@rod Cloudfront is requesting on port 80. Would do 443 but I don't have access to the raw ssl certificates because I'm using AWS's certificate manager for free wildcard certs.
I ended up creating an oauth plugin for my app based off of this skeleton:
https://github.com/julianlam/nodebb-plugin-sso-oauth
and instead linked it to https://forum.mysite.com/auth/myapp and it performs the intended functionality.