@jmangelo So my understanding is that it is not possible to use API Authorization with Lock. If this is true, may I kindly suggest that you WRITE THIS IN BOLD in the documentation.
For instance in:
https://auth0.com/docs/quickstart/spa/vanillajs/03-calling-an-api