Using two JWT tokens for websockets

Help
,
1

Hello,
Due to limitations in the browser client our Websocket libray is sending the JWT token as a query parameter.
I am trying to understand if any security pattern is recommended by the community to mitigate the risk
Can I send a short-term JWT token in the query parameter first and use that to get the main JWT token for authorization ? Is such an exchange feasible ? Please note that this is only needed because the query parameter is exposed the first time. Is this even possible ?

  1. The HTTP connection is upgraded to a Websocket connection after the first short-term token is authenticaed.
  2. Since this first token was a query parameter it was exposed.
  3. First token is exchanged for a second token in the server and sent along to our other distributed sysems.
  4. This happens every time the ReactJS client opens a new Websocket connection.
  5. So the first token resides in the ReactJS browser client but the second token is used by other systems, These two tokens should indicate the same authorization. The 2nd token is needed only because the first is exposed.

Thanks.

2

I though this is a common pattern encountered by all and sundry. Maybe this is a tricky problem still.
Thanks.