Try the below code in your refresh endpoint; this seems to work for me.
if (!Request.Cookies.TryGetValue("refreshToken", out string? refreshToken) || string.IsNullOrEmpty(refreshToken)) { return Unauthorized(); }