Auth0-react is not accepting scopes

Thanks for confirming!

Yes, you will need to register an API in Auth0. At that point you will be able to add the offline_access scope and use refresh tokens.