interface AuthgearConfig {
    /** Authgear endpoint, e.g. "https://myapp.authgear.cloud" */
    endpoint: string;
    /** OAuth client ID */
    clientID: string;
    /** Redirect URI for OAuth callback, e.g. "http://localhost:3000/api/auth/callback" */
    redirectURI: string;
    /** Where to redirect after logout */
    postLogoutRedirectURI?: string;
    /** OAuth scopes. Defaults to ["openid", "offline_access", "https://authgear.com/scopes/full-userinfo"] */
    scopes?: string[];
    /** Secret key for encrypting session cookie (min 32 chars) */
    sessionSecret: string;
    /** Session cookie name. Defaults to "authgear.session" */
    cookieName?: string;
    /**
     * Whether to enable SSO (Single Sign-On) with other apps on the same Authgear tenant.
     * When `true` (default), Authgear silently reuses its server-side session if the user
     * is already logged in, so users are not prompted for credentials again.
     * Set to `false` to always show the login form (`prompt=login`), which is recommended
     * for single-app deployments where silent sign-in feels unexpected to the user.
     * Defaults to `true`.
     */
    isSSOEnabled?: boolean;
}
/**
 * Pages that can be opened in a new tab with the current user pre-authenticated.
 * Used by `getOpenURL` from `@authgear/nextjs/server` and by `openPage` / `<UserSettingsButton>`
 * from `@authgear/nextjs/client`.
 */
declare enum Page {
    Settings = "/settings"
}
/**
 * OIDC `prompt` parameter values.
 * Pass to `signIn({ prompt })` or `SignInButton signInOptions={{ prompt }}` to control
 * whether Authgear shows the login form for a specific authentication call.
 *
 * @see https://docs.authgear.com/authentication-and-access/single-sign-on/force-authgear-to-show-login-page
 */
declare enum PromptOption {
    /** Always show the login form, even if the user has an active Authgear session. */
    Login = "login",
    /** Never show the login form; return an error if the user is not already authenticated. */
    None = "none"
}
declare const DEFAULT_SCOPES: string[];
declare enum SessionState {
    Unknown = "UNKNOWN",
    NoSession = "NO_SESSION",
    Authenticated = "AUTHENTICATED"
}
interface SessionData {
    accessToken: string;
    refreshToken: string | null;
    idToken: string | null;
    expiresAt: number;
}
interface Session {
    state: SessionState;
    accessToken: string | null;
    refreshToken: string | null;
    idToken: string | null;
    expiresAt: number | null;
    user: UserInfo | null;
}
interface UserInfo {
    sub: string;
    email?: string;
    emailVerified?: boolean;
    phoneNumber?: string;
    phoneNumberVerified?: boolean;
    preferredUsername?: string;
    givenName?: string;
    familyName?: string;
    name?: string;
    picture?: string;
    roles?: string[];
    isAnonymous?: boolean;
    isVerified?: boolean;
    canReauthenticate?: boolean;
    customAttributes?: Record<string, unknown>;
    raw: Record<string, unknown>;
}
interface JWTPayload {
    sub: string;
    iss: string;
    aud: string | string[];
    exp: number;
    iat: number;
    jti?: string;
    client_id?: string;
    "https://authgear.com/claims/user/is_anonymous"?: boolean;
    "https://authgear.com/claims/user/is_verified"?: boolean;
    "https://authgear.com/claims/user/can_reauthenticate"?: boolean;
    "https://authgear.com/claims/user/roles"?: string[];
    [key: string]: unknown;
}
interface TokenResponse {
    access_token: string;
    token_type: string;
    expires_in: number;
    refresh_token?: string;
    id_token?: string;
}
interface OIDCConfiguration {
    authorization_endpoint: string;
    token_endpoint: string;
    userinfo_endpoint: string;
    revocation_endpoint: string;
    end_session_endpoint: string;
    jwks_uri: string;
    issuer: string;
}

export { type AuthgearConfig as A, DEFAULT_SCOPES as D, type JWTPayload as J, type OIDCConfiguration as O, Page as P, type Session as S, type TokenResponse as T, type UserInfo as U, PromptOption as a, type SessionData as b, SessionState as c };