Hi Calvin,
At this time, I don’t have a better answer for you. Your approach is valid.
If you don’t mind, can you make a request here: Auth0: Secure access for everyone. But not just anyone.
with any ideas you have for improvement in this area (or any other)?
Thank you
John