I have this working and am writing it up. The app demonstrates bi-directional Streamlit-to-Component communication, integrated authentication with Auth0 IdP which supplies jwt tokens which can be used to call secure API endpoints. The component is written in Next.js so can take advantage of its “serverless” API goodness.