Every other client in this Auth0 demo suite keeps a server somewhere to hold tokens - a Vercel Function, a Cloudflare Worker, a Deno Deploy isolate.
This one has none. A public SPA client deployed as static files to Firebase Hosting, tokens in browser memory only.