Providing auth tokens, refresh tokens, and refresh endpoints to Guard

Description: I’m on an engagement where you have to sign in with Okta oauth to access the aplication, in addition to having to use some form of MFA (which in this case is my actual physical ubikey, making it basically impossible for Guard to replicate).

Expected/Desired Behavior: For web application assets, there could be a way to provide auth & refresh tokens, in addition to the refresh endpoint (or perhaps a request to the refresh endpoint which guard can parse).