declare const DEFAULT_CSRF_TTL_MS: number;
interface CsrfProtectionOptions {
    expiresIn?: number;
    maxAge?: number;
}
declare function createCsrfProtection(secret: string, options?: CsrfProtectionOptions): {
    generate(_sessionKey?: string): string;
    verify(token: string | undefined, _sessionKey?: string): boolean;
    secret: string;
};
export type { CsrfProtectionOptions };
export { createCsrfProtection, DEFAULT_CSRF_TTL_MS };