We've added support for Refresh Token Rotation!

[onpaws]

I just went through this with my little toy Auth0 app.
Not sure if my experience will help you - but just in case, here’s that thread:

Trying the new Refresh Token Rotation in a React SPA. Are 3rd party cookies supposed to be required?

Nice to see Refresh Token Rotation shipped today, congrats Auth0 team! So I’m trying to test it out using @auth0/auth0-spa-js v1.7.0 on a minimal React SPA (deploy, repo) carefully following what I think should be the relevant quickstart from the docs. I used create-react-app + TypeScript and things are pretty vanilla, here’s the refresh token opt-in OK, so here’s the GIF of what’s going on: [cookieissue] TL, DR: 3rd party cookies appear to be required for ‘silent auth’ aka the refresh butt…

TL, DR: enable the local storage option.
Thanks to Steve for explaining!