import * as oauth from "oauth4webapi";
/**
 * Creates a mock factory for next/headers.js
 *
 * Usage in test files:
 *   vi.mock("next/headers.js", () => createNextHeadersMock());
 *
 * Options:
 *   - cookies: whether to mock the cookies function (default: true)
 */
export declare function createNextHeadersMock(options?: {
    cookies?: boolean;
}): Promise<Record<string, any>>;
/**
 * Creates a mock factory for oauth4webapi with DPoP support
 *
 * Usage in test files:
 *   vi.mock("oauth4webapi", () => createOAuth4WebapiDPopMock());
 *
 * Mocks:
 *   - protectedResourceRequest: vi.fn()
 *   - isDPoPNonceError: vi.fn()
 *   - DPoP: vi.fn((client, keyPair) => ({ client, keyPair }))
 *   - generateKeyPair: vi.fn() returning mock CryptoKey objects
 *   - discoveryRequest: vi.fn()
 *   - processDiscoveryResponse: vi.fn()
 *   - customFetch: Symbol("customFetch")
 *   - allowInsecureRequests: Symbol("allowInsecureRequests")
 */
export declare function createOAuth4WebapiDPopMock(): Promise<{
    protectedResourceRequest: import("vitest").Mock<(...args: any[]) => any>;
    isDPoPNonceError: import("vitest").Mock<(...args: any[]) => any>;
    DPoP: import("vitest").Mock<(client: any, keyPair: any) => {
        client: any;
        keyPair: any;
    }>;
    generateKeyPair: import("vitest").Mock<() => Promise<{
        privateKey: CryptoKey;
        publicKey: CryptoKey;
    }>>;
    discoveryRequest: import("vitest").Mock<(...args: any[]) => any>;
    processDiscoveryResponse: import("vitest").Mock<(...args: any[]) => any>;
    customFetch: symbol;
    allowInsecureRequests: symbol;
    generateRandomCodeVerifier(): string;
    generateRandomState(): string;
    generateRandomNonce(): string;
    calculatePKCECodeChallenge(codeVerifier: string): Promise<string>;
    ClientSecretPost(clientSecret: string): oauth.ClientAuth;
    ClientSecretBasic(clientSecret: string): oauth.ClientAuth;
    PrivateKeyJwt(clientPrivateKey: oauth.CryptoKey | oauth.PrivateKey, options?: oauth.ModifyAssertionOptions): oauth.ClientAuth;
    ClientSecretJwt(clientSecret: string, options?: oauth.ModifyAssertionOptions): oauth.ClientAuth;
    None(): oauth.ClientAuth;
    TlsClientAuth(): oauth.ClientAuth;
    issueRequestObject(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | Record<string, string> | string[][], privateKey: oauth.CryptoKey | oauth.PrivateKey, options?: oauth.ModifyAssertionOptions): Promise<string>;
    checkProtocol(url: URL, enforceHttps: boolean | undefined): void;
    pushedAuthorizationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.PushedAuthorizationRequestOptions): Promise<Response>;
    processPushedAuthorizationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.PushedAuthorizationResponse>;
    userInfoRequest(as: oauth.AuthorizationServer, client: oauth.Client, accessToken: string, options?: oauth.UserInfoRequestOptions): Promise<Response>;
    processUserInfoResponse(as: oauth.AuthorizationServer, client: oauth.Client, expectedSubject: string | typeof oauth.skipSubjectCheck, response: Response, options?: oauth.JWEDecryptOptions): Promise<oauth.UserInfoResponse>;
    refreshTokenGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, refreshToken: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    getValidatedIdTokenClaims(ref: oauth.TokenEndpointResponse): oauth.IDToken | undefined;
    validateApplicationLevelSignature(as: oauth.AuthorizationServer, ref: Response, options?: oauth.ValidateSignatureOptions): Promise<void>;
    processRefreshTokenResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    authorizationCodeGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, callbackParameters: URLSearchParams, redirectUri: string, codeVerifier: string | typeof oauth.nopkce, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processAuthorizationCodeResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessAuthorizationCodeResponseOptions): Promise<oauth.TokenEndpointResponse>;
    clientCredentialsGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.ClientCredentialsGrantRequestOptions): Promise<Response>;
    genericTokenEndpointRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, grantType: string, parameters: URLSearchParams | Record<string, string> | string[][], options?: Omit<oauth.TokenEndpointRequestOptions, "additionalParameters">): Promise<Response>;
    processGenericTokenEndpointResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    processClientCredentialsResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    revocationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, token: string, options?: oauth.RevocationRequestOptions): Promise<Response>;
    processRevocationResponse(response: Response): Promise<undefined>;
    introspectionRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, token: string, options?: oauth.IntrospectionRequestOptions): Promise<Response>;
    processIntrospectionResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.JWEDecryptOptions): Promise<oauth.IntrospectionResponse>;
    validateJwtAuthResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL, expectedState?: string | typeof oauth.expectNoState | typeof oauth.skipStateCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateDetachedSignatureResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL | Request, expectedNonce: string, expectedState?: string | typeof oauth.expectNoState, maxAge?: number | typeof oauth.skipAuthTimeCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateCodeIdTokenResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL | Request, expectedNonce: string, expectedState?: string | typeof oauth.expectNoState, maxAge?: number | typeof oauth.skipAuthTimeCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateAuthResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL, expectedState?: string | typeof oauth.expectNoState | typeof oauth.skipStateCheck): URLSearchParams;
    deviceAuthorizationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.DeviceAuthorizationRequestOptions): Promise<Response>;
    processDeviceAuthorizationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.DeviceAuthorizationResponse>;
    deviceCodeGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, deviceCode: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processDeviceCodeResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    validateJwtAccessToken(as: oauth.AuthorizationServer, request: Request, expectedAudience: string, options?: oauth.ValidateJWTAccessTokenOptions): Promise<oauth.JWTAccessTokenClaims>;
    backchannelAuthenticationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.BackchannelAuthenticationRequestOptions): Promise<Response>;
    processBackchannelAuthenticationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.BackchannelAuthenticationResponse>;
    backchannelAuthenticationGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, authReqId: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processBackchannelAuthenticationGrantResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    dynamicClientRegistrationRequest(as: oauth.AuthorizationServer, metadata: Partial<oauth.OmitSymbolProperties<oauth.Client>>, options?: oauth.DynamicClientRegistrationRequestOptions): Promise<Response>;
    processDynamicClientRegistrationResponse(response: Response): Promise<oauth.OmitSymbolProperties<oauth.Client>>;
    resourceDiscoveryRequest(resourceIdentifier: URL, options?: oauth.HttpRequestOptions<"GET">): Promise<Response>;
    processResourceDiscoveryResponse(expectedResourceIdentifier: URL, response: Response): Promise<oauth.ResourceServer>;
    clockSkew: typeof oauth.clockSkew;
    clockTolerance: typeof oauth.clockTolerance;
    modifyAssertion: typeof oauth.modifyAssertion;
    jweDecrypt: typeof oauth.jweDecrypt;
    jwksCache: typeof oauth.jwksCache;
    UnsupportedOperationError: typeof oauth.UnsupportedOperationError;
    OperationProcessingError: typeof oauth.OperationProcessingError;
    ResponseBodyError: typeof oauth.ResponseBodyError;
    AuthorizationResponseError: typeof oauth.AuthorizationResponseError;
    WWWAuthenticateChallengeError: typeof oauth.WWWAuthenticateChallengeError;
    skipSubjectCheck: typeof oauth.skipSubjectCheck;
    nopkce: typeof oauth.nopkce;
    expectNoNonce: typeof oauth.expectNoNonce;
    skipAuthTimeCheck: typeof oauth.skipAuthTimeCheck;
    WWW_AUTHENTICATE_CHALLENGE: "OAUTH_WWW_AUTHENTICATE_CHALLENGE";
    RESPONSE_BODY_ERROR: "OAUTH_RESPONSE_BODY_ERROR";
    UNSUPPORTED_OPERATION: "OAUTH_UNSUPPORTED_OPERATION";
    AUTHORIZATION_RESPONSE_ERROR: "OAUTH_AUTHORIZATION_RESPONSE_ERROR";
    JWT_USERINFO_EXPECTED: "OAUTH_JWT_USERINFO_EXPECTED";
    PARSE_ERROR: "OAUTH_PARSE_ERROR";
    INVALID_RESPONSE: "OAUTH_INVALID_RESPONSE";
    INVALID_REQUEST: "OAUTH_INVALID_REQUEST";
    RESPONSE_IS_NOT_JSON: "OAUTH_RESPONSE_IS_NOT_JSON";
    RESPONSE_IS_NOT_CONFORM: "OAUTH_RESPONSE_IS_NOT_CONFORM";
    HTTP_REQUEST_FORBIDDEN: "OAUTH_HTTP_REQUEST_FORBIDDEN";
    REQUEST_PROTOCOL_FORBIDDEN: "OAUTH_REQUEST_PROTOCOL_FORBIDDEN";
    JWT_TIMESTAMP_CHECK: "OAUTH_JWT_TIMESTAMP_CHECK_FAILED";
    JWT_CLAIM_COMPARISON: "OAUTH_JWT_CLAIM_COMPARISON_FAILED";
    JSON_ATTRIBUTE_COMPARISON: "OAUTH_JSON_ATTRIBUTE_COMPARISON_FAILED";
    KEY_SELECTION: "OAUTH_KEY_SELECTION_FAILED";
    MISSING_SERVER_METADATA: "OAUTH_MISSING_SERVER_METADATA";
    INVALID_SERVER_METADATA: "OAUTH_INVALID_SERVER_METADATA";
    skipStateCheck: typeof oauth.skipStateCheck;
    expectNoState: typeof oauth.expectNoState;
}>;
/**
 * Creates a minimal mock factory for oauth4webapi
 *
 * Usage in test files:
 *   vi.mock("oauth4webapi", () => createOAuth4WebapiMock());
 *
 * Mocks only essential functions:
 *   - protectedResourceRequest: vi.fn()
 *   - isDPoPNonceError: vi.fn()
 *   - DPoP: vi.fn()
 */
export declare function createOAuth4WebapiMock(): Promise<{
    protectedResourceRequest: import("vitest").Mock<(...args: any[]) => any>;
    isDPoPNonceError: import("vitest").Mock<(...args: any[]) => any>;
    DPoP: import("vitest").Mock<(...args: any[]) => any>;
    discoveryRequest(issuerIdentifier: URL, options?: oauth.DiscoveryRequestOptions): Promise<Response>;
    processDiscoveryResponse(expectedIssuerIdentifier: URL, response: Response): Promise<oauth.AuthorizationServer>;
    generateRandomCodeVerifier(): string;
    generateRandomState(): string;
    generateRandomNonce(): string;
    calculatePKCECodeChallenge(codeVerifier: string): Promise<string>;
    ClientSecretPost(clientSecret: string): oauth.ClientAuth;
    ClientSecretBasic(clientSecret: string): oauth.ClientAuth;
    PrivateKeyJwt(clientPrivateKey: oauth.CryptoKey | oauth.PrivateKey, options?: oauth.ModifyAssertionOptions): oauth.ClientAuth;
    ClientSecretJwt(clientSecret: string, options?: oauth.ModifyAssertionOptions): oauth.ClientAuth;
    None(): oauth.ClientAuth;
    TlsClientAuth(): oauth.ClientAuth;
    issueRequestObject(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | Record<string, string> | string[][], privateKey: oauth.CryptoKey | oauth.PrivateKey, options?: oauth.ModifyAssertionOptions): Promise<string>;
    checkProtocol(url: URL, enforceHttps: boolean | undefined): void;
    pushedAuthorizationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.PushedAuthorizationRequestOptions): Promise<Response>;
    processPushedAuthorizationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.PushedAuthorizationResponse>;
    userInfoRequest(as: oauth.AuthorizationServer, client: oauth.Client, accessToken: string, options?: oauth.UserInfoRequestOptions): Promise<Response>;
    processUserInfoResponse(as: oauth.AuthorizationServer, client: oauth.Client, expectedSubject: string | typeof oauth.skipSubjectCheck, response: Response, options?: oauth.JWEDecryptOptions): Promise<oauth.UserInfoResponse>;
    refreshTokenGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, refreshToken: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    getValidatedIdTokenClaims(ref: oauth.TokenEndpointResponse): oauth.IDToken | undefined;
    validateApplicationLevelSignature(as: oauth.AuthorizationServer, ref: Response, options?: oauth.ValidateSignatureOptions): Promise<void>;
    processRefreshTokenResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    authorizationCodeGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, callbackParameters: URLSearchParams, redirectUri: string, codeVerifier: string | typeof oauth.nopkce, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processAuthorizationCodeResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessAuthorizationCodeResponseOptions): Promise<oauth.TokenEndpointResponse>;
    clientCredentialsGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.ClientCredentialsGrantRequestOptions): Promise<Response>;
    genericTokenEndpointRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, grantType: string, parameters: URLSearchParams | Record<string, string> | string[][], options?: Omit<oauth.TokenEndpointRequestOptions, "additionalParameters">): Promise<Response>;
    processGenericTokenEndpointResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    processClientCredentialsResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    revocationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, token: string, options?: oauth.RevocationRequestOptions): Promise<Response>;
    processRevocationResponse(response: Response): Promise<undefined>;
    introspectionRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, token: string, options?: oauth.IntrospectionRequestOptions): Promise<Response>;
    processIntrospectionResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.JWEDecryptOptions): Promise<oauth.IntrospectionResponse>;
    validateJwtAuthResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL, expectedState?: string | typeof oauth.expectNoState | typeof oauth.skipStateCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateDetachedSignatureResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL | Request, expectedNonce: string, expectedState?: string | typeof oauth.expectNoState, maxAge?: number | typeof oauth.skipAuthTimeCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateCodeIdTokenResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL | Request, expectedNonce: string, expectedState?: string | typeof oauth.expectNoState, maxAge?: number | typeof oauth.skipAuthTimeCheck, options?: oauth.ValidateSignatureOptions & oauth.JWEDecryptOptions): Promise<URLSearchParams>;
    validateAuthResponse(as: oauth.AuthorizationServer, client: oauth.Client, parameters: URLSearchParams | URL, expectedState?: string | typeof oauth.expectNoState | typeof oauth.skipStateCheck): URLSearchParams;
    deviceAuthorizationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.DeviceAuthorizationRequestOptions): Promise<Response>;
    processDeviceAuthorizationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.DeviceAuthorizationResponse>;
    deviceCodeGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, deviceCode: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processDeviceCodeResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    generateKeyPair(alg: string, options?: oauth.GenerateKeyPairOptions): Promise<oauth.CryptoKeyPair>;
    validateJwtAccessToken(as: oauth.AuthorizationServer, request: Request, expectedAudience: string, options?: oauth.ValidateJWTAccessTokenOptions): Promise<oauth.JWTAccessTokenClaims>;
    backchannelAuthenticationRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, parameters: URLSearchParams | Record<string, string> | string[][], options?: oauth.BackchannelAuthenticationRequestOptions): Promise<Response>;
    processBackchannelAuthenticationResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response): Promise<oauth.BackchannelAuthenticationResponse>;
    backchannelAuthenticationGrantRequest(as: oauth.AuthorizationServer, client: oauth.Client, clientAuthentication: oauth.ClientAuth, authReqId: string, options?: oauth.TokenEndpointRequestOptions): Promise<Response>;
    processBackchannelAuthenticationGrantResponse(as: oauth.AuthorizationServer, client: oauth.Client, response: Response, options?: oauth.ProcessTokenResponseOptions): Promise<oauth.TokenEndpointResponse>;
    dynamicClientRegistrationRequest(as: oauth.AuthorizationServer, metadata: Partial<oauth.OmitSymbolProperties<oauth.Client>>, options?: oauth.DynamicClientRegistrationRequestOptions): Promise<Response>;
    processDynamicClientRegistrationResponse(response: Response): Promise<oauth.OmitSymbolProperties<oauth.Client>>;
    resourceDiscoveryRequest(resourceIdentifier: URL, options?: oauth.HttpRequestOptions<"GET">): Promise<Response>;
    processResourceDiscoveryResponse(expectedResourceIdentifier: URL, response: Response): Promise<oauth.ResourceServer>;
    allowInsecureRequests: typeof oauth.allowInsecureRequests;
    clockSkew: typeof oauth.clockSkew;
    clockTolerance: typeof oauth.clockTolerance;
    customFetch: typeof oauth.customFetch;
    modifyAssertion: typeof oauth.modifyAssertion;
    jweDecrypt: typeof oauth.jweDecrypt;
    jwksCache: typeof oauth.jwksCache;
    UnsupportedOperationError: typeof oauth.UnsupportedOperationError;
    OperationProcessingError: typeof oauth.OperationProcessingError;
    ResponseBodyError: typeof oauth.ResponseBodyError;
    AuthorizationResponseError: typeof oauth.AuthorizationResponseError;
    WWWAuthenticateChallengeError: typeof oauth.WWWAuthenticateChallengeError;
    skipSubjectCheck: typeof oauth.skipSubjectCheck;
    nopkce: typeof oauth.nopkce;
    expectNoNonce: typeof oauth.expectNoNonce;
    skipAuthTimeCheck: typeof oauth.skipAuthTimeCheck;
    WWW_AUTHENTICATE_CHALLENGE: "OAUTH_WWW_AUTHENTICATE_CHALLENGE";
    RESPONSE_BODY_ERROR: "OAUTH_RESPONSE_BODY_ERROR";
    UNSUPPORTED_OPERATION: "OAUTH_UNSUPPORTED_OPERATION";
    AUTHORIZATION_RESPONSE_ERROR: "OAUTH_AUTHORIZATION_RESPONSE_ERROR";
    JWT_USERINFO_EXPECTED: "OAUTH_JWT_USERINFO_EXPECTED";
    PARSE_ERROR: "OAUTH_PARSE_ERROR";
    INVALID_RESPONSE: "OAUTH_INVALID_RESPONSE";
    INVALID_REQUEST: "OAUTH_INVALID_REQUEST";
    RESPONSE_IS_NOT_JSON: "OAUTH_RESPONSE_IS_NOT_JSON";
    RESPONSE_IS_NOT_CONFORM: "OAUTH_RESPONSE_IS_NOT_CONFORM";
    HTTP_REQUEST_FORBIDDEN: "OAUTH_HTTP_REQUEST_FORBIDDEN";
    REQUEST_PROTOCOL_FORBIDDEN: "OAUTH_REQUEST_PROTOCOL_FORBIDDEN";
    JWT_TIMESTAMP_CHECK: "OAUTH_JWT_TIMESTAMP_CHECK_FAILED";
    JWT_CLAIM_COMPARISON: "OAUTH_JWT_CLAIM_COMPARISON_FAILED";
    JSON_ATTRIBUTE_COMPARISON: "OAUTH_JSON_ATTRIBUTE_COMPARISON_FAILED";
    KEY_SELECTION: "OAUTH_KEY_SELECTION_FAILED";
    MISSING_SERVER_METADATA: "OAUTH_MISSING_SERVER_METADATA";
    INVALID_SERVER_METADATA: "OAUTH_INVALID_SERVER_METADATA";
    skipStateCheck: typeof oauth.skipStateCheck;
    expectNoState: typeof oauth.expectNoState;
}>;