import type { JwtPayload as IJwtPayload, JwtHeader as IJwtHeader } from "jsonwebtoken";
import type { IdentityData as IIdentityData } from "../features/security/IdentityContext/Identity.js";
import type { Jwk as IJwk } from "../features/security/utils/verifyJwtUsingJwk.js";
export type IJwt = {
    header: IJwtHeader;
    payload: IJwtPayload;
};
export type OptionalExternal<T> = Omit<T, "external"> & {
    external?: boolean;
};
export type IProviderIdentityData = Omit<IIdentityData, "type" | "profile"> & {
    /**
     * Defaults to `admin` it omitted.
     */
    type?: string;
    profile?: OptionalExternal<NonNullable<IIdentityData["profile"]>>;
};
export interface IIdentityProvider {
    isApplicable(token: string): boolean;
    getIdentity(token: string): Promise<IProviderIdentityData | null>;
}
/** Generic identity provider for token-based authentication. */
export declare const IdentityProvider: import("@webiny/di").Abstraction<IIdentityProvider>;
export declare namespace IdentityProvider {
    type Interface = IIdentityProvider;
    type IdentityData = IProviderIdentityData;
    type JwtPayload = IJwtPayload;
}
export interface IJwtIdentityProvider {
    isApplicable(token: IJwtPayload): boolean;
    getIdentity(token: string, jwt: IJwt): Promise<IProviderIdentityData | null>;
}
/** JWT-specific identity provider for token validation. */
export declare const JwtIdentityProvider: import("@webiny/di").Abstraction<IJwtIdentityProvider>;
export declare namespace JwtIdentityProvider {
    type Interface = IJwtIdentityProvider;
    type Jwt = IJwt;
    type JwtPayload = IJwtPayload;
    type JwtHeader = IJwtHeader;
    type IdentityData = IProviderIdentityData;
}
export interface IOidcIdentityProvider {
    issuer: string;
    clientId: string;
    isApplicable(token: IJwtPayload): boolean;
    getIdentity(jwt: IJwtPayload): Promise<IProviderIdentityData>;
    verifyToken?(token: string): Promise<IJwtPayload | undefined>;
    verifyTokenClaims?(token: IJwtPayload): Promise<void>;
}
/** OIDC-compliant identity provider with issuer validation. */
export declare const OidcIdentityProvider: import("@webiny/di").Abstraction<IOidcIdentityProvider>;
export declare namespace OidcIdentityProvider {
    type Interface = IOidcIdentityProvider;
    type JwtPayload = IJwtPayload;
    type IdentityData = IProviderIdentityData;
}
interface IJwkCache {
    getKeys(issuer: string): Promise<IJwk[]>;
}
/** Cache for JSON Web Keys used in JWT verification. */
export declare const JwkCache: import("@webiny/di").Abstraction<IJwkCache>;
export declare namespace JwkCache {
    type Interface = IJwkCache;
    type Jwk = IJwk;
}
export {};