Token Exchange

The Token Exchange Flow isn't itself a grant type, but rather is an extension to the OAuth2 specification (RFC8693) that provides the ability to exchange one set of tokens for another.

Implementation

This should be implemented as a single-step flow, where the appropriate values (typically a subject and actor arguments) are supplied to the start function. These values, combined with the desired grant type, are used in a request to exchange a token.