I found the issue. The Auth0 Dashboard does not allow native apps to set the audience, but it can actually be specified in the SDK. If the token you get after logging in with the native app cannot be decoded, it's because you haven't specified the audience. Once specified, the token can be decoded.