import { ITokenConstraint } from "./ITokenConstraint";
import { Result } from "toyhauler-common/contracts";
import { Token } from "./Token";
import { AuthSettings } from "./AuthSettings";
export declare class MinRequiredJwtConstraint implements ITokenConstraint {
    private settings;
    /** Asserts the payload and header against the signature,
     * asserts that the token is not expired (using payload param: "exp"),
     * and asserts that expiration exists when required by AuthSettings.requireTokenExpiration.
     * NOTE: This validator must ALWAYS fire, so no need to configure for it, or even expose it outside this class.  It's just built-in. */
    constructor(settings: AuthSettings);
    validate(token: Token): Result;
}
export declare class PrincipalTokenConstraint implements ITokenConstraint {
    /** Asserts that a principal user is represented in the token. */
    constructor();
    validate(jwt: Token): Result;
}
export declare class TenantUserTokenConstraint implements ITokenConstraint {
    /** Asserts that both a user and tenant are represented in the token */
    constructor();
    validate(jwt: Token): Result;
}