| IAuthenticationCompletionHandler | Handles CIBA authentication completion by routing to the appropriate delivery mode handler (poll, ping, or push) based on the client's configured backchannel_token_delivery_mode. |
| IAuthenticationRequestIdGenerator | Defines the contract for generating unique authentication request identifiers in the context of a backchannel or other authentication flows. This identifier is used to track and reference individual authentication requests. |
| IBackChannelGrantProcessor | Defines mode-specific processing logic for handling authenticated CIBA requests at the token endpoint. Different delivery modes (poll, ping, push) have different requirements for token retrieval. |
| IBackChannelLongPollingService | Provides signaling infrastructure for CIBA poll mode long-polling, allowing token endpoint requests to wait for authentication completion rather than immediately returning authorization_pending. |
| IBackChannelNotificationRequest | Common shape of the JSON body the authorization server posts to the client's client_notification_endpoint in CIBA ping and push modes. The auth_req_id is always present; push payloads add the issued tokens. |
| IBackChannelRequestStorage | Defines the contract for a storage system responsible for persisting and retrieving backchannel authentication requests in the context of Client-Initiated Backchannel Authentication (CIBA). |
| INotificationDeliveryService | Provides HTTP-based notification services for CIBA ping and push modes. |
| IUserDeviceAuthenticationHandler | Defines the contract for initiating user authentication on a device in the context of a backchannel authentication flow. This interface is responsible for handling the initiation of the authentication process for the end-user on their device, based on a validated backchannel authentication request. |