RFC 8693 defines an OAuth standard endpoint format allowing a client to swap an existing token (e.g., an external identity token or user access token) for a new specialized token (e.g., a short-lived microservice-specific internal token).

Useful in complex microservice meshes where an edge API gateway swaps incoming user-facing access tokens for restricted downstream service tokens with narrowed scopes.