import { AuthResult, Payload } from '@owox/idp-protocol';
import { NextFunction, Request, Response } from 'express';
import { IdentityOwoxClient, TokenResponse } from '../client/index.js';
import type { IdpOwoxConfig } from '../config/index.js';
import type { DatabaseStore } from '../store/database-store.js';
import type { AuthFlowParams } from '../utils/request-utils.js';
export type TokenResponseWithContext = TokenResponse & {
    authFlowParams?: AuthFlowParams;
};
/**
 * Wraps Identity OWOX token operations and refresh-token cookies.
 */
export declare class OwoxTokenFacade {
    private readonly identityClient;
    private readonly store;
    private readonly config;
    private readonly cookieName;
    private readonly logger;
    private readonly tokenService;
    constructor(identityClient: IdentityOwoxClient, store: DatabaseStore, config: IdpOwoxConfig, cookieName?: string);
    changeAuthCode(code: string, state: string): Promise<TokenResponseWithContext>;
    introspectToken(token: string): Promise<Payload | null>;
    parseToken(token: string): Promise<Payload | null>;
    verifyToken(token: string): Promise<Payload | null>;
    refreshToken(refreshToken: string): Promise<AuthResult>;
    /**
     * Exchange Google ID Token from Google Sheets Extension for OWOX access and refresh tokens
     */
    exchangeGoogleIdToken(googleIdToken: string, projectId?: string): Promise<AuthResult>;
    revokeToken(token: string): Promise<void>;
    accessTokenMiddleware(req: Request, res: Response, _next: NextFunction): Promise<void | Response>;
    setTokenToCookie(res: Response, req: Request, refreshToken: string, expiresIn: number): void;
}
//# sourceMappingURL=owox-token-facade.d.ts.map