import { Payload } from '@owox/idp-protocol';
import ms from 'ms';
import { IdentityOwoxClient } from '../../client/index.js';
export interface TokenServiceConfig {
    algorithm: string;
    clockTolerance: ms.StringValue | number;
    issuer: string;
    jwtKeyCacheTtl: ms.StringValue;
}
/**
 * Validates and parses JWT access tokens using an inline JWKS cache.
 */
export declare class TokenService {
    private readonly client;
    private readonly config;
    private cacheEntry;
    constructor(client: IdentityOwoxClient, config: TokenServiceConfig);
    normalizeToken(authorization: string): string;
    parse(token: string): Promise<Payload | null>;
    private fetchJwks;
    private loadKeys;
    private getKeyResolver;
    private refreshKeyResolver;
    private verifyJwt;
}
//# sourceMappingURL=token-service.d.ts.map