This already exists for the Discourse mobile apps. The only thing that would stop it working as described is that people would have to add your website’s URL to their allowed user api auth redirects site setting.
I don’t think it’s actually documented anywhere, so getting the app working would require reading through the source code of Discourse and DiscourseMobile.