Exchange a bot ID and secret token for a JWT access token.
If the refresh token is not provided, you can continue using the same refresh token.