title: Share Spring OAuth2 client session cookie with SPA (React or Angular)
body: <p>In  specification for <a href="https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps#section-6.2" rel="nofollow noreferrer">OAuth 2.0 for Browser-Based Apps</a> (React or Angular) at page 7 for the case when we have backend (BFF) we can see that at the end of the flow:</p>
  <p><em>The application server then keeps the access token and refresh token
  stored internally, and creates a separate session with the browser-
  based app via a traditional browser cookie (H).</em></p>
  <p>I use <strong>spring-security-oauth2-client</strong> and new <strong>spring-security-oauth2-autorization-server</strong> how I can create <em>separate session with the browser-based app via a traditional browser cookie</em> a the end of the flow? Or I have to share <strong>sessionId</strong> with my React or Angular application? But how I can do this?</p>