It doesn’t display the authentication screen. From what I see in the browser’s request history, I open the link, it makes the request to the auth/callback with the code, and then opens the main page.
I can confirm we are seeing a similar behaviour. If we open a record list in a new tab with a middle click. Corteza will return to the menu with the route /compose/namespaces?state=xxxxxxxx