After following the guide creating a new Auth0 SPA app, running even the sample yields issue when it tried to get a token.
target: POST https://{xxxxxxxxxxx}.au.auth0.com/oauth/token
result: {“error”:“access_denied”,“error_description”:“Unauthorized”}
It is a headscratch how the “hello world” of such a known user management tool is this confusing and irritating to integrate with. I saw this same issue and applied the suggestion of one contributor which works (401/Unauthorized when obtaining token in Authorization Code grant - #18 by matthewrossanderson).
The last comment in that thread claims such issue was fixed. No its not! the issue is a pain to find out. No hints are given how to fix the issue when the reason is that the new SPA Authentication method was set something that may not be needed by the user at that time.