/**
 * Resolve and authenticate the client behind a request.
 *
 * @param {import('../request.js').ServerRequest} req
 * @param {Record<string, any>} config
 * @returns {Promise<import('../clients.js').Client>}
 */
export function authenticateClient(req: import("../request.js").ServerRequest, config: Record<string, any>): Promise<import("../clients.js").Client>;
/**
 * Compute the mTLS certificate-bound confirmation (`cnf.x5t#S256`) for a
 * client that authenticated with a certificate, so the issued token is
 * bound to that certificate (RFC 8705 §3). Returns `undefined` for
 * non-mTLS clients.
 *
 * @param {import('../request.js').ServerRequest} req
 * @param {import('../clients.js').Client} client
 * @returns {Record<string, string> | undefined}
 */
export function certificateConfirmation(req: import("../request.js").ServerRequest, client: import("../clients.js").Client): Record<string, string> | undefined;