import { AuthError } from '../errors.js';
export declare const DEFAULT_AUTH_PROFILE = "default";
export declare const DEFAULT_CLIENT_METADATA_URL = "https://apify.github.io/mcpc/client-metadata.json";
export declare const MCPC_OAUTH_CALLBACK_PORTS: readonly number[];
export declare const MCPC_OAUTH_CALLBACK_HOSTS: readonly string[];
export interface OAuthTokenResponse {
    access_token: string;
    token_type: string;
    expires_in?: number;
    refresh_token?: string;
    scope?: string;
}
export interface AuthServerMetadata {
    token_endpoint?: string;
    token_endpoint_auth_methods_supported?: string[];
    [key: string]: unknown;
}
export declare function getOAuthServerUrl(urlString: string): string;
export declare function discoverAuthServerMetadata(serverUrl: string): Promise<AuthServerMetadata | undefined>;
export interface ProtectedResourceMetadata {
    resource?: string;
    authorization_servers?: string[];
}
export declare function fetchProtectedResourceMetadata(serverUrl: string): Promise<ProtectedResourceMetadata | undefined>;
export declare function discoverAuthServerViaProtectedResource(serverUrl: string, prm?: ProtectedResourceMetadata): Promise<AuthServerMetadata | undefined>;
export declare function selectRefreshResource(serverUrl: string, prm: ProtectedResourceMetadata | undefined): Promise<string | undefined>;
export type ClientAuthMethod = 'client_secret_basic' | 'client_secret_post' | 'none';
export declare function selectClientAuthMethod(metadata: AuthServerMetadata | undefined, hasClientSecret: boolean): ClientAuthMethod;
export interface RefreshClient {
    clientId: string;
    clientSecret?: string;
    authMethod?: ClientAuthMethod;
    resource?: string;
}
export declare function refreshAccessToken(tokenEndpoint: string, refreshToken: string, client: RefreshClient): Promise<OAuthTokenResponse>;
export declare function discoverAndRefreshToken(serverUrl: string, refreshToken: string, client: RefreshClient & {
    issuer?: string;
}): Promise<OAuthTokenResponse>;
export declare function createReauthError(serverUrl: string, profileName: string, message: string): AuthError;
export declare function validateClientMetadataUrl(url: string): void;
//# sourceMappingURL=oauth-utils.d.ts.map