import { type ApplicationIdentityClaimNames } from "./identity.js";
import { type JwksCache } from "./jwks-cache.js";
import type { ApplicationIdentity } from "./types.js";
export interface VerifyOidcIdTokenOptions {
    readonly token: string;
    readonly issuer: string;
    readonly clientId: string;
    readonly nonce: string;
    readonly jwksUri: string;
    readonly jwksCache: JwksCache;
    readonly allowedAlgorithms?: readonly string[];
    readonly clockToleranceSeconds?: number;
    readonly maxTokenAgeSeconds?: number;
    readonly now?: () => number;
    readonly claimNames?: ApplicationIdentityClaimNames;
    readonly allowInsecureLoopback?: boolean;
    readonly timeoutMs?: number;
}
export declare function verifyOidcIdToken(options: VerifyOidcIdTokenOptions): Promise<ApplicationIdentity>;
export declare function validateOidcAudienceClaims(aud: unknown, azp: unknown, clientId: string): void;
//# sourceMappingURL=id-token.d.ts.map