How does auth0-spa-js store tokens

[npatel]

did you set the audience correctly? that should enable JWT access_token instead of a string access token.
Can you also check what is getting sent in headers