Thanks for the info.
I’ve implemented the authorization like described in the Login and API sample. So that is the Implicit Flow.
https://auth0.com/docs/quickstart/spa/angular2/01-login
https://auth0.com/docs/quickstart/spa/angular2/02-calling-an-api