import type { WorkerContext } from "./context.js";
export interface OAuth2Config {
    enabled?: boolean;
    issuer?: string;
    audience?: string;
    requiredScopes?: string[];
    requiredRoles?: string[];
    requiredGroups?: string[];
    mode?: "auto" | "client_credentials" | "auth_code" | string;
    clientId?: string;
    clientSecret?: string;
    scopes?: string[];
    redirectUrl?: string;
    authorizeUrl?: string;
    tokenUrl?: string;
    jwksUrl?: string;
}
export declare function resolveOAuth2Config(explicit?: OAuth2Config): OAuth2Config | undefined;
export declare function oauth2TokenFromConfig(ctx: WorkerContext | undefined, cfg: OAuth2Config | undefined): Promise<string>;
//# sourceMappingURL=oauth2.d.ts.map