Probably I solved. The cause was “useDPoP“. I set false in the request config.
But I suggest you to make more clear for a developer. Reading docs it easy to understand what is it, but the default value is true (and probably in v4 was false).
The problem is that DOCS say also that the feature is in early and “contact auth0 to enable it” :).