import { AxiosInstance, AxiosRequestConfig } from "axios";
import { EntityInfo, TokenResponse, UserInfo } from "./shared-constants";
interface AccessTokenPayload {
    exp: number;
    iat: number;
    iss: string;
    aud: string;
    authorization: {
        entityInfo: EntityInfo;
    };
}
export interface IdTokenPayload {
    rt_hash: string;
    nonce?: string;
    iat: number;
    iss: string;
    at_hash: string;
    sub: string;
    exp: number;
    aud: string;
    amr: string[];
    userInfo: UserInfo;
}
export interface OidcHelperConstructor {
    authorizationUrl: string;
    tokenUrl: string;
    clientID: string;
    clientSecret: string;
    redirectUri: string;
    jweDecryptKey: string;
    jwsVerifyKey: string;
    additionalHeaders?: Record<string, string>;
}
export declare class OidcHelper {
    private axiosClient;
    private authorizationUrl;
    private tokenUrl;
    private clientID;
    private clientSecret;
    private redirectUri;
    private jweDecryptKey;
    private jwsVerifyKey;
    private additionalHeaders?;
    constructor(props: OidcHelperConstructor);
    constructAuthorizationUrl: (state: string, nonce?: string, overrideAuthUrl?: string) => string;
    /**
     * Get tokens from Corppass endpoint. Note: This will fail if not on an IP whitelisted by SP.
     * Use getAccessTokenPayload and getIdTokenPayload on returned Token Response to get the token payload
     */
    getTokens: (authCode: string, axiosRequestConfig?: AxiosRequestConfig) => Promise<TokenResponse>;
    /**
     * Get fresh tokens from Corppass endpoint. Note: This will fail if not on an IP whitelisted by SP.
     * Use getIdTokenPayload on returned Token Response to get the token payload
     */
    refreshTokens: (refreshToken: string, axiosRequestConfig?: AxiosRequestConfig) => Promise<TokenResponse>;
    /**
     * Decodes the access Token JWT inside the TokenResponse to get the payload
     */
    getAccessTokenPayload(tokens: TokenResponse): Promise<AccessTokenPayload>;
    /**
     * Decrypts the ID Token JWT inside the TokenResponse to get the payload
     * Use extractInfoFromIdTokenSubject on the returned Token Payload to get the NRIC, system defined ID and country code
     */
    getIdTokenPayload(tokens: TokenResponse): Promise<IdTokenPayload>;
    /**
     * Returns the NRIC, system defined ID and country code from the ID token payload
     */
    extractInfoFromIdTokenSubject(payload: IdTokenPayload): {
        nric: string;
        uuid?: string;
        countryCode?: string;
    };
    private validateStatus;
    _testExports: {
        corppassClient: AxiosInstance;
        validateStatusFn: (status: number) => boolean;
    };
}
export {};
//# sourceMappingURL=corppass-helper.d.ts.map