@jrp-23 when it comes to working with native apps, we always recommend the Authorization Code grant with PKCE.
https://auth0.com/docs/api-auth/tutorials/authorization-code-grant-pkce
You are just trying to pass the data you extracted from the ID token to the request to the API correct? Not the full ID token?