How Auth0 know if I am already logged in?...

Block users from directly changing url in React App, but allow callback from auth0...

Whitelist users in Auth0...

Please why does this work when client_id is empty here...