There's something called "Macaroons" that can be used for this.

"Macaroons: Cookies with Contextual Caveats for Decentralized Authorization in the Cloud" Arnar Birgisson, Joe Gibbs Politz, Úlfar Erlingsson, Ankur Taly, Michael Vrable, Mark Lentczner ; Network and Distributed System Security Symposium, Internet Society (2014)

https://research.google/pubs/pub41892/

"Google's Macaroons in Five Minutes or Less" https://blog.bren2010.io/2014/12/04/macaroons.html

A Javascript implementation: https://github.com/nitram509/macaroons.js