Excellent post; well laid out; easy to follow; detailed where needed to be.
I tripped up in only 1 place:
When configuring the .env file in the express sample API, added the AUTH0_ISSUER_URL, the URL much have a trailing forward slash [/]. If this is missing then the check-jwt constant creates malformed URL. This will result in a 60 second timeout to Auth0.
Error: connect ETIMEDOUT 92.242.132.24:443
at TCPConnectWrap.afterConnect [as oncomplete] (net.js:1145:16) {
errno: -60,
code: 'ETIMEDOUT',
syscall: 'connect',
address: '92.242.132.24',
Missing forward slash
https://[tentan].auth0.com.well-known/jwks.json
With forward slash GOOD
https://[tentan].auth0.com/well-known/jwks.json
Hope this helps.