I was able to figure it out.
I’m using the @invertase/react-native-apple-authentication package in a react-native application. The performRequest method that starts the Apple ID flow has a nonceEnabled parameter that defaults to true. The nonce is what was causing the issue. Setting nonceEnabled to false allows Auth0 to exchange and validate the authorization code.