Spark + Passport? + Dingo?

Hi,

I am starting on a fresh app and hope to:

1. Use only API routes so that I can power the web site and also mobile apps.
2. Be able to authenticate mobile apps against the API to make sure the subscription is active
3. Let the mobile apps run offline after confirming the subscription is active
4. Have the token expire after some time, so the user has to reauthenticate periodically and verify active subscription

From what I understand so far, Spark will out the box allow for #1. There is a great video demonstrating this on Laracasts. For #'s 2-4 I have some confusion.

Do I need to install Passport for this?

If using Passport, do I also need to use Dingo?

If using Dingo, do I need to use Passport?

How is this related to the API Key functionality Spark makes available through the Kiosk?

I am not seeking to create user accessible API keys with custom permissions, etc. This is only for having other clients that I've created work with the backend for auth and syncing of the data.

Many thanks for your thoughts and guidance :) Mike