OIDC app - No implict grant - Session Management

In general implicit grant type is discouraged for web applications with backends and Access/ID token is not sent to the browser.

What is the recommended approach to maintaining browser session with serverless web applications?

Thanks,
RJ