/**
 * NitroStack Authentication Module
 *
 * Multiple authentication options:
 * 1. Simple JWT - For 70% of use cases (internal tools, APIs)
 * 2. API Keys - For simple scenarios (service-to-service)
 * 3. OAuth 2.1 - For enterprise/SaaS (full compliance)
 *
 * Standards:
 * - OAuth 2.1 (IETF draft-ietf-oauth-v2-1-13)
 * - RFC 9728 - Protected Resource Metadata
 * - RFC 8414 - Authorization Server Metadata
 * - RFC 7591 - Dynamic Client Registration
 * - RFC 8707 - Resource Indicators (Token Audience Binding)
 * - RFC 7636 - PKCE
 * - RFC 7662 - Token Introspection
 * - RFC 6750 - Bearer Token Usage
 */
export { SecretValue, isSecretValue, unwrapSecret, type SecretString, type FromValueOptions, } from './secure-secret.js';
export { createSimpleJWTAuth, generateJWT, verifyJWT, decodeJWT, type SimpleJWTConfig, type JWTPayload, type StandardJWTClaims, type CustomJWTClaims, type GenerateJWTOptions, } from './simple-jwt.js';
export { createAPIKeyAuth, generateAPIKey, hashAPIKey, isValidAPIKeyFormat, generateAPIKeyWithMetadata, validateAPIKeyWithMetadata, type APIKeyConfig, type APIKeyWithMetadata, } from './api-key.js';
export { setupJWTAuth, setupAPIKeyAuth, setupOAuthAuth, generateTestCredentials, printAuthSetupInstructions, validateAuthEnv, } from './quick-setup.js';
export * from './types.js';
export * from './pkce.js';
export * from './server-metadata.js';
export * from './token-validation.js';
export { createAuthMiddleware, requireScopes, optionalAuth, RequireScopes, isAuthenticated, hasScope, hasAnyScope, hasAllScopes, } from './middleware.js';
export { OAuth2Client } from './client.js';
export { TokenStore, MemoryTokenStore, FileTokenStore, createDefaultTokenStore, isTokenExpired, calculateExpiration, tokenResponseToStored, getIssuerBoundToken, } from './token-store.js';
export { createClientIdMetadataDocument, validateClientIdMetadataDocument, validateClientIdentifierUrl, resolveClientIdMetadataDocument, isClientIdMetadataUrl, isSpecialUseIp, assertSafeFetchTarget, readBoundedJson, MAX_CIMD_DOCUMENT_BYTES, DEFAULT_CIMD_FETCH_TIMEOUT_MS, type ClientIdMetadataDocument, } from './cimd.js';
export { configureServerAuth, createScopeGuards, createMCPScopeGuards, getStandardMCPScopes, validateAuthConfig, } from './server-integration.js';
//# sourceMappingURL=index.d.ts.map