export interface JwksFetcher {
    getKey(kid: string): Promise<string>;
}
export interface JwtOptions {
    issuer: string;
    audience: string;
    clockTolerance?: number;
    maxTokenAge?: number;
}
export interface JwtPayload {
    sub: string;
    iss: string;
    aud: string;
    exp: number;
    iat: number;
    scope?: string;
    [key: string]: unknown;
}
/** Validates a JWT token: decodes header, fetches public key via JWKS, verifies RS256 signature, checks claims. */
export declare function validateToken(token: string, options: JwtOptions, fetchKey: JwksFetcher): Promise<JwtPayload>;
//# sourceMappingURL=jwt.d.ts.map