I'm using firebase auth to handle user authentication. Users are using my webapp on their phones and a core function of the app is to take the user to a third party app on their phone to handle a payment and then back to my web application. However, the third party app sends the user back to their web browser in a new window and if the user is in private or incognito mode they will be logged out, causing bad user experience. The third party app allows me to specify a callback url in which I can specify a path with some data I want to pass back to my website. Would it be possible to "login" the user with the JWT if it was passed back to my website in the url?