The OAuth 2.0 user-agent flow now supports refresh tokens when the scope=refresh_token is included in the request and the redirect URL is https://mobileauth.salesforce.com/analytics/oauth/done.
Where: This change applies to Lightning Experience and Salesforce Classic in all editions.