Right now I"m implementing the basic lock with an SPA (Single Page Application). Because of this, after the access token expires, the user is logged out and has to log back in. I read that I need a refresh token so I can keep the user logged in until they log out manually like how Facebook does it.
I console logged my auth0Result and it says that refresh token is null.
Does anyone know how to do this?