Additional info for any Auth0 people lurking:
I tried this with an older tenant, and it worked correctly. So it just doesn’t work with the new tenant we have.
I looked at the advanced tenant settings for the two tenants, and the lists of available settings are different.
The old tenant has three advanced settings that are not available on the new tenant (and all three of these settings are turned on):
- legacy delegation endpoint
- legacy oauth/ro endpoint
- legacy social provider access token endpoint
FWIW, the version of auth0-js being used is 9.4.2.