title: Google + OAuth2 Callback to Angular
body: <p>I am having problem implementing Google Plus Web Server authentication</p>
  
  <p><a href="https://developers.google.com/accounts/docs/OAuth2WebServer" rel="nofollow">https://developers.google.com/accounts/docs/OAuth2WebServer</a></p>
  
  <p>I have implemented most of the steps, until the last step, I have no idea how to make a callback with token to my Angular.JS, </p>
  
  <p>I found an article which solves my problem (and it has the same implementation as mine): </p>
  
  <p><a href="http://apicatus-laboratory.rhcloud.com/2014/04/13/handling-oauth-callbacks-in-spa/" rel="nofollow">http://apicatus-laboratory.rhcloud.com/2014/04/13/handling-oauth-callbacks-in-spa/</a></p>
  
  <p>But, I have few questions for this article,</p>
  
  <ul>
  <li>is this way legit??? or any other security flaws that I need to consider?</li>
  <li>what is the normal way to do it? if I dont want to use Google SDK, cookie and session to send the token back to my Angular, what other possible ways to send token to my Angular app?</li>
  <li>how the normal angular app handle the callback?</li>
  </ul>