Could it be in the underlying code managing lock somehow?
At one point as I was debugging, I had added the option :
{auth:{redirectUrl:‘http://localhost:3000/login/callback’}} to
this.lock = new Auth0Lock(
but removed it since. Is it engraved in digital stone somewhere?? 