Hello @halsdunes,
I looks like you are not including an audience string in your request. Without an audience string Auth0 will return an opaque access token which can be used only for querying the userinfo endpoint.
1 Like