I'm using Laravel and Vue in an SPA and am integrating my app with another app. The second app has my app in an iframe. However, once my app is loaded in their iframe and a user is authenticated, I would like the user to have the option to open my app outside of the iframe by clicking on a button. After authenticating the user on my server, my plan was to send the JWT back to the client and then log in the user with the token (this is while my app is within the other app's iframe):

await this.$store.dispatch('auth/saveToken', {
  token: token
})

If I refresh the page within the iframe, then the user is logged in, so I know that this is working.

However, when I try to open in a new tab:

let route = this.$router.resolve({ path: this.url })
 window.open(route.href)

the user is logged out.

Am I missing a step so that the user will stay logged in even if the app opens in a new tab and outside of the original iframe?