Thanks Ruben, again the current settings were just those I was playing around with. Our same situation described above happens regardless of the period of time in days it is set to.
I experimented setting the Expiry in Days to 1 day to force the flow of needing to reset the password. Which again did not work as I kept getting redirected as described above.
From what I can tell the flow is broken or something about how we are using Auth0 in react maybe?
It would be helpful if I could view the source code for the Password Rotation login action. Could you point me to that?