We’re implementing a ‘BFF’ (Backend for Frontend) pattern for our application, which is a recommendation from the draft-ietf-oauth-browser-based-apps.