This is one of those "I dont even know what I dont know" situations. Sorry if I sound confused or make rookie mistakes. Any help, including reading material, would be appreciated.
I am trying to build for work a service that relies on confidential data from another service.
Say, a user is logged in in
service1. The user clicks a link to
service2 need to be aware of sensitive data stored in
service1 servers. Also,
service2 allows users to consume credits that they payed for with money and that might be useful to attackers, so it needs to be sure of the users identity, as provided by
It is a requirement that
service2 live on different servers and use different domains. Is also is a requirement that the user goes from
service2 clicking a link. Afaik, this means that the only data
service2 can obtain is on the URL itself.
My proposed solution:
1) User clicks to go from
service2 receives this key and sends it to
Service1 sends the data directly to
As far as I can tell, the data is (by definition) secure. But there is still the problem that an attacker might obtain the one time key and use it instead.
But there is much I don't understand, and I don't even know what to search.
Any help/comment/reading material appreciated.