Hi,
I’m using Ionic 5 with cordova.
If you are willing to pay the ionic-team for an enterprise offering they have options that work well.
The plugin they offer is called Auth-Connect and it works with capacitor.
The problem with the auth0-cordova is that it doesn’t necessarily follow the login flow that uses refresh tokens. The refresh tokens gives the UX which appears to be logged in forever on the mobile, just like when you are using gmail or other apps. If this is a requirement then I would suggest using Auth-Connect because they handle the low-level stuff natively in android and ios when it comes to integrating with Auth0.
Else if you do not have this requirement and are ok with an experience that follows the web login flow without refresh tokens then Auth0 cordova/ SPA libraries are should be good.
So what I have describe above is the PKCE flow vs the Implicit Flow in a very general manner. Auth0 has good documentation on both flows, worth reading about by the way. Auth0 Cordova follows the implicit flow.In Auth-Connect you have the option to use either PKCE or Implicit flow.
I’m using Auth-Connect with PKCE.
Mohammad