| BackChannelAuthenticationHandler | Default IBackChannelAuthenticationHandler implementation that drives the CIBA endpoint pipeline as fetch (request object resolution) -> validation -> processing, short-circuiting on the first error so that subsequent stages never see invalid input. |
| BackChannelAuthenticationRequestProcessor | Handles the processing of backchannel authentication requests in an OAuth 2.0/OpenID Connect context. This class is responsible for managing the lifecycle of a backchannel authentication request, from initiating the user's authentication on their device to storing the request for status polling. It ensures that the client is authorized, user-device authentication is initiated, and the request's status is properly stored and can be queried during the authentication process. The class coordinates various services like authentication storage, options configuration and user-device interaction, ensuring a seamless backchannel authentication flow. |
| BackChannelAuthenticationRequestValidator | Validates backchannel authentication requests by delegating the context validation to a context validator. This class is responsible for ensuring that the request meets all necessary criteria for successful authentication within the backchannel authentication flow. |