I managed quite easily to get oauth authentication working in a fresh install of TLJH (using the AWSCognitoAuthenticator). As a next step I attempted to pass the access tokens to the spawner in order to enable API calls in the notebook which requires setting auth_state_enabled=True as detailed here. This however throws MultipleInstanceErrors when doing a configuration reload. More details can be found in this issue
If anyone have hints towards a working solution for setting this up for TLJH deployments, feedback would be highly appreciated. Thanks!