Is there a way to implement the web playback sdk with spotify auth token stored in http only cookie

[Ar-sen]

Plan

Premium

Country

France

Device

Web dev, widget, Pc 

Operating System

Windows

My Question or Issue

Hi, i'm implementing spotify auth token inside my app. We put it inside the cookie of browser, with flag http-only , then the frontend can't read the token and we read it only server side, so it can't be sniff and it's more secure. 

But here our problem is we need to implement spotify web playback sdk, who needs the token provided in frontend to work. Then it makes it not possible with the cookie flagged http-only, we have to make it visible.

Can we implement the widget a way it would read the auth token in cookie, flagged http-only , on server side ?  like with a special cookie_key , that the widget would request to work ? or does that special key exist already ?  Then we could keep the token out of front, and by caling the callback just set the cookie 🙂 

Have a nice day !