import { Construct } from 'constructs';
import * as cdktf from 'cdktf';
export interface OauthClientConfig extends cdktf.TerraformMetaArguments {
    /**
    * The number of seconds, between 5mins and 48hrs, until tokens created with this client expire. Only clients using Genesys Cloud SCIM (Identity Management) can have a maximum duration of 38880000secs/450 days. Defaults to `86400`.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#access_token_validity_seconds OauthClient#access_token_validity_seconds}
    */
    readonly accessTokenValiditySeconds?: number;
    /**
    * The OAuth Grant/Client type supported by this client (CODE | TOKEN | SAML2-BEARER | PASSWORD | CLIENT-CREDENTIALS).
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#authorized_grant_type OauthClient#authorized_grant_type}
    */
    readonly authorizedGrantType: string;
    /**
    * Place holder that can be referred in integration_credential fields. Sensitive info. Only populated when expose_client_secret is true.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#client_secret OauthClient#client_secret}
    */
    readonly clientSecret?: string;
    /**
    * The description of the OAuth client.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#description OauthClient#description}
    */
    readonly description?: string;
    /**
    * Directory where the secret can be stored.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#directory_client_secret OauthClient#directory_client_secret}
    */
    readonly directoryClientSecret?: string;
    /**
    * Set this attribute to true to expose the client_secret as a sensitive output. This stores the secret in the Terraform state Defaults to `false`.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#expose_client_secret OauthClient#expose_client_secret}
    */
    readonly exposeClientSecret?: boolean | cdktf.IResolvable;
    /**
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#id OauthClient#id}
    *
    * Please be aware that the id field is automatically added to all resources in Terraform providers using a Terraform provider SDK version below 2.
    * If you experience problems setting this value it might not be settable. Please take a look at the provider documentation to ensure it should be settable.
    */
    readonly id?: string;
    /**
    * Optionally, a Name of a Integration Credential (with credential type pureCloudOAuthClient) to be created using this new OAuth Client.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#integration_credential_name OauthClient#integration_credential_name}
    */
    readonly integrationCredentialName?: string;
    /**
    * The name of the OAuth client.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#name OauthClient#name}
    */
    readonly name: string;
    /**
    * List of allowed callbacks for this client. For example: https://myapp.example.com/auth/callback.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#registered_redirect_uris OauthClient#registered_redirect_uris}
    */
    readonly registeredRedirectUris?: string[];
    /**
    * The scopes requested by this client. Scopes must be set for clients not using the CLIENT-CREDENTIALS grant.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#scopes OauthClient#scopes}
    */
    readonly scopes?: string[];
    /**
    * The state of the OAuth client (active | inactive). Access tokens cannot be created with inactive clients. Defaults to `active`.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#state OauthClient#state}
    */
    readonly state?: string;
    /**
    * roles block
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#roles OauthClient#roles}
    */
    readonly roles?: OauthClientRoles[] | cdktf.IResolvable;
}
export interface OauthClientRoles {
    /**
    * Division associated with the given role which forms a grant. If not set, the home division will be used. '*' may be set for all divisions.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#division_id OauthClient#division_id}
    */
    readonly divisionId?: string;
    /**
    * Role to be associated with the given division which forms a grant.
    *
    * Docs at Terraform Registry: {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#role_id OauthClient#role_id}
    */
    readonly roleId: string;
}
export declare function oauthClientRolesToTerraform(struct?: OauthClientRoles | cdktf.IResolvable): any;
export declare function oauthClientRolesToHclTerraform(struct?: OauthClientRoles | cdktf.IResolvable): any;
export declare class OauthClientRolesOutputReference extends cdktf.ComplexObject {
    private isEmptyObject;
    private resolvableValue?;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    * @param complexObjectIndex the index of this item in the list
    * @param complexObjectIsFromSet whether the list is wrapping a set (will add tolist() to be able to access an item via an index)
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string, complexObjectIndex: number, complexObjectIsFromSet: boolean);
    get internalValue(): OauthClientRoles | cdktf.IResolvable | undefined;
    set internalValue(value: OauthClientRoles | cdktf.IResolvable | undefined);
    private _divisionId?;
    get divisionId(): string;
    set divisionId(value: string);
    resetDivisionId(): void;
    get divisionIdInput(): string;
    private _roleId?;
    get roleId(): string;
    set roleId(value: string);
    get roleIdInput(): string;
}
export declare class OauthClientRolesList extends cdktf.ComplexList {
    protected terraformResource: cdktf.IInterpolatingParent;
    protected terraformAttribute: string;
    protected wrapsSet: boolean;
    internalValue?: OauthClientRoles[] | cdktf.IResolvable;
    /**
    * @param terraformResource The parent resource
    * @param terraformAttribute The attribute on the parent resource this class is referencing
    * @param wrapsSet whether the list is wrapping a set (will add tolist() to be able to access an item via an index)
    */
    constructor(terraformResource: cdktf.IInterpolatingParent, terraformAttribute: string, wrapsSet: boolean);
    /**
    * @param index the index of the item to return
    */
    get(index: number): OauthClientRolesOutputReference;
}
/**
* Represents a {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client genesyscloud_oauth_client}
*/
export declare class OauthClient extends cdktf.TerraformResource {
    static readonly tfResourceType = "genesyscloud_oauth_client";
    /**
    * Generates CDKTF code for importing a OauthClient resource upon running "cdktf plan <stack-name>"
    * @param scope The scope in which to define this construct
    * @param importToId The construct id used in the generated config for the OauthClient to import
    * @param importFromId The id of the existing OauthClient that should be imported. Refer to the {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client#import import section} in the documentation of this resource for the id to use
    * @param provider? Optional instance of the provider where the OauthClient to import is found
    */
    static generateConfigForImport(scope: Construct, importToId: string, importFromId: string, provider?: cdktf.TerraformProvider): any;
    /**
    * Create a new {@link https://registry.terraform.io/providers/mypurecloud/genesyscloud/1.73.0/docs/resources/oauth_client genesyscloud_oauth_client} Resource
    *
    * @param scope The scope in which to define this construct
    * @param id The scoped construct ID. Must be unique amongst siblings in the same scope
    * @param options OauthClientConfig
    */
    constructor(scope: Construct, id: string, config: OauthClientConfig);
    private _accessTokenValiditySeconds?;
    get accessTokenValiditySeconds(): number;
    set accessTokenValiditySeconds(value: number);
    resetAccessTokenValiditySeconds(): void;
    get accessTokenValiditySecondsInput(): number;
    private _authorizedGrantType?;
    get authorizedGrantType(): string;
    set authorizedGrantType(value: string);
    get authorizedGrantTypeInput(): string;
    get clientId(): any;
    private _clientSecret?;
    get clientSecret(): string;
    set clientSecret(value: string);
    resetClientSecret(): void;
    get clientSecretInput(): string;
    private _description?;
    get description(): string;
    set description(value: string);
    resetDescription(): void;
    get descriptionInput(): string;
    private _directoryClientSecret?;
    get directoryClientSecret(): string;
    set directoryClientSecret(value: string);
    resetDirectoryClientSecret(): void;
    get directoryClientSecretInput(): string;
    private _exposeClientSecret?;
    get exposeClientSecret(): boolean | cdktf.IResolvable;
    set exposeClientSecret(value: boolean | cdktf.IResolvable);
    resetExposeClientSecret(): void;
    get exposeClientSecretInput(): any;
    private _id?;
    get id(): string;
    set id(value: string);
    resetId(): void;
    get idInput(): string;
    get integrationCredentialId(): any;
    private _integrationCredentialName?;
    get integrationCredentialName(): string;
    set integrationCredentialName(value: string);
    resetIntegrationCredentialName(): void;
    get integrationCredentialNameInput(): string;
    private _name?;
    get name(): string;
    set name(value: string);
    get nameInput(): string;
    private _registeredRedirectUris?;
    get registeredRedirectUris(): string[];
    set registeredRedirectUris(value: string[]);
    resetRegisteredRedirectUris(): void;
    get registeredRedirectUrisInput(): string[];
    private _scopes?;
    get scopes(): string[];
    set scopes(value: string[]);
    resetScopes(): void;
    get scopesInput(): string[];
    private _state?;
    get state(): string;
    set state(value: string);
    resetState(): void;
    get stateInput(): string;
    private _roles;
    get roles(): OauthClientRolesList;
    putRoles(value: OauthClientRoles[] | cdktf.IResolvable): void;
    resetRoles(): void;
    get rolesInput(): any;
    protected synthesizeAttributes(): {
        [name: string]: any;
    };
    protected synthesizeHclAttributes(): {
        [name: string]: any;
    };
}