How to use refresh_token in lock v10?

We have just encountered the same problem with renewing a login session on SPA web - has any progress been made?

I don’t see renewAuth in the linked documentation for Auth0.js - is it “checkSession”? That seems to indicated only Hosted Login Page is supported, but we have spent a lot of development effort on locally hosting the Lock due to requirements. What can we do to keep users logged in beyond 24 hours?