if you just change the redirect uri to be home/index, it should work just fine . Its because I see that you have done nothing but redirect on the callback controller. You would need to add [Authorize] attribute or check if Request is authenticated in the Index action.
Also, I have seen that Auth0’s allow list of callback urls are case sensitive