It seems often it's a CORS problem. If you run a domain verifying users, check if your nostr.json is accessible cross domain. I had the same problem a while ago with nostr.industries