import * as jose from 'jose';
import { UserContext } from '../../context/types';
export type RowndAuthenticatedUser = {
    user_id: string;
    access_token: string;
};
export type IsAuthenticatedResponse = {
    user_id: string;
    access_token: string;
    is_authenticated: true;
    is_expired: boolean;
    err: undefined;
} | {
    user_id: undefined;
    access_token: undefined;
    is_authenticated: false;
    is_expired: boolean;
    err: Error;
};
export declare const CLAIM_USER_ID = "https://auth.rownd.io/app_user_id";
export declare const getRowndApiUrl: () => URL;
type Keystore = (protectedHeader?: jose.JWSHeaderParameters, token?: jose.FlattenedJWSInput) => Promise<jose.KeyLike>;
export declare class TokenHandler {
    private readonly joseInstance;
    private keystoreCache;
    constructor(joseInstance?: typeof jose);
    getKeystore(): Promise<Keystore>;
    getRowndAuthenticationStatus(cookie: string | null, { allowExpired }?: {
        allowExpired?: boolean;
    }): Promise<IsAuthenticatedResponse>;
    determineAccessTokenFromCookie(cookie: string): string | undefined;
    validateAccessToken(accessToken?: string): Promise<{
        payload: jose.JWTPayload;
        accessToken: string;
    }>;
    getRowndUserData(accessToken: string): Promise<null | UserContext>;
}
export declare const getRowndAuthenticationStatus: (cookie: string | null, { allowExpired }?: {
    allowExpired?: boolean | undefined;
}) => Promise<IsAuthenticatedResponse>;
export declare const getRowndUserData: (accessToken: string) => Promise<null | UserContext>;
export {};