It appears that there’s a reasonable trick available for this pattern, answered originally by @jinnyzor
if one passes ‘request=flask.request’ as a parameter into their background callback, the session token should be available and one can manually log in a user.