title: How do I get a refresh token from auth0 passwordless using lock v11?
body: <p>I have an old-school angularJs app that has two pages. On both of the pages I include the auth0 lock script.</p>
  
  <pre><code>&lt;script src="https://cdn.auth0.com/js/lock/11.9.0/lock.min.js"&gt;&lt;/script&gt;
  </code></pre>
  
  <p>Of those two pages, one has the following js that specifies an auth0 lock to allow users to login:</p>
  
  <pre><code>new Auth0LockPasswordless(configuration.id,configuration.domain,
  {
      allowedConnections: ['email'],
      passwordlessMethod: "link",
      auth: {
          redirectUrl: configuration.redirectUrl,
          responseType: 'token id_token',
          params: {
              scope: 'openid profile email offline_access'
          }
      }
  }).show();
  </code></pre>
  
  <p>and the other page is responsible for the call-back after they've clicked the link in their email.</p>
  
  <pre><code>var lock = new Auth0LockPasswordless(configuration.id, configuration.domain);
  
  lock.on('authorization_error',
      function(authResult) {
          console.log("DEBUG::AUTHRESULT::", authResult);
  });
  
  lock.on('authenticated',
      function(authResult) {
          console.log("DEBUG::AUTHRESULT::", authResult);
  });
  </code></pre>
  
  <p>Now I've set <code>offline_access</code> in the scope of the request, and on my local environment been prompted for additional permissions when authenticating (so it's making it through). However when I check the log from the <code>lock.on('authenticated', function(authResult)..</code> refreshToken is always null.</p>
  
  <p>There's some conflicting documentation around the web, with both suggestions that lock will and wont return a refresh token. Is anyone able to confirm if this code should result in a valid refreshToken?</p>