The SDK handles automatically calling the refresh endpoint for you among other things, but if you were willing to handle that yourself you can use just the backend SDK and call the APIs yourself. Although I would recommend using supertokens-website so you can enable request interception (makes life much simpler)