import type { TRegisterErrors } from '@venizia/ignis-helpers/core';
/** Codes a client branches on for a failed authentication. A throw site may override `message` for detail; the code and status come from here. */
export declare const AuthenticationErrors: {
    readonly HEADER_MISSING: {
        readonly message: {
            readonly text: "Missing authorization header";
            readonly code: "core.authentication.header_missing";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly SCHEME_INVALID: {
        readonly message: {
            readonly text: "Unsupported authorization scheme";
            readonly code: "core.authentication.scheme_invalid";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly HEADER_MALFORMED: {
        readonly message: {
            readonly text: "Malformed authorization header";
            readonly code: "core.authentication.header_malformed";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly TOKEN_MISSING: {
        readonly message: {
            readonly text: "Missing request token";
            readonly code: "core.authentication.token_missing";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    /** Covers expiry, a bad signature and a malformed token alike - the reason rides in `cause`, never in the code a client sees. */
    readonly TOKEN_INVALID: {
        readonly message: {
            readonly text: "Invalid or expired token";
            readonly code: "core.authentication.token_invalid";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly TOKEN_PAYLOAD_INVALID: {
        readonly message: {
            readonly text: "Invalid token payload";
            readonly code: "core.authentication.token_payload_invalid";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly CREDENTIALS_MALFORMED: {
        readonly message: {
            readonly text: "Malformed credentials";
            readonly code: "core.authentication.credentials_malformed";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly CREDENTIALS_INVALID: {
        readonly message: {
            readonly text: "Invalid username or password";
            readonly code: "core.authentication.credentials_invalid";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly FAILED: {
        readonly message: {
            readonly text: "Authentication failed";
            readonly code: "core.authentication.failed";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly USER_UNRESOLVED: {
        readonly message: {
            readonly text: "Failed to identify authenticated user";
            readonly code: "core.authentication.user_unresolved";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly ASSERTION_MISSING: {
        readonly message: {
            readonly text: "Missing service assertion";
            readonly code: "core.authentication.service.assertion_missing";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly ASSERTION_INVALID: {
        readonly message: {
            readonly text: "Invalid service assertion";
            readonly code: "core.authentication.service.assertion_invalid";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly CALLER_NOT_ALLOWED: {
        readonly message: {
            readonly text: "Service caller is not allowed";
            readonly code: "core.authentication.service.caller_not_allowed";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly REQUEST_BINDING_MISMATCH: {
        readonly message: {
            readonly text: "Service assertion does not match this request";
            readonly code: "core.authentication.service.request_binding_mismatch";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
    readonly PRINCIPAL_UNRESOLVED: {
        readonly message: {
            readonly text: "Service caller resolved to no principal";
            readonly code: "core.authentication.service.principal_unresolved";
        };
        readonly statusCode: 401;
        readonly category: "auth";
    };
};
declare module '@venizia/ignis-helpers/core' {
    interface IErrorKeyRegistry extends TRegisterErrors<typeof AuthenticationErrors> {
    }
}
//# sourceMappingURL=errors.d.ts.map