import { Algorithm } from "jsonwebtoken";
import { CredentialsConfig, PKCEConfig, AuthRouteConfig, TokenAuthStrategyConfig, PersistenceConfig, ContextOperationConfig } from "../../types";
import { ExternalIdentityConfig } from "./external-identity.types";
export interface OAuth2Endpoints {
    authorizationUrl: string;
    tokenUrl: string;
    userInfoUrl?: string;
    introspectionUrl?: string;
    revocationUrl?: string;
    logoutUrl?: string;
}
export interface OAuth2StateConfig<TContext = unknown, TData = any> {
    persistence?: PersistenceConfig<TData, TContext>;
    context?: ContextOperationConfig<TContext, TData>;
    generateState?: () => string | Promise<string>;
    validateState?: (storedState: TContext, returnedState: string) => boolean | Promise<boolean>;
}
export interface OAuth2NonceConfig<TContext = unknown, TData = any> {
    persistence?: PersistenceConfig<TData, TContext>;
    context?: ContextOperationConfig<TContext, TData>;
    generateNonce?: () => string | Promise<string>;
    validateNonce?: (storedNonce: string | null, returnedNonce: string) => boolean | Promise<boolean>;
}
export type JwksConfig = {
    jwksUri: string;
    issuer: string;
    algorithms?: Algorithm[];
    audience?: string;
};
export interface OAuth2StrategyConfig<TContext = unknown, TUser = unknown> extends TokenAuthStrategyConfig<TContext, TUser> {
    autoLogoutOnRefreshFailure?: boolean;
    clientId: string;
    clientSecret: string;
    redirectUri: string;
    scope?: string | string[];
    audience?: string;
    responseType?: "code" | "token" | "id_token" | string;
    grantType: "authorization_code" | "client_credentials" | "password" | "refresh_token" | string;
    endpoints: OAuth2Endpoints;
    credentials?: CredentialsConfig<TContext>;
    pkce?: PKCEConfig<TContext>;
    routes: {
        login: AuthRouteConfig;
        callback: AuthRouteConfig;
        logout?: AuthRouteConfig;
        refresh?: AuthRouteConfig;
        revoke?: AuthRouteConfig;
        [key: string]: AuthRouteConfig;
    };
    state?: OAuth2StateConfig<TContext>;
    nonce?: OAuth2NonceConfig<TContext>;
    jwks?: JwksConfig;
}
export interface OAuth2ProviderConfig<TContext = unknown, TUser = unknown> extends Omit<OAuth2StrategyConfig<TContext, TUser>, "endpoints" | "grantType" | "routes"> {
    grantType?: "authorization_code";
    endpoints?: Partial<OAuth2Endpoints>;
    externalIdentity?: ExternalIdentityConfig<TContext, any> & {
        issueAppTokens?: boolean;
    };
    routes?: OAuth2StrategyConfig<TContext, TUser>["routes"];
}