import type { IncomingMessage } from 'node:http';
import type { Authenticator, AuthResult } from '../../auth/Authenticator';
import type { GatewayDeployment, InvocationTokenCodec } from './InvocationTokenCodec';
export interface InvocationTokenAuthenticatorOptions {
    codec: InvocationTokenCodec;
    deployment: GatewayDeployment;
    audience?: string;
    issuer?: string;
    now?: () => Date;
    maxClockSkewMs?: number;
}
export declare class InvocationTokenAuthenticator implements Authenticator {
    private readonly codec;
    private readonly deployment;
    private readonly audience?;
    private readonly issuer?;
    private readonly now;
    private readonly maxClockSkewMs;
    constructor(options: InvocationTokenAuthenticatorOptions);
    canAuthenticate(request: IncomingMessage): boolean;
    authenticate(request: IncomingMessage): Promise<AuthResult>;
    private validClaims;
}