The OAuth flow now automatically appends offline_access to the authorization scope when the server supports it, enabling longer-lived refresh tokens.
Evidence
OAuth scope handling (search for "Appended offline_access to authorization scope")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.