Identifying an authenticated user in back-end page requested via window.open

Question

We use IdentityServer4 in our .NET solution, which also includes AspNetCore Web API and Angular front-end app.

There are s