import { Strategy as JwtStrategy } from 'passport-jwt';
import { sbvrUtils } from '@balena/pinejs';
import type { ScopedToken, TokenUserPayload } from './jwt.js';
export type { SignOptions } from 'jsonwebtoken';
export interface ServiceToken extends sbvrUtils.Actor {
    service: string;
    apikey: string;
    permissions: string[];
}
export interface ApiKey extends sbvrUtils.ApiKey {
    key: string;
}
export type ResolvedUserPayload = TokenUserPayload & sbvrUtils.User;
export type Creds = ServiceToken | ResolvedUserPayload | ScopedToken;
export declare const verifyAndResolveJwt: (token: string) => Promise<Creds>;
export declare const createStrategy: () => JwtStrategy;
export declare const middleware: import("express").RequestHandler<import("express-serve-static-core").ParamsDictionary, any, undefined, Record<string, never>, Record<string, any>>;
export declare const isJWT: (token: string) => boolean;