index.js

const express = require('express');
const app = express();
const jwt = require('express-jwt');
const jwks = require('jwks-rsa');
const jwtAuthz = require('express-jwt-authz');

app.use(jwt({
  secret: jwks.expressJwtSecret({
    cache: true,
    rateLimit: true,
    jwksRequestsPerMinute: 25,
    jwksUri: 'https://dev-gkawf0h0.us.auth0.com/.well-known/jwks.json'
  }),
  audience: 'https://auth0-nodejs-example',
  issuer: 'https://dev-gkawf0h0.us.auth0.com/',
  algorithms: ['RS256']
}));

app.get('/secured', (req, res) => {
  res.json({ success: true });
});

app.listen(8000);