import * as Soap from "@soapjs/soap";
import { OAuth2StrategyConfig } from "./oauth2.types";
import { SessionHandler } from "../../session/session-handler";
import { BaseAuthStrategy } from "../base-auth.strategy";
import { JwtStrategy } from "../jwt/jwt.strategy";
import { JwtService } from "../../services/jwks.service";
import { PKCEService } from "../../services/pkce.service";
export declare abstract class OAuth2Strategy<TContext = Soap.HttpContext, TUser extends Soap.AuthUser = Soap.AuthUser> extends BaseAuthStrategy<TContext, TUser> {
    protected config: OAuth2StrategyConfig<TContext, TUser>;
    protected session?: SessionHandler;
    protected jwt?: JwtStrategy<TContext, TUser>;
    protected logger?: Soap.Logger;
    abstract readonly name: string;
    protected jwks: JwtService;
    protected pkce: PKCEService<TContext>;
    protected abstract extractAccessToken(context: TContext): Promise<string | undefined>;
    protected abstract extractRefreshToken(context: TContext): Promise<string | undefined>;
    protected abstract storeAccessToken(token: string, context: TContext): Promise<void>;
    protected abstract storeRefreshToken(token: string, context: TContext): Promise<void>;
    protected abstract embedAccessToken(token: string, context: TContext): any;
    protected abstract embedRefreshToken(token: string, context: TContext): any;
    protected abstract extractAuthorizationCode(context: TContext): string | null;
    protected abstract redirectUser(context: TContext, authUrl: string): void;
    constructor(config: OAuth2StrategyConfig<TContext, TUser>, session?: SessionHandler, jwt?: JwtStrategy<TContext, TUser>, logger?: Soap.Logger);
    logout(context: TContext): Promise<void>;
    protected getCredentialsForPasswordGrant(context: TContext): Promise<{
        identifier: string;
        password: string;
    }>;
    authenticate(context: TContext): Promise<Soap.AuthResult<TUser> | null>;
    protected processOAuthFlow(context: TContext): Promise<{
        accessToken: string;
        refreshToken?: string;
    }>;
    protected verifyAuthorizationCode(context: TContext, code: string): Promise<void>;
    protected startAuthorizationFlow(context: TContext): Promise<void>;
    protected validateState(context: TContext): Promise<void>;
    protected buildAuthorizationUrl(context: TContext, state?: string, nonce?: string): Promise<string>;
    protected exchangeCodeForToken(context: TContext, code: string): Promise<{
        accessToken: string;
        idToken?: string;
        refreshToken?: string;
    }>;
    login(context: TContext): Promise<void>;
    protected fetchUser(accessToken: string): Promise<TUser | null>;
    protected exchangeClientCredentials(): Promise<{
        accessToken: string;
    }>;
    protected exchangePasswordGrant(username: string, password: string): Promise<{
        accessToken: string;
    }>;
    refreshAccessToken(context: TContext): Promise<{
        accessToken: string;
        refreshToken?: string;
        idToken?: string;
    }>;
    protected handleTokenRefreshFailure(context: TContext): Promise<void>;
    protected verifyIdToken(idToken: string, context?: TContext): Promise<TUser | null>;
    revokeToken(token: string): Promise<void>;
    protected isTokenExpired(token: string): boolean;
}