/**
 * Compares two token strings without content-dependent timing once their
 * byte lengths match.
 *
 * @param {string} left - Candidate token.
 * @param {string} right - Configured token.
 * @returns {boolean} Whether the values match.
 */
export function constantTimeEqual(left: string, right: string): boolean;
/**
 * Extracts a bearer token from an Authorization header.
 *
 * @param {unknown} authorization - Header value.
 * @returns {string|null} Token or null.
 */
export function bearerToken(authorization: unknown): string | null;
//# sourceMappingURL=auth.d.ts.map