Is a CSRF token required for JWT authentication

Question

I\'ve implemented a REST api for SPA and mobile app use with the following security:

1. Long-living session token (Secure+HTTP only cookie) -> exchanged for acc