What is the best way to make common authorization for different applications (wordpress and yii2)?

Question

User identification

GENERAL INFORMATION:
- There are two applications. One for wordpress and one for yii2 .
- Located on the same domain, wp on the main, yii2 on a subdomain (cookies exist for the whole domain with subdomains)
- Use one database. The table of users from wp is taken as a basis.
- Use wp login to log in
WHAT IS NEEDED :
Authorize user in yii application if he is logged in wp
PROBLEM POINT :
How to get information about authorized user in WP on yii2 side of application?
It turns out that I need to check whether the user is authorized in WP and get his ID in order to authorize him in YII2 or log out if necessary.
What is the best way to do this? Calling the REST API (if so, how to get the nonce so that the request returns the correct information)?