Trying the new Refresh Token Rotation in a React SPA. Are 3rd party cookies supposed to be required?

CC: @steve.hobbs for visibility.