/**
 * Copyright (c) 2020, WSO2 LLC. (https://www.wso2.com). All Rights Reserved.
 *
 * WSO2 LLC. licenses this file to you under the Apache License,
 * Version 2.0 (the "License"); you may not use this file except
 * in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */
import { OAuthResponseMode } from '../../models/oauth-response';
import { OIDCEndpoints } from '../../models/oidc-endpoints';
import { Platform } from '../../models/platforms';
import { TokenEndpointAuthMethod } from '../../models/token-endpoint-auth';
export interface DefaultAuthClientConfig {
    afterSignInUrl: string;
    afterSignOutUrl?: string;
    /**
     * Application UUID for the client.
     */
    applicationId?: string;
    clientHost?: string;
    clientId?: string;
    clientSecret?: string;
    enablePKCE?: boolean;
    organizationChain?: {
        /**
         * Instance ID of the source organization context to retrieve access token from for organization token exchange.
         * Used in linked organization scenarios to automatically fetch the source organization's access token.
         */
        sourceInstanceId?: number;
        /**
         * Organization ID for the target organization.
         * When provided with sourceInstanceId, triggers automatic organization token exchange.
         */
        targetOrganizationId?: string;
    };
    /**
     * Optional platform where the application is running.
     * This helps the SDK to optimize its behavior based on the platform.
     * If not provided, the SDK will attempt to auto-detect the platform.
     */
    platform?: keyof typeof Platform;
    prompt?: string;
    responseMode?: OAuthResponseMode;
    scopes?: string | string[] | undefined;
    /**
     * Specifies if cookies should be sent with access-token requests, refresh-token requests,
     * custom-grant requests, etc.
     *
     */
    sendCookiesInRequests?: boolean;
    sendIdTokenInLogoutRequest?: boolean;
    tokenRequest?: {
        /**
         * OAuth 2.0 client authentication method used at the token endpoint.
         * When omitted, defaults to `client_secret_basic` for AsgardeoV2 and
         * `client_secret_post` for all other platforms.
         */
        authMethod?: TokenEndpointAuthMethod;
    };
    tokenValidation?: {
        /**
         * ID token validation config.
         */
        idToken?: {
            /**
             * Allowed leeway for ID tokens (in seconds).
             */
            clockTolerance?: number;
            /**
             * Whether to validate ID tokens.
             */
            validate?: boolean;
            /**
             * Whether to validate the issuer of ID tokens.
             */
            validateIssuer?: boolean;
        };
    };
}
export interface WellKnownAuthClientConfig extends DefaultAuthClientConfig {
    baseUrl?: string;
    endpoints?: Partial<OIDCEndpoints>;
    wellKnownEndpoint: string;
}
export interface BaseURLAuthClientConfig extends DefaultAuthClientConfig {
    baseUrl: string;
    endpoints?: Partial<OIDCEndpoints>;
    wellKnownEndpoint?: string;
}
export interface ExplicitAuthClientConfig extends DefaultAuthClientConfig {
    baseUrl?: string;
    endpoints: OIDCEndpoints;
    wellKnownEndpoint?: string;
}
export type StrictAuthClientConfig = WellKnownAuthClientConfig | BaseURLAuthClientConfig | ExplicitAuthClientConfig;
export type AuthClientConfig<T = unknown> = StrictAuthClientConfig & T;
//# sourceMappingURL=client-config.d.ts.map