From what I understand, this is basically what happens for most online credit card payments. If you enter your credentials, you're redirected to a verification

From what I understand, this is basically what happens for most online credit card payments. If you enter your credentials, you're redirected to a verification page by the issuer where you have to enter a password or SMS-sent key. On success, this page then passes a signed token (or similar) back to the original online shop as confirmation.