Authenticating users and m2m with same middleware

Ah. You need to be using the same Auth0 tenant for your users and your M2M tokens.
You have different issuers/signers now. That won’t work unless you explicitly configure the middleware for that (you can do that, I am not an express expert so I don’t know how, but you probably want them in the same tenant anyway)

John