import { aws_cloudfront as cloudfront } from 'aws-cdk-lib';
import * as constructs from 'constructs';
import { Extension, ExtensionConfig, AddBehaviorOptions } from './securedCloudFront';
export interface CognitoCloudFrontProps<TRole extends string = string> {
    readonly defaultBehavior: Omit<cloudfront.BehaviorOptions, 'functionAssociations'>;
    readonly domainNames: string[];
    readonly certificate: any;
    readonly authSsmParamPrefix: string;
    readonly authRegion: string;
    readonly defaultExtensions?: Extension[];
    readonly defaultExtensionConfig?: ExtensionConfig<TRole>;
    readonly defaultRootObject?: string;
    readonly errorResponsePagePath?: string;
    /** Whether to add custom error responses (SPA routing). Defaults to false. */
    readonly enableErrorResponses?: boolean;
    readonly enableUserInfoInjection?: boolean;
    readonly userInfoNameFields?: string[];
}
export declare class CognitoSecuredCloudFront<TRole extends string = string> extends constructs.Construct {
    readonly distribution: cloudfront.Distribution;
    private readonly authCheckFunction;
    private readonly userInfoFunction?;
    private readonly functionComposer;
    private readonly composedFunctions;
    private lastCreatedFunction;
    private readonly tlsOriginRequestPolicy;
    private readonly cognitoDomain;
    private readonly clientId;
    private readonly redirectUri;
    private readonly kvs;
    constructor(scope: constructs.Construct, id: string, props: CognitoCloudFrontProps<TRole>);
    addBehavior(pathPattern: string, origin: cloudfront.IOrigin, options?: AddBehaviorOptions<TRole>): void;
    private buildFunctionAssociations;
    private generateFunctionCacheKey;
    private generateFunctionId;
    private buildAuthCheckCode;
    private loadAndReplaceUserInfoCode;
}