import { type IdentityPlugin } from "@nifrajs/core/server";
import { type MaybePromise } from "./_utils.js";
export type BasicAuthPlugin<P> = IdentityPlugin & {
    principal(request: Request): P | null;
    requirePrincipal(request: Request): P;
};
export interface BasicAuthStaticOptions<P = string> {
    readonly username: string;
    readonly password: string;
    readonly principal?: P;
    readonly realm?: string;
    readonly optional?: boolean;
}
export interface BasicAuthVerifyOptions<P> {
    readonly verify: (username: string, password: string) => MaybePromise<P | null | undefined>;
    readonly realm?: string;
    readonly optional?: boolean;
}
/**
 * HTTP Basic authentication. Prefer short-lived Basic Auth for internal tools and staging gates, not
 * public user login. Static credentials are compared in constant time after SHA-256 hashing; the
 * callback form is available for external stores.
 */
export declare function basicAuth(options: BasicAuthStaticOptions): BasicAuthPlugin<string>;
export declare function basicAuth<P>(options: BasicAuthStaticOptions<P>): BasicAuthPlugin<P>;
export declare function basicAuth<P>(options: BasicAuthVerifyOptions<P>): BasicAuthPlugin<P>;
//# sourceMappingURL=basic-auth.d.ts.map