import { CredentialsExtractor, type Credentials, type HttpRequest, type TargetExtractor } from '@solid/community-server';
/**
 * CSS-compatible DPoP credential extractor that admits one configured HTTP
 * loopback IP origin without weakening any access-token or DPoP checks.
 *
 * HTTPS and localhost deployments keep using the upstream verifier unchanged.
 */
export declare class ConfiguredLoopbackDPoPWebIdExtractor extends CredentialsExtractor {
    private readonly verify;
    private readonly allowedHttpOrigin?;
    private readonly originalUrlExtractor;
    protected readonly logger: import("global-logger-factory").Logger<unknown>;
    constructor(originalUrlExtractor: TargetExtractor, baseUrl: string);
    canHandle({ headers }: HttpRequest): Promise<void>;
    handle(request: HttpRequest): Promise<Credentials>;
    private verifyWithLocalRouteFallback;
    private trustedLocalRouteUrl;
    private trustedLocalRouteTransport;
}
export declare function deriveCssLoopbackBaseUrl(cssPort: string | undefined): string | undefined;