title: Cross-client Identity server to client passing access token
body: <p>I am implementing a web application with client and server running on different domains.</p>
  
  <p>I have implemented google based authentication using spring security on server side.</p>
  
  <p>Now, when client calls for login API, server redirects it to google page for authentication. After authentication done, server needs to send <code>access_token</code> to client.</p>
  
  <p>As client is sitting on different domain, I am not able to pass <code>access_token</code> in header or cookie using <code>response.sendRedirect(baseUrl)</code></p>
  
  <p>Is there any other way to handle token based authentication in such situation.</p>