How can a single-page web app let whitelisted IPs bypass OIDC login?

I'm creating a single-page web app, currently using oidc-client-ts and AWS Cognito for authentication, with static hosting e.g. by AWS CloudFront. (External users need to log in because OIDC tokens are needed for accessi