import type { CloudflareAccessConfig } from "../config/type.js";
import type { AuthenticationRequest } from "./metadata.js";
export interface CloudflareAccessIdentity {
    subject: string;
    email: string;
    expiresAt: Date;
}
/**
 * Verifies the assertion Cloudflare Access adds after evaluating the application's
 * policy. The authorization cookie is deliberately not accepted at the origin:
 * Cloudflare recommends this signed header because a cookie is not guaranteed to
 * be forwarded.
 */
export declare function cloudflareAccessIdentity(request: AuthenticationRequest, config: CloudflareAccessConfig): Promise<CloudflareAccessIdentity | undefined>;
//# sourceMappingURL=cloudflare-access.d.ts.map