import { FhirVersion } from '@aws/fhir-works-on-aws-interface';
import { JwtPayload } from 'jsonwebtoken';
import { JwksClient, Headers } from 'jwks-rsa';
import { AccessModifier, FhirResource, IntrospectionOptions } from './smartConfig';
export declare const FHIR_USER_REGEX: RegExp;
export declare const FHIR_RESOURCE_REGEX: RegExp;
export declare function getFhirUser(fhirUserValue: string): FhirResource;
export declare function getFhirResource(resourceValue: string, defaultHostname: string): FhirResource;
export declare function hasReferenceToResource(requestorId: FhirResource, sourceResource: any, apiUrl: string, fhirVersion: FhirVersion): boolean;
export declare function isFhirUserAdmin(fhirUser: FhirResource, adminAccessTypes: string[], apiUrl: string): boolean;
/**
 * @param scopes: this should be scope set from the `verifyAccessToken` method
 * @param resourceType: the type of the resource the request is trying to access
 * @param accessModifier: the type of access the request is asking for
 * @returns if there is a usable system scope for this request
 */
export declare function hasSystemAccess(scopes: string[], resourceType: string, accessModifier: AccessModifier): boolean;
export declare function hasAccessToResource(fhirUserObject: FhirResource, patientLaunchContext: FhirResource, sourceResource: any, usableScopes: string[], adminAccessTypes: string[], apiUrl: string, fhirVersion: FhirVersion, accessModifier: AccessModifier): boolean;
export declare function getJwksClient(jwksUri: string, headers?: Headers): JwksClient;
export declare function decodeJwtToken(token: string, expectedAudValue: string | RegExp, expectedIssValue: string): import("jsonwebtoken").Jwt;
export declare function verifyJwtToken(token: string, expectedAudValue: string | RegExp, expectedIssValue: string, client: JwksClient): Promise<string | JwtPayload>;
export declare function introspectJwtToken(token: string, expectedAudValue: string | RegExp, expectedIssValue: string, introspectionOptions: IntrospectionOptions): Promise<string | JwtPayload>;
//# sourceMappingURL=smartAuthorizationHelper.d.ts.map