What's the token expiration for Universal Login?

Thank you for your response.

In order to use this endpoint, I need to provide a refresh token.
When logging in using the auth-lock package, there is no refresh token. The returned refresh token is always null. So I don’t see how I can use this endpoint.

See references for missing refresh token here: