I currently have similar thing, my strategy is by using JWT token. The QR contains link to some particular web API which has JWT token as URL parameter. You can do the processing of JWT token all inside the target web API.
thanks for the update. Can i know more info about it? any link can be share?
I use JJWT library. JWT is quite common these days, normally is used as authorization token, for example mobile authentication. You can find lots of tutorial available in the internet.
----
