I have a client web application (java) that uses a middleware to authenticate users against Okta default server.
After authentication, the middleware will return back to the client app, an identity and an access token minted by the Okta default server.
My client application needs to call a REST API that is protected by an Okta Custom authorization server.
Is there a way to retrieve an access token from the Custom authorization server, using the tokens from the default server (token exchange)?
From a client application, what is the best way to manage tokens from multiple Okta Custom Authorization servers?