a web page that is embedded in app from yii website which needs a user name and PW to access that page
I propose the following: Mobile app requests access token to florida.com Florida.com sends access token with a X minutes life (configurable, I recommend 90 seconds in order to secure sessions) and if account does not exist it is created, if it does exist there is no change. This token is added to a get parameter, for instance, user will be sent to: florida.com/mobile-gateway?access_token=sadsuoadusahdusahd&request=jasndosadosaodsaiodjsiadjasod Where request is a base64 encoded json with login data (no passwords or sensitive data is never exposed as token verifies intentity) Florida.com validates the token and logs user in. If mobile users try to log-in, they use their mobile app password. In order to being able of validate passwords I think the better way is to send the password (AES128 encrypted to ensure protection), once it is received, laravel decrypts and validates ad answers if password is valid, if it is florida.com allows login with both passwords for existing users and with the same credentials for the new ones.
See video https://www.dropbox.com/s/mmkua6x7gda6ol0/yii-app.mp4?dl=0