ExtractID returns the ID of a token.

NotifyCIBAGrant handles notifying a client that the user has granted access.

NotifyCIBAGrantFailure handles notifying a client that the user has denied access.

ValidateBinding checks both DPoP and TLS binding for issuing a token.

ValidatePoP validates that the context contains the information required to prove the client's possession of the token.