A minor problem is that auth app has to return back to the browser with a new link which the browser may not be able to open within the original login tab.
I don't think that is the case. After the auth app communicates with the server you just need to click the login button on the original page. I don't think the auth app needs to load a specific url.