title: Okta, one application several APIs
body: <p>I have 2 applications and each one has his own backend but I want to access the third API from both applications. this third API should be secured.
  the same security that the other 2 applications have.
  the problem is that each application has a different JWT with a clint_id that is different.</p>
  
  <p>how should I manage to secure the API and allow access from these 2 applications?</p>
  
  <p>We are using Golang and Angular.
  we already tried decoding the JWT with one client_id and then with another one, but this adds some time to the execution. I don't know if it is the best solution</p>
  
  <pre><code>tv := map[string]string{}
  tv["aud"] = "okta.audience"
  tv["cid"] = "client_id_1"
  
  jv := jwtverifier.JwtVerifier{
      Issuer:           "issuer",
      ClaimsToValidate: tv,
  }
  
  tokenDecoded, err := jv.New().VerifyAccessToken(tokenStr)
  
  if err != nil {
      tv["cid"] = "client_id_2"
  
      jv = jwtverifier.JwtVerifier{
          Issuer:           "issuer",
          ClaimsToValidate: tv,
      }
  
      tokenDecoded, err = jv.New().VerifyAccessToken(tokenStr)
  }
  </code></pre>