import { Uuid, Base64String, TokenData, RFC3339Date, Url } from './';
import { AllRoleType } from './practice';
export declare type AuthRefreshFunc = (refreshToken?: string) => Promise<AuthTokenResponse>;
export interface Tokens {
    accessToken?: string;
    refreshToken?: string;
}
export interface AuthTokenRequest {
    practiceUuid: string;
    email: string;
    password: Base64String;
    otp?: string;
}
export interface AuthTokenResponse {
    accessToken: string;
    tokenType: string;
    refreshToken?: string;
    expiresIn: number;
}
/**
 * This interface is used to request a M2M token as a service
 */
export interface M2MTokenRequest {
    clientId: string;
    clientSecret: string;
    requestedScopes: string[];
    practiceUuid?: string;
}
export interface AuthRecoverRequest {
    practiceUuid: string;
    email: string;
}
export declare type IdentityResendConfirmEmailRequest = AuthRecoverRequest;
export interface WhoAmIResponse {
    aud: string;
    exp: number;
    jti: string;
    iat: number;
    iss: string;
    nbf: number;
    sub: string;
    scope: string;
    email: string;
    practice: string;
}
export interface IdentityCreateRequest {
    practiceUuid: Uuid;
    email: string;
    emailConfirmed?: boolean;
    password: Base64String;
    publicKey: Base64String;
    recoveryPassword: Base64String;
    tosAndCpAcceptance: TosAndCpAcceptanceRequest;
    tokenData?: TokenData;
    subscriptionAcceptance?: SubscriptionAcceptanceRequest;
}
export interface TosAndCpAcceptanceRequest {
    tosVersion: string;
    cpVersion: string;
}
export interface IdentityResponse {
    id: Uuid;
    practiceUuid?: Uuid;
    email?: string;
    emailConfirmed: boolean;
    tokenData?: TokenData;
    mfaEnabled?: boolean;
    mfaSecret?: Base64String;
    publicKey: Base64String;
    recoveryLogin?: Uuid;
    recoveryPassword: Base64String;
    recoveryMasterKey?: Base64String;
    recoverySecurityQuestions?: SecretShard[];
    legal?: LegalData;
    createdAt?: string;
    updatedAt?: string;
    refreshToken?: string;
}
export interface IdentityUpdateRequest {
    emailConfirmed?: boolean;
    password?: PasswordUpdateRequest;
    mfaEnable?: MFAEnableRequest;
    recoveryPassword?: Base64String;
    recoveryMasterKey?: Base64String;
    recoverySecurityQuestions?: SecretShard[];
    tokenData?: TokenData;
    epAcceptance?: EpAcceptanceRequest;
    rpAcceptance?: RpAcceptanceRequest;
    subscriptionAcceptance?: SubscriptionAcceptanceRequest;
}
export interface EpAcceptanceRequest {
    epVersion: string;
}
export interface RpAcceptanceRequest {
    rpVersion: string;
}
export interface SubscriptionAcceptanceRequest {
    email: string;
}
export interface PasswordUpdateRequest {
    oldPassword?: Base64String;
    newPassword: Base64String;
}
export interface QRCodeRequest {
    password: Base64String;
}
export interface QRCodeResponse {
    url: string;
    qrContentType: string;
    qrBytes: Base64String;
}
export interface MFAEnableRequest {
    password: Base64String;
    otp: string;
}
export interface SecretShard {
    securityQuestion: string;
    securityAnswer?: string;
    nonce: Base64String;
    encryptedShare: Base64String;
}
export interface LegalData {
    tosAcceptedAtTime?: RFC3339Date;
    tosAcceptedVersion: Url;
    tosAcceptedAtIP?: string;
    cpAcceptedAtTime?: RFC3339Date;
    cpAcceptedVersion: Url;
    cpAcceptedAtIP?: string;
    epAcceptedAtTime?: RFC3339Date;
    epAcceptedVersion: Url;
    epAcceptedAtIP?: string;
    rpAcceptedAtTime?: RFC3339Date;
    rpAcceptedVersion: Url;
    rpAcceptedAtIP?: string;
    subscribedAtTime?: RFC3339Date;
    subscribedAtIP?: string;
    subscribedEmail?: string;
    subscribedAudience?: string;
}
export declare type RoleBasedScopes = AllRoleType;
export declare type PermissionBasedScopes = 'consult.consults.get' | 'consult.consults.post' | 'consult.consults.put' | 'practice.assignments.post' | 'practice.emails.get' | 'practice.configs.get' | 'practice.practitioners.get' | 'practice.invoices.get' | 'practice.payments.get' | 'practice.secrets.get' | 'teller.emails.post';
export declare type AllScopes = RoleBasedScopes | PermissionBasedScopes;