@xylex-group/athena 2.12.0 → 2.13.0

package/dist/social-providers.d.ts

@@ -0,0 +1,4948 @@
+import * as url from 'url';
+import * as z from 'zod';
+export { aQ as AthenaAuthSocialProviderExtensions, aR as AuthOAuthProvider, aS as AuthSocialProvider, aT as AuthSocialProviderBuiltin } from './types-eAKAh71s.js';
+import { importJWK, JWTPayload } from 'jose';
+import * as crypto from 'crypto';
+
+type Awaitable<T> = T | Promise<T>;
+type AwaitableFunction<T> = T | (() => Awaitable<T>);
+
+interface OAuth2Tokens {
+    tokenType?: string | undefined;
+    accessToken?: string | undefined;
+    refreshToken?: string | undefined;
+    accessTokenExpiresAt?: Date | undefined;
+    refreshTokenExpiresAt?: Date | undefined;
+    scopes?: string[] | undefined;
+    idToken?: string | undefined;
+    /**
+     * Raw token response from the provider.
+     * Preserves provider-specific fields that are not part of the standard OAuth2 token response.
+     */
+    raw?: Record<string, unknown> | undefined;
+}
+type ProviderOptions<Profile extends Record<string, any> = any> = {
+    /**
+     * The client ID of your application.
+     *
+     * This is usually a string but can be any type depending on the provider.
+     */
+    clientId?: unknown | undefined;
+    /**
+     * The client secret of your application
+     */
+    clientSecret?: string | undefined;
+    /**
+     * The scopes you want to request from the provider
+     */
+    scope?: string[] | undefined;
+    /**
+     * Remove default scopes of the provider
+     */
+    disableDefaultScope?: boolean | undefined;
+    /**
+     * The redirect URL for your application. This is where the provider will
+     * redirect the user after the sign in process. Make sure this URL is
+     * whitelisted in the provider's dashboard.
+     */
+    redirectURI?: string | undefined;
+    /**
+     * Custom authorization endpoint URL.
+     * Use this to override the default authorization endpoint of the provider.
+     * Useful for testing with local OAuth servers or using sandbox environments.
+     */
+    authorizationEndpoint?: string | undefined;
+    /**
+     * The client key of your application
+     * Tiktok Social Provider uses this field instead of clientId
+     */
+    clientKey?: string | undefined;
+    /**
+     * Disable provider from allowing users to sign in
+     * with this provider with an id token sent from the
+     * client.
+     */
+    disableIdTokenSignIn?: boolean | undefined;
+    /**
+     * verifyIdToken function to verify the id token
+     */
+    verifyIdToken?: ((token: string, nonce?: string) => Promise<boolean>) | undefined;
+    /**
+     * Custom function to get user info from the provider
+     */
+    getUserInfo?: ((token: OAuth2Tokens) => Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>) | undefined;
+    /**
+     * Custom function to refresh a token
+     */
+    refreshAccessToken?: ((refreshToken: string) => Promise<OAuth2Tokens>) | undefined;
+    /**
+     * Custom function to map the provider profile to a
+     * user.
+     */
+    mapProfileToUser?: ((profile: Profile) => {
+        id?: string;
+        name?: string;
+        email?: string | null;
+        image?: string;
+        emailVerified?: boolean;
+        [key: string]: any;
+    } | Promise<{
+        id?: string;
+        name?: string;
+        email?: string | null;
+        image?: string;
+        emailVerified?: boolean;
+        [key: string]: any;
+    }>) | undefined;
+    /**
+     * Disable implicit sign up for new users. When set to true for the provider,
+     * sign-in need to be called with with requestSignUp as true to create new users.
+     */
+    disableImplicitSignUp?: boolean | undefined;
+    /**
+     * Disable sign up for new users.
+     */
+    disableSignUp?: boolean | undefined;
+    /**
+     * The prompt to use for the authorization code request
+     */
+    prompt?: ("select_account" | "consent" | "login" | "none" | "select_account consent") | undefined;
+    /**
+     * The response mode to use for the authorization code request
+     */
+    responseMode?: ("query" | "form_post") | undefined;
+    /**
+     * If enabled, the user info will be overridden with the provider user info
+     * This is useful if you want to use the provider user info to update the user info
+     *
+     * @default false
+     */
+    overrideUserInfoOnSignIn?: boolean | undefined;
+};
+
+/**
+ * WeChat user profile information
+ * @see https://developers.weixin.qq.com/doc/oplatform/en/Website_App/WeChat_Login/Wechat_Login.html
+ */
+interface WeChatProfile extends Record<string, any> {
+    /**
+     * User's unique OpenID
+     */
+    openid: string;
+    /**
+     * User's nickname
+     */
+    nickname: string;
+    /**
+     * User's avatar image URL
+     */
+    headimgurl: string;
+    /**
+     * User's privileges
+     */
+    privilege: string[];
+    /**
+     * User's UnionID (unique across the developer's various applications)
+     */
+    unionid?: string;
+    /** @note Email is currently unsupported by WeChat */
+    email?: string;
+}
+interface WeChatOptions extends ProviderOptions<WeChatProfile> {
+    /**
+     * WeChat App ID
+     */
+    clientId: string;
+    /**
+     * WeChat App Secret
+     */
+    clientSecret: string;
+    /**
+     * Platform type for WeChat login
+     * - Currently only supports "WebsiteApp" for WeChat Website Application (网站应用)
+     * @default "WebsiteApp"
+     */
+    platformType?: "WebsiteApp";
+    /**
+     * UI language for the WeChat login page
+     * cn for Simplified Chinese, en for English
+     * @default "cn" if left undefined
+     */
+    lang?: "cn" | "en";
+}
+declare const wechat: (options: WeChatOptions) => {
+    id: "wechat";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): url.URL;
+    validateAuthorizationCode: ({ code }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<{
+        tokenType: "Bearer";
+        accessToken: string;
+        refreshToken: string;
+        accessTokenExpiresAt: Date;
+        scopes: string[];
+        openid: string;
+        unionid: string | undefined;
+    }>;
+    refreshAccessToken: ((refreshToken: string) => Promise<OAuth2Tokens>) | ((refreshToken: string) => Promise<{
+        tokenType: "Bearer";
+        accessToken: string;
+        refreshToken: string;
+        accessTokenExpiresAt: Date;
+        scopes: string[];
+    }>);
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: WeChatOptions;
+};
+
+interface VercelProfile {
+    sub: string;
+    name?: string;
+    preferred_username?: string;
+    email?: string;
+    email_verified?: boolean;
+    picture?: string;
+}
+interface VercelOptions extends ProviderOptions<VercelProfile> {
+    clientId: string;
+}
+declare const vercel: (options: VercelOptions) => {
+    id: "vercel";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: VercelOptions;
+};
+
+interface RailwayProfile {
+    /** The user's unique ID (OAuth `sub` claim). */
+    sub: string;
+    /** The user's email address. */
+    email: string;
+    /** The user's display name. */
+    name: string;
+    /** URL of the user's profile picture. */
+    picture: string;
+}
+interface RailwayOptions extends ProviderOptions<RailwayProfile> {
+    clientId: string;
+}
+declare const railway: (options: RailwayOptions) => {
+    id: "railway";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: RailwayOptions;
+};
+
+interface PolarProfile {
+    id: string;
+    email: string;
+    username: string;
+    avatar_url: string;
+    github_username?: string | undefined;
+    account_id?: string | undefined;
+    public_name?: string | undefined;
+    email_verified?: boolean | undefined;
+    profile_settings?: {
+        profile_settings_enabled?: boolean;
+        profile_settings_public_name?: string;
+        profile_settings_public_avatar?: string;
+        profile_settings_public_bio?: string;
+        profile_settings_public_location?: string;
+        profile_settings_public_website?: string;
+        profile_settings_public_twitter?: string;
+        profile_settings_public_github?: string;
+        profile_settings_public_email?: string;
+    } | undefined;
+}
+interface PolarOptions extends ProviderOptions<PolarProfile> {
+}
+declare const polar: (options: PolarOptions) => {
+    id: "polar";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: PolarOptions;
+};
+
+/**
+ * PayPal Login with PayPal userinfo profile (schema paypalv1.1).
+ * @see https://developer.paypal.com/docs/log-in-with-paypal/
+ */
+interface PayPalProfile {
+    sub?: string | undefined;
+    user_id: string;
+    name: string;
+    given_name: string;
+    family_name: string;
+    middle_name?: string | undefined;
+    picture?: string | undefined;
+    email: string;
+    email_verified: boolean;
+    gender?: string | undefined;
+    birthdate?: string | undefined;
+    zoneinfo?: string | undefined;
+    locale?: string | undefined;
+    phone_number?: string | undefined;
+    address?: {
+        street_address?: string;
+        locality?: string;
+        region?: string;
+        postal_code?: string;
+        country?: string;
+    } | undefined;
+    verified_account?: boolean | undefined;
+    account_type?: string | undefined;
+    age_range?: string | undefined;
+    payer_id?: string | undefined;
+}
+interface PayPalTokenResponse {
+    scope?: string | undefined;
+    access_token: string;
+    refresh_token?: string | undefined;
+    token_type: "Bearer";
+    id_token?: string | undefined;
+    expires_in: number;
+    nonce?: string | undefined;
+}
+interface PayPalOptions extends ProviderOptions<PayPalProfile> {
+    clientId: string;
+    /**
+     * PayPal environment - 'sandbox' for testing, 'live' for production
+     * @default 'sandbox'
+     */
+    environment?: ("sandbox" | "live") | undefined;
+    /**
+     * Whether to request shipping address information
+     * @default false
+     */
+    requestShippingAddress?: boolean | undefined;
+}
+
+interface PaybinProfile {
+    sub: string;
+    email: string;
+    email_verified?: boolean | undefined;
+    name?: string | undefined;
+    preferred_username?: string | undefined;
+    picture?: string | undefined;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+}
+interface PaybinOptions extends ProviderOptions<PaybinProfile> {
+    clientId: string;
+    /**
+     * The issuer URL of your Paybin OAuth server
+     * @default "https://idp.paybin.io"
+     */
+    issuer?: string | undefined;
+}
+declare const paybin: (options: PaybinOptions) => {
+    id: "paybin";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: PaybinOptions;
+};
+
+interface LineIdTokenPayload {
+    iss: string;
+    sub: string;
+    aud: string;
+    exp: number;
+    iat: number;
+    name?: string | undefined;
+    picture?: string | undefined;
+    email?: string | undefined;
+    amr?: string[] | undefined;
+    nonce?: string | undefined;
+}
+interface LineUserInfo {
+    sub: string;
+    name?: string | undefined;
+    picture?: string | undefined;
+    email?: string | undefined;
+}
+interface LineOptions extends ProviderOptions<LineUserInfo | LineIdTokenPayload> {
+    clientId: string;
+}
+/**
+ * LINE Login v2.1
+ * - Authorization endpoint: https://access.line.me/oauth2/v2.1/authorize
+ * - Token endpoint: https://api.line.me/oauth2/v2.1/token
+ * - UserInfo endpoint: https://api.line.me/oauth2/v2.1/userinfo
+ * - Verify ID token: https://api.line.me/oauth2/v2.1/verify
+ *
+ * Docs: https://developers.line.biz/en/reference/line-login/#issue-access-token
+ */
+declare const line: (options: LineOptions) => {
+    id: "line";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | {
+        user: {
+            id: any;
+            name: any;
+            email: any;
+            image: any;
+            emailVerified: false;
+        } | {
+            id: any;
+            name: any;
+            email: any;
+            image: any;
+            emailVerified: boolean;
+        } | {
+            id: any;
+            name: any;
+            email: any;
+            image: any;
+            emailVerified: boolean;
+        };
+        data: any;
+    } | null>;
+    options: LineOptions;
+};
+
+interface NaverProfile {
+    /** API response result code */
+    resultcode: string;
+    /** API response message */
+    message: string;
+    response: {
+        /** Unique Naver user identifier */
+        id: string;
+        /** User nickname */
+        nickname: string;
+        /** User real name */
+        name: string;
+        /** User email address */
+        email: string;
+        /** Gender (F: female, M: male, U: unknown) */
+        gender: string;
+        /** Age range */
+        age: string;
+        /** Birthday (MM-DD format) */
+        birthday: string;
+        /** Birth year */
+        birthyear: string;
+        /** Profile image URL */
+        profile_image: string;
+        /** Mobile phone number */
+        mobile: string;
+    };
+}
+interface NaverOptions extends ProviderOptions<NaverProfile> {
+    clientId: string;
+}
+declare const naver: (options: NaverOptions) => {
+    id: "naver";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | {
+        user: {
+            id: string;
+            name: string;
+            email: string;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        };
+        data: NaverProfile;
+    } | null>;
+    options: NaverOptions;
+};
+
+interface Partner {
+    /** Partner-specific ID (consent required: kakaotalk_message) */
+    uuid?: string | undefined;
+}
+interface Profile {
+    /** Nickname (consent required: profile/nickname) */
+    nickname?: string | undefined;
+    /** Thumbnail image URL (consent required: profile/profile image) */
+    thumbnail_image_url?: string | undefined;
+    /** Profile image URL (consent required: profile/profile image) */
+    profile_image_url?: string | undefined;
+    /** Whether the profile image is the default */
+    is_default_image?: boolean | undefined;
+    /** Whether the nickname is the default */
+    is_default_nickname?: boolean | undefined;
+}
+interface KakaoAccount {
+    /** Consent required: profile info (nickname/profile image) */
+    profile_needs_agreement?: boolean | undefined;
+    /** Consent required: nickname */
+    profile_nickname_needs_agreement?: boolean | undefined;
+    /** Consent required: profile image */
+    profile_image_needs_agreement?: boolean | undefined;
+    /** Profile info */
+    profile?: Profile | undefined;
+    /** Consent required: name */
+    name_needs_agreement?: boolean | undefined;
+    /** Name */
+    name?: string | undefined;
+    /** Consent required: email */
+    email_needs_agreement?: boolean | undefined;
+    /** Email valid */
+    is_email_valid?: boolean | undefined;
+    /** Email verified */
+    is_email_verified?: boolean | undefined;
+    /** Email */
+    email?: string | undefined;
+    /** Consent required: age range */
+    age_range_needs_agreement?: boolean | undefined;
+    /** Age range */
+    age_range?: string | undefined;
+    /** Consent required: birth year */
+    birthyear_needs_agreement?: boolean | undefined;
+    /** Birth year (YYYY) */
+    birthyear?: string | undefined;
+    /** Consent required: birthday */
+    birthday_needs_agreement?: boolean | undefined;
+    /** Birthday (MMDD) */
+    birthday?: string | undefined;
+    /** Birthday type (SOLAR/LUNAR) */
+    birthday_type?: string | undefined;
+    /** Whether birthday is in a leap month */
+    is_leap_month?: boolean | undefined;
+    /** Consent required: gender */
+    gender_needs_agreement?: boolean | undefined;
+    /** Gender (male/female) */
+    gender?: string | undefined;
+    /** Consent required: phone number */
+    phone_number_needs_agreement?: boolean | undefined;
+    /** Phone number */
+    phone_number?: string | undefined;
+    /** Consent required: CI */
+    ci_needs_agreement?: boolean | undefined;
+    /** CI (unique identifier) */
+    ci?: string | undefined;
+    /** CI authentication time (UTC) */
+    ci_authenticated_at?: string | undefined;
+}
+interface KakaoProfile {
+    /** Kakao user ID */
+    id: number;
+    /**
+     * Whether the user has signed up (only present if auto-connection is disabled)
+     * false: preregistered, true: registered
+     */
+    has_signed_up?: boolean | undefined;
+    /** UTC datetime when the user connected the service */
+    connected_at?: string | undefined;
+    /** UTC datetime when the user signed up via Kakao Sync */
+    synched_at?: string | undefined;
+    /** Custom user properties */
+    properties?: Record<string, any> | undefined;
+    /** Kakao account info */
+    kakao_account: KakaoAccount;
+    /** Partner info */
+    for_partner?: Partner | undefined;
+}
+interface KakaoOptions extends ProviderOptions<KakaoProfile> {
+    clientId: string;
+}
+declare const kakao: (options: KakaoOptions) => {
+    id: "kakao";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | {
+        user: {
+            id: string;
+            name: string;
+            email: string | undefined;
+            image: string | undefined;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        };
+        data: KakaoProfile;
+    } | null>;
+    options: KakaoOptions;
+};
+
+interface NotionProfile {
+    object: "user";
+    id: string;
+    type: "person" | "bot";
+    name?: string | undefined;
+    avatar_url?: string | undefined;
+    person?: {
+        email?: string;
+    } | undefined;
+}
+interface NotionOptions extends ProviderOptions<NotionProfile> {
+    clientId: string;
+}
+declare const notion: (options: NotionOptions) => {
+    id: "notion";
+    name: string;
+    createAuthorizationURL({ state, scopes, loginHint, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: NotionOptions;
+};
+
+/**
+ * Lifecycle status for linked social / external accounts.
+ *
+ * Used by Zoom profile fields and as a general-purpose account status enum
+ * for SSO / social linking flows in Athena Auth consumers.
+ *
+ * - `pending` — invited or awaiting activation
+ * - `active` — usable
+ * - `inactive` — disabled or suspended
+ */
+type AccountStatus = 'pending' | 'active' | 'inactive';
+
+/**
+ * Zoom OAuth / Users API profile and related option types.
+ * @see https://developers.zoom.us/docs/api/users/#tag/users/GET/users/{userId}
+ */
+type LoginType = 0 /** Facebook OAuth */ | 1 /** Google OAuth */ | 24 /** Apple OAuth */ | 27 /** Microsoft OAuth */ | 97 /** Mobile device */ | 98 /** RingCentral OAuth */ | 99 /** API user */ | 100 /** Zoom Work email */ | 101; /** Single Sign-On (SSO) */
+type PronounOption = 1 /** Ask the user every time */ | 2 /** Always display */ | 3; /** Do not display */
+interface PhoneNumber {
+    /** The country code of the phone number (Example: "+1") */
+    code: string;
+    /** The country of the phone number (Example: "US") */
+    country: string;
+    /** The label for the phone number (Example: "Mobile") */
+    label: string;
+    /** The phone number itself (Example: "800000000") */
+    number: string;
+    /** Whether the phone number has been verified (Example: true) */
+    verified: boolean;
+}
+/**
+ * See the full documentation below:
+ * https://developers.zoom.us/docs/api/users/#tag/users/GET/users/{userId}
+ */
+interface ZoomProfile extends Record<string, any> {
+    /** The user's account ID (Example: "q6gBJVO5TzexKYTb_I2rpg") */
+    account_id: string;
+    /** The user's account number (Example: 10009239) */
+    account_number: number;
+    /** The user's cluster (Example: "us04") */
+    cluster: string;
+    /** The user's CMS ID. Only enabled for Kaltura integration (Example: "KDcuGIm1QgePTO8WbOqwIQ") */
+    cms_user_id: string;
+    /** The user's cost center (Example: "cost center") */
+    cost_center: string;
+    /** User create time (Example: "2018-10-31T04:32:37Z") */
+    created_at: string;
+    /** Department (Example: "Developers") */
+    dept: string;
+    /** User's display name (Example: "Jill Chill") */
+    display_name: string;
+    /** User's email address (Example: "jchill@example.com") */
+    email: string;
+    /** User's first name (Example: "Jill") */
+    first_name: string;
+    /** IDs of the web groups that the user belongs to (Example: ["RSMaSp8sTEGK0_oamiA2_w"]) */
+    group_ids: string[];
+    /** User ID (Example: "zJKyaiAyTNC-MWjiWC18KQ") */
+    id: string;
+    /** IM IDs of the groups that the user belongs to (Example: ["t-_-d56CSWG-7BF15LLrOw"]) */
+    im_group_ids: string[];
+    /** The user's JID (Example: "jchill@example.com") */
+    jid: string;
+    /** The user's job title (Example: "API Developer") */
+    job_title: string;
+    /** Default language for the Zoom Web Portal (Example: "en-US") */
+    language: string;
+    /** User last login client version (Example: "5.9.6.4993(mac)") */
+    last_client_version: string;
+    /** User last login time (Example: "2021-05-05T20:40:30Z") */
+    last_login_time: string;
+    /** User's last name (Example: "Chill") */
+    last_name: string;
+    /** The time zone of the user (Example: "Asia/Shanghai") */
+    timezone: string;
+    /** User's location (Example: "Paris") */
+    location: string;
+    /** The user's login method (Example: 101) */
+    login_types: LoginType[];
+    /** User's personal meeting URL (Example: "example.com") */
+    personal_meeting_url: string;
+    /** The URL for user's profile picture (Example: "example.com") */
+    pic_url: string;
+    /** Personal Meeting ID (PMI) (Example: 3542471135) */
+    pmi: number;
+    /** Unique identifier of the user's assigned role (Example: "0") */
+    role_id: string;
+    /** User's role name (Example: "Admin") */
+    role_name: string;
+    /** Status of user's account (Example: "pending") */
+    status: AccountStatus;
+    /** Use the personal meeting ID (PMI) for instant meetings (Example: false) */
+    use_pmi: boolean;
+    /** The time and date when the user was created (Example: "2018-10-31T04:32:37Z") */
+    user_created_at: string;
+    /** Displays whether user is verified or not (Example: 1) */
+    verified: number;
+    /** The user's Zoom Workplace plan option (Example: 64) */
+    zoom_one_type: number;
+    /** The user's company (Example: "Jill") */
+    company?: string | undefined;
+    /** Custom attributes that have been assigned to the user (Example: [{ "key": "cbf_cywdkexrtqc73f97gd4w6g", "name": "A1", "value": "1" }]) */
+    custom_attributes?: {
+        key: string;
+        name: string;
+        value: string;
+    }[] | undefined;
+    /** The employee's unique ID. This field only returns when SAML single sign-on (SSO) is enabled. The `login_type` value is `101` (SSO) (Example: "HqDyI037Qjili1kNsSIrIg") */
+    employee_unique_id?: string | undefined;
+    /** The manager for the user (Example: "thill@example.com") */
+    manager?: string | undefined;
+    /** The phone number's ISO country code (Example: "+1") */
+    phone_numbers?: PhoneNumber[] | undefined;
+    /** The user's plan type (Example: "1") */
+    plan_united_type?: string | undefined;
+    /** The user's pronouns (Example: "3123") */
+    pronouns?: string | undefined;
+    /** The user's display pronouns setting (Example: 1) */
+    pronouns_option?: PronounOption | undefined;
+    /** Personal meeting room URL, if the user has one (Example: "example.com") */
+    vanity_url?: string | undefined;
+}
+interface ZoomOptions extends ProviderOptions<ZoomProfile> {
+    clientId: string;
+    pkce?: boolean | undefined;
+}
+
+interface VkProfile {
+    user: {
+        user_id: string;
+        first_name: string;
+        last_name: string;
+        email?: string | undefined;
+        phone?: number | undefined;
+        avatar?: string | undefined;
+        sex?: number | undefined;
+        verified?: boolean | undefined;
+        birthday: string;
+    };
+}
+interface VkOption extends ProviderOptions {
+    clientId: string;
+    scheme?: ("light" | "dark") | undefined;
+}
+declare const vk: (options: VkOption) => {
+    id: "vk";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI, deviceId, }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(data: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: VkOption;
+};
+
+interface SalesforceProfile {
+    sub: string;
+    user_id: string;
+    organization_id: string;
+    preferred_username?: string | undefined;
+    email: string;
+    email_verified?: boolean | undefined;
+    name: string;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+    zoneinfo?: string | undefined;
+    photos?: {
+        picture?: string;
+        thumbnail?: string;
+    } | undefined;
+}
+interface SalesforceOptions extends ProviderOptions<SalesforceProfile> {
+    clientId: string;
+    environment?: ("sandbox" | "production") | undefined;
+    loginUrl?: string | undefined;
+    /**
+     * Override the redirect URI if auto-detection fails.
+     * Should match the Callback URL configured in your Salesforce Connected App.
+     * @example "http://localhost:3000/api/auth/callback/salesforce"
+     */
+    redirectURI?: string | undefined;
+}
+declare const salesforce: (options: SalesforceOptions) => {
+    id: "salesforce";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: SalesforceOptions;
+};
+
+interface RobloxProfile extends Record<string, any> {
+    /** the user's id */
+    sub: string;
+    /** the user's username */
+    preferred_username: string;
+    /** the user's display name, will return the same value as the preferred_username if not set */
+    nickname: string;
+    /** the user's display name, again, will return the same value as the preferred_username if not set */
+    name: string;
+    /** the account creation date as a unix timestamp in seconds */
+    created_at: number;
+    /** the user's profile URL */
+    profile: string;
+    /** the user's avatar URL */
+    picture: string;
+}
+interface RobloxOptions extends ProviderOptions<RobloxProfile> {
+    clientId: string;
+    prompt?: ("none" | "consent" | "login" | "select_account" | "select_account consent") | undefined;
+}
+declare const roblox: (options: RobloxOptions) => {
+    id: "roblox";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): url.URL;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: RobloxOptions;
+};
+
+interface RedditProfile {
+    id: string;
+    name: string;
+    icon_img: string | null;
+    has_verified_email: boolean;
+    oauth_client_id: string;
+    verified: boolean;
+}
+interface RedditOptions extends ProviderOptions<RedditProfile> {
+    clientId: string;
+    duration?: string | undefined;
+}
+declare const reddit: (options: RedditOptions) => {
+    id: "reddit";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: RedditOptions;
+};
+
+/**
+ * [More info](https://developers.tiktok.com/doc/tiktok-api-v2-get-user-info/)
+ */
+interface TiktokProfile extends Record<string, any> {
+    data: {
+        user: {
+            /**
+             * The unique identification of the user in the current application.Open id
+             * for the client.
+             *
+             * To return this field, add `fields=open_id` in the user profile request's query parameter.
+             */
+            open_id: string;
+            /**
+             * The unique identification of the user across different apps for the same developer.
+             * For example, if a partner has X number of clients,
+             * it will get X number of open_id for the same TikTok user,
+             * but one persistent union_id for the particular user.
+             *
+             * To return this field, add `fields=union_id` in the user profile request's query parameter.
+             */
+            union_id?: string | undefined;
+            /**
+             * User's profile image.
+             *
+             * To return this field, add `fields=avatar_url` in the user profile request's query parameter.
+             */
+            avatar_url?: string | undefined;
+            /**
+             * User`s profile image in 100x100 size.
+             *
+             * To return this field, add `fields=avatar_url_100` in the user profile request's query parameter.
+             */
+            avatar_url_100?: string | undefined;
+            /**
+             * User's profile image with higher resolution
+             *
+             * To return this field, add `fields=avatar_url_100` in the user profile request's query parameter.
+             */
+            avatar_large_url: string;
+            /**
+             * User's profile name
+             *
+             * To return this field, add `fields=display_name` in the user profile request's query parameter.
+             */
+            display_name: string;
+            /**
+             * User's username.
+             *
+             * To return this field, add `fields=username` in the user profile request's query parameter.
+             */
+            username: string;
+            /** @note Email is currently unsupported by TikTok  */
+            email?: string | undefined;
+            /**
+             * User's bio description if there is a valid one.
+             *
+             * To return this field, add `fields=bio_description` in the user profile request's query parameter.
+             */
+            bio_description?: string | undefined;
+            /**
+             * The link to user's TikTok profile page.
+             *
+             * To return this field, add `fields=profile_deep_link` in the user profile request's query parameter.
+             */
+            profile_deep_link?: string | undefined;
+            /**
+             * Whether TikTok has provided a verified badge to the account after confirming
+             * that it belongs to the user it represents.
+             *
+             * To return this field, add `fields=is_verified` in the user profile request's query parameter.
+             */
+            is_verified?: boolean | undefined;
+            /**
+             * User's followers count.
+             *
+             * To return this field, add `fields=follower_count` in the user profile request's query parameter.
+             */
+            follower_count?: number | undefined;
+            /**
+             * The number of accounts that the user is following.
+             *
+             * To return this field, add `fields=following_count` in the user profile request's query parameter.
+             */
+            following_count?: number | undefined;
+            /**
+             * The total number of likes received by the user across all of their videos.
+             *
+             * To return this field, add `fields=likes_count` in the user profile request's query parameter.
+             */
+            likes_count?: number | undefined;
+            /**
+             * The total number of publicly posted videos by the user.
+             *
+             * To return this field, add `fields=video_count` in the user profile request's query parameter.
+             */
+            video_count?: number | undefined;
+        };
+    };
+    error?: {
+        /**
+         * The error category in string.
+         */
+        code?: string;
+        /**
+         * The error message in string.
+         */
+        message?: string;
+        /**
+         * The error message in string.
+         */
+        log_id?: string;
+    } | undefined;
+}
+interface TiktokOptions extends ProviderOptions {
+    clientId?: never | undefined;
+    clientSecret: string;
+    clientKey: string;
+}
+declare const tiktok: (options: TiktokOptions) => {
+    id: "tiktok";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): url.URL;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: TiktokOptions;
+};
+
+interface GitlabProfile extends Record<string, any> {
+    id: number;
+    username: string;
+    email: string;
+    name: string;
+    state: string;
+    avatar_url: string;
+    web_url: string;
+    created_at: string;
+    bio: string;
+    location?: string | undefined;
+    public_email: string;
+    skype: string;
+    linkedin: string;
+    twitter: string;
+    website_url: string;
+    organization: string;
+    job_title: string;
+    pronouns: string;
+    bot: boolean;
+    work_information?: string | undefined;
+    followers: number;
+    following: number;
+    local_time: string;
+    last_sign_in_at: string;
+    confirmed_at: string;
+    theme_id: number;
+    last_activity_on: string;
+    color_scheme_id: number;
+    projects_limit: number;
+    current_sign_in_at: string;
+    identities: Array<{
+        provider: string;
+        extern_uid: string;
+    }>;
+    can_create_group: boolean;
+    can_create_project: boolean;
+    two_factor_enabled: boolean;
+    external: boolean;
+    private_profile: boolean;
+    commit_email: string;
+    shared_runners_minutes_limit: number;
+    extra_shared_runners_minutes_limit: number;
+    email_verified?: boolean | undefined;
+}
+interface GitlabOptions extends ProviderOptions<GitlabProfile> {
+    clientId: string;
+    issuer?: string | undefined;
+}
+declare const gitlab: (options: GitlabOptions) => {
+    id: "gitlab";
+    name: string;
+    createAuthorizationURL: ({ state, scopes, codeVerifier, loginHint, redirectURI, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }) => Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | {
+        user: {
+            id: number;
+            name: string;
+            email: string;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string | number;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string | number;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        };
+        data: GitlabProfile;
+    } | null>;
+    options: GitlabOptions;
+};
+
+interface LinkedInProfile {
+    sub: string;
+    name: string;
+    given_name: string;
+    family_name: string;
+    picture: string;
+    locale: {
+        country: string;
+        language: string;
+    };
+    email?: string;
+    email_verified?: boolean;
+}
+interface LinkedInOptions extends ProviderOptions<LinkedInProfile> {
+    clientId: string;
+}
+declare const linkedin: (options: LinkedInOptions) => {
+    id: "linkedin";
+    name: string;
+    createAuthorizationURL: ({ state, scopes, redirectURI, loginHint, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }) => Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: LinkedInOptions;
+};
+
+interface LinearUser {
+    id: string;
+    name: string;
+    email: string;
+    avatarUrl?: string | undefined;
+    active: boolean;
+    createdAt: string;
+    updatedAt: string;
+}
+interface LinearProfile {
+    data: {
+        viewer: LinearUser;
+    };
+}
+interface LinearOptions extends ProviderOptions<LinearUser> {
+    clientId: string;
+}
+declare const linear: (options: LinearOptions) => {
+    id: "linear";
+    name: string;
+    createAuthorizationURL({ state, scopes, loginHint, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: LinearOptions;
+};
+
+interface KickProfile {
+    /**
+     * The user id of the user
+     */
+    user_id: string;
+    /**
+     * The name of the user
+     */
+    name: string;
+    /**
+     * The email of the user
+     */
+    email: string;
+    /**
+     * The picture of the user
+     */
+    profile_picture: string;
+}
+interface KickOptions extends ProviderOptions<KickProfile> {
+    clientId: string;
+}
+declare const kick: (options: KickOptions) => {
+    id: "kick";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode({ code, redirectURI, codeVerifier }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }): Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: KickOptions;
+};
+
+interface DropboxProfile {
+    account_id: string;
+    name: {
+        given_name: string;
+        surname: string;
+        familiar_name: string;
+        display_name: string;
+        abbreviated_name: string;
+    };
+    email: string;
+    email_verified: boolean;
+    profile_photo_url: string;
+}
+interface DropboxOptions extends ProviderOptions<DropboxProfile> {
+    clientId: string;
+    accessType?: ("offline" | "online" | "legacy") | undefined;
+}
+declare const dropbox: (options: DropboxOptions) => {
+    id: "dropbox";
+    name: string;
+    createAuthorizationURL: ({ state, scopes, codeVerifier, redirectURI, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }) => Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: DropboxOptions;
+};
+
+interface TwitterProfile {
+    data: {
+        /**
+         * Unique identifier of this user. This is returned as a string in order to avoid complications with languages and tools
+         * that cannot handle large integers.
+         */
+        id: string;
+        /** The friendly name of this user, as shown on their profile. */
+        name: string;
+        /** The email address of this user. */
+        email?: string | undefined;
+        /** The Twitter handle (screen name) of this user. */
+        username: string;
+        /**
+         * The location specified in the user's profile, if the user provided one.
+         * As this is a freeform value, it may not indicate a valid location, but it may be fuzzily evaluated when performing searches with location queries.
+         *
+         * To return this field, add `user.fields=location` in the authorization request's query parameter.
+         */
+        location?: string | undefined;
+        /**
+         * This object and its children fields contain details about text that has a special meaning in the user's description.
+         *
+         *To return this field, add `user.fields=entities` in the authorization request's query parameter.
+         */
+        entities?: {
+            /** Contains details about the user's profile website. */
+            url: {
+                /** Contains details about the user's profile website. */
+                urls: Array<{
+                    /** The start position (zero-based) of the recognized user's profile website. All start indices are inclusive. */
+                    start: number;
+                    /** The end position (zero-based) of the recognized user's profile website. This end index is exclusive. */
+                    end: number;
+                    /** The URL in the format entered by the user. */
+                    url: string;
+                    /** The fully resolved URL. */
+                    expanded_url: string;
+                    /** The URL as displayed in the user's profile. */
+                    display_url: string;
+                }>;
+            };
+            /** Contains details about URLs, Hashtags, Cashtags, or mentions located within a user's description. */
+            description: {
+                hashtags: Array<{
+                    start: number;
+                    end: number;
+                    tag: string;
+                }>;
+            };
+        } | undefined;
+        /**
+         * Indicate if this user is a verified Twitter user.
+         *
+         * To return this field, add `user.fields=verified` in the authorization request's query parameter.
+         */
+        verified?: boolean | undefined;
+        /**
+         * The text of this user's profile description (also known as bio), if the user provided one.
+         *
+         * To return this field, add `user.fields=description` in the authorization request's query parameter.
+         */
+        description?: string | undefined;
+        /**
+         * The URL specified in the user's profile, if present.
+         *
+         * To return this field, add `user.fields=url` in the authorization request's query parameter.
+         */
+        url?: string | undefined;
+        /** The URL to the profile image for this user, as shown on the user's profile. */
+        profile_image_url?: string | undefined;
+        protected?: boolean | undefined;
+        /**
+         * Unique identifier of this user's pinned Tweet.
+         *
+         *  You can obtain the expanded object in `includes.tweets` by adding `expansions=pinned_tweet_id` in the authorization request's query parameter.
+         */
+        pinned_tweet_id?: string | undefined;
+        created_at?: string | undefined;
+    };
+    includes?: {
+        tweets?: Array<{
+            id: string;
+            text: string;
+        }>;
+    } | undefined;
+    [claims: string]: unknown;
+}
+interface TwitterOption extends ProviderOptions<TwitterProfile> {
+    clientId: string;
+}
+declare const twitter: (options: TwitterOption) => {
+    id: "twitter";
+    name: string;
+    createAuthorizationURL(data: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: TwitterOption;
+};
+
+/**
+ * @see https://dev.twitch.tv/docs/authentication/getting-tokens-oidc/#requesting-claims
+ */
+interface TwitchProfile {
+    /**
+     * The sub of the user
+     */
+    sub: string;
+    /**
+     * The preferred username of the user
+     */
+    preferred_username: string;
+    /**
+     * The email of the user
+     */
+    email: string;
+    /**
+     * Indicate if this user has a verified email.
+     */
+    email_verified: boolean;
+    /**
+     * The picture of the user
+     */
+    picture: string;
+}
+interface TwitchOptions extends ProviderOptions<TwitchProfile> {
+    clientId: string;
+    claims?: string[] | undefined;
+}
+declare const twitch: (options: TwitchOptions) => {
+    id: "twitch";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: TwitchOptions;
+};
+
+interface SpotifyProfile {
+    id: string;
+    display_name: string;
+    email: string;
+    images: {
+        url: string;
+    }[];
+}
+interface SpotifyOptions extends ProviderOptions<SpotifyProfile> {
+    clientId: string;
+}
+declare const spotify: (options: SpotifyOptions) => {
+    id: "spotify";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: SpotifyOptions;
+};
+
+interface SlackProfile extends Record<string, any> {
+    ok: boolean;
+    sub: string;
+    "https://slack.com/user_id": string;
+    "https://slack.com/team_id": string;
+    email: string;
+    email_verified: boolean;
+    date_email_verified: number;
+    name: string;
+    picture: string;
+    given_name: string;
+    family_name: string;
+    locale: string;
+    "https://slack.com/team_name": string;
+    "https://slack.com/team_domain": string;
+    "https://slack.com/user_image_24": string;
+    "https://slack.com/user_image_32": string;
+    "https://slack.com/user_image_48": string;
+    "https://slack.com/user_image_72": string;
+    "https://slack.com/user_image_192": string;
+    "https://slack.com/user_image_512": string;
+    "https://slack.com/team_image_34": string;
+    "https://slack.com/team_image_44": string;
+    "https://slack.com/team_image_68": string;
+    "https://slack.com/team_image_88": string;
+    "https://slack.com/team_image_102": string;
+    "https://slack.com/team_image_132": string;
+    "https://slack.com/team_image_230": string;
+    "https://slack.com/team_image_default": boolean;
+}
+interface SlackOptions extends ProviderOptions<SlackProfile> {
+    clientId: string;
+}
+declare const slack: (options: SlackOptions) => {
+    id: "slack";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): url.URL;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: SlackOptions;
+};
+
+interface HuggingFaceProfile {
+    sub: string;
+    name: string;
+    preferred_username: string;
+    profile: string;
+    picture: string;
+    website?: string | undefined;
+    email?: string | undefined;
+    email_verified?: boolean | undefined;
+    isPro: boolean;
+    canPay?: boolean | undefined;
+    orgs?: {
+        sub: string;
+        name: string;
+        picture: string;
+        preferred_username: string;
+        isEnterprise: boolean | "plus";
+        canPay?: boolean;
+        roleInOrg?: "admin" | "write" | "contributor" | "read";
+        pendingSSO?: boolean;
+        missingMFA?: boolean;
+        resourceGroups?: {
+            sub: string;
+            name: string;
+            role: "admin" | "write" | "contributor" | "read";
+        }[];
+    } | undefined;
+}
+interface HuggingFaceOptions extends ProviderOptions<HuggingFaceProfile> {
+    clientId: string;
+}
+declare const huggingface: (options: HuggingFaceOptions) => {
+    id: "huggingface";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: HuggingFaceOptions;
+};
+
+/**
+ * Google OpenID Connect ID-token claims used by the Google social provider.
+ * @see https://developers.google.com/identity/openid-connect/openid-connect#an-id-tokens-payload
+ */
+interface GoogleProfile {
+    aud: string;
+    azp: string;
+    email: string;
+    email_verified: boolean;
+    exp: number;
+    /**
+     * The family name of the user, or last name in most
+     * Western languages.
+     */
+    family_name: string;
+    /**
+     * The given name of the user, or first name in most
+     * Western languages.
+     */
+    given_name: string;
+    hd?: string | undefined;
+    iat: number;
+    iss: string;
+    jti?: string | undefined;
+    locale?: string | undefined;
+    name: string;
+    nbf?: number | undefined;
+    picture: string;
+    sub: string;
+}
+/**
+ * Configuration for the Google OAuth / OpenID Connect provider.
+ */
+interface GoogleOptions extends ProviderOptions<GoogleProfile> {
+    clientId: string | string[];
+    /**
+     * The access type to use for the authorization code request.
+     * Use `offline` to receive a refresh token.
+     */
+    accessType?: ('offline' | 'online') | undefined;
+    /**
+     * The display mode to use for the authorization code request.
+     */
+    display?: ('page' | 'popup' | 'touch' | 'wap') | undefined;
+    /**
+     * Hosted domain (Google Workspace) the user must belong to.
+     *
+     * Sent as the `hd` authorization hint and enforced against the ID token
+     * `hd` claim. Use `"*"` to require any Workspace domain.
+     */
+    hd?: string | undefined;
+}
+/** Inputs for {@link verifyGoogleIdToken}. */
+interface VerifyGoogleIdTokenOptions {
+    token: string;
+    audience: string | string[];
+    nonce?: string | undefined;
+}
+
+/**
+ * Microsoft personal (consumer) account tenant id.
+ * @see https://learn.microsoft.com/en-us/entra/identity-platform/id-token-claims-reference
+ */
+declare const MICROSOFT_CONSUMER_TENANT_ID = "9188040d-6c67-4c5b-b112-36a304b66dad";
+interface MicrosoftEntraIDProfile extends Record<string, any> {
+    /** Identifies the intended recipient of the token */
+    aud: string;
+    /** Identifies the issuer, or "authorization server" that constructs and returns the token */
+    iss: string;
+    /** Indicates when the authentication for the token occurred */
+    iat: Date;
+    /** Records the identity provider that authenticated the subject of the token */
+    idp: string;
+    /** Identifies the time before which the JWT can't be accepted for processing */
+    nbf: Date;
+    /** Identifies the expiration time on or after which the JWT can't be accepted for processing */
+    exp: Date;
+    /** Code hash included in ID tokens when issued with an OAuth 2.0 authorization code */
+    c_hash: string;
+    /** Access token hash included in ID tokens when issued with an OAuth 2.0 access token */
+    at_hash: string;
+    /** Internal claim used to record data for token reuse */
+    aio: string;
+    /** The primary username that represents the user */
+    preferred_username: string;
+    /** User's email address */
+    email?: string;
+    /** Human-readable value that identifies the subject of the token */
+    name: string;
+    /** Matches the parameter included in the original authorize request */
+    nonce: string;
+    /** User's profile picture */
+    picture: string;
+    /** Immutable identifier for the user account */
+    oid: string;
+    /** Set of roles assigned to the user */
+    roles: string[];
+    /** Internal claim used to revalidate tokens */
+    rh: string;
+    /** Subject identifier - unique to application ID */
+    sub: string;
+    /** Tenant ID the user is signing in to */
+    tid: string;
+    /** Unique identifier for a session */
+    sid: string;
+    /** Token identifier claim */
+    uti: string;
+    /** Indicates if user is in at least one group */
+    hasgroups: boolean;
+    /** User account status in tenant (0 = member, 1 = guest) */
+    acct: 0 | 1;
+    /** Auth Context IDs */
+    acrs: string;
+    /** Time when the user last authenticated */
+    auth_time: Date;
+    /** User's country/region */
+    ctry: string;
+    /** IP address of requesting client when inside VNET */
+    fwd: string;
+    /** Group claims */
+    groups: string;
+    /** Login hint for SSO */
+    login_hint: string;
+    /** Resource tenant's country/region */
+    tenant_ctry: string;
+    /** Region of the resource tenant */
+    tenant_region_scope: string;
+    /** UserPrincipalName */
+    upn: string;
+    /** User's verified primary email addresses */
+    verified_primary_email: string[];
+    /** User's verified secondary email addresses */
+    verified_secondary_email: string[];
+    /** Whether the user's email is verified (optional claim, must be configured in app registration) */
+    email_verified?: boolean | undefined;
+    /** VNET specifier information */
+    vnet: string;
+    /** Client Capabilities */
+    xms_cc: string;
+    /** Whether user's email domain is verified */
+    xms_edov: boolean;
+    /** Preferred data location for Multi-Geo tenants */
+    xms_pdl: string;
+    /** User preferred language */
+    xms_pl: string;
+    /** Tenant preferred language */
+    xms_tpl: string;
+    /** Zero-touch Deployment ID */
+    ztdid: string;
+    /** IP Address */
+    ipaddr: string;
+    /** On-premises Security Identifier */
+    onprem_sid: string;
+    /** Password Expiration Time */
+    pwd_exp: number;
+    /** Change Password URL */
+    pwd_url: string;
+    /** Inside Corporate Network flag */
+    in_corp: string;
+    /** User's family name/surname */
+    family_name: string;
+    /** User's given/first name */
+    given_name: string;
+}
+interface MicrosoftOptions extends ProviderOptions<MicrosoftEntraIDProfile> {
+    clientId: string | string[];
+    /**
+     * The tenant ID of the Microsoft account
+     * @default "common"
+     */
+    tenantId?: string | undefined;
+    /**
+     * The authentication authority URL. Use the default "https://login.microsoftonline.com" for standard Entra ID or "https://<tenant-id>.ciamlogin.com" for CIAM scenarios.
+     * @default "https://login.microsoftonline.com"
+     */
+    authority?: string | undefined;
+    /**
+     * The size of the profile photo
+     * @default 48
+     */
+    profilePhotoSize?: (48 | 64 | 96 | 120 | 240 | 360 | 432 | 504 | 648) | undefined;
+    /**
+     * Disable profile photo
+     */
+    disableProfilePhoto?: boolean | undefined;
+}
+
+interface GithubProfile {
+    login: string;
+    id: string;
+    node_id: string;
+    avatar_url: string;
+    gravatar_id: string;
+    url: string;
+    html_url: string;
+    followers_url: string;
+    following_url: string;
+    gists_url: string;
+    starred_url: string;
+    subscriptions_url: string;
+    organizations_url: string;
+    repos_url: string;
+    events_url: string;
+    received_events_url: string;
+    type: string;
+    site_admin: boolean;
+    name: string;
+    company: string;
+    blog: string;
+    location: string;
+    email: string | null;
+    hireable: boolean;
+    bio: string;
+    twitter_username: string;
+    public_repos: string;
+    public_gists: string;
+    followers: string;
+    following: string;
+    created_at: string;
+    updated_at: string;
+    private_gists: string;
+    total_private_repos: string;
+    owned_private_repos: string;
+    disk_usage: string;
+    collaborators: string;
+    two_factor_authentication: boolean;
+    plan: {
+        name: string;
+        space: string;
+        private_repos: string;
+        collaborators: string;
+    };
+}
+interface GithubOptions extends ProviderOptions<GithubProfile> {
+    clientId: string;
+}
+declare const github: (options: GithubOptions) => {
+    id: "github";
+    name: string;
+    createAuthorizationURL({ state, scopes, loginHint, codeVerifier, redirectURI, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens | null>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: GithubOptions;
+};
+
+interface FigmaProfile {
+    id: string;
+    email: string;
+    handle: string;
+    img_url: string;
+}
+interface FigmaOptions extends ProviderOptions<FigmaProfile> {
+    clientId: string;
+}
+declare const figma: (options: FigmaOptions) => {
+    id: "figma";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: FigmaOptions;
+};
+
+/**
+ * Facebook Graph API user profile fields used by the OAuth provider.
+ * @see https://developers.facebook.com/docs/graph-api/reference/user
+ */
+interface FacebookProfile {
+    id: string;
+    name: string;
+    email?: string;
+    email_verified?: boolean;
+    picture: {
+        data: {
+            height: number;
+            is_silhouette: boolean;
+            url: string;
+            width: number;
+        };
+    };
+}
+/**
+ * Configuration for the Facebook social provider.
+ */
+interface FacebookOptions extends ProviderOptions<FacebookProfile> {
+    clientId: string | string[];
+    /**
+     * Extend list of fields to retrieve from the Facebook user profile.
+     *
+     * @default ["id", "name", "email", "picture"]
+     */
+    fields?: string[] | undefined;
+    /**
+     * The config id to use when undergoing oauth
+     */
+    configId?: string | undefined;
+}
+
+interface DiscordProfile extends Record<string, any> {
+    /** the user's id (i.e. the numerical snowflake) */
+    id: string;
+    /** the user's username, not unique across the platform */
+    username: string;
+    /** the user's Discord-tag */
+    discriminator: string;
+    /** the user's display name, if it is set  */
+    global_name: string | null;
+    /**
+     * the user's avatar hash:
+     * https://discord.com/developers/docs/reference#image-formatting
+     */
+    avatar: string | null;
+    /** whether the user belongs to an OAuth2 application */
+    bot?: boolean | undefined;
+    /**
+     * whether the user is an Official Discord System user (part of the urgent
+     * message system)
+     */
+    system?: boolean | undefined;
+    /** whether the user has two factor enabled on their account */
+    mfa_enabled: boolean;
+    /**
+     * the user's banner hash:
+     * https://discord.com/developers/docs/reference#image-formatting
+     */
+    banner: string | null;
+    /** the user's banner color encoded as an integer representation of hexadecimal color code */
+    accent_color: number | null;
+    /**
+     * the user's chosen language option:
+     * https://discord.com/developers/docs/reference#locales
+     */
+    locale: string;
+    /** whether the email on this account has been verified */
+    verified: boolean;
+    /** the user's email */
+    email?: string | null;
+    /**
+     * the flags on a user's account:
+     * https://discord.com/developers/docs/resources/user#user-object-user-flags
+     */
+    flags: number;
+    /**
+     * the type of Nitro subscription on a user's account:
+     * https://discord.com/developers/docs/resources/user#user-object-premium-types
+     */
+    premium_type: number;
+    /**
+     * the public flags on a user's account:
+     * https://discord.com/developers/docs/resources/user#user-object-user-flags
+     */
+    public_flags: number;
+    /** undocumented field; corresponds to the user's custom nickname */
+    display_name: string | null;
+    /**
+     * undocumented field; corresponds to the Discord feature where you can e.g.
+     * put your avatar inside of an ice cube
+     */
+    avatar_decoration: string | null;
+    /**
+     * undocumented field; corresponds to the premium feature where you can
+     * select a custom banner color
+     */
+    banner_color: string | null;
+    /** undocumented field; the CDN URL of their profile picture */
+    image_url: string;
+}
+interface DiscordOptions extends ProviderOptions<DiscordProfile> {
+    clientId: string;
+    prompt?: ("none" | "consent") | undefined;
+    permissions?: number | undefined;
+}
+declare const discord: (options: DiscordOptions) => {
+    id: "discord";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): url.URL;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: DiscordOptions;
+};
+
+/**
+ * Amazon Cognito User Pool ID-token / userinfo claims.
+ * Custom attributes may appear as additional string keys.
+ */
+interface CognitoProfile {
+    sub: string;
+    email: string;
+    email_verified: boolean;
+    name: string;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+    picture?: string | undefined;
+    username?: string | undefined;
+    locale?: string | undefined;
+    phone_number?: string | undefined;
+    phone_number_verified?: boolean | undefined;
+    aud: string;
+    iss: string;
+    exp: number;
+    iat: number;
+    [key: string]: any;
+}
+interface CognitoOptions extends ProviderOptions<CognitoProfile> {
+    clientId: string | string[];
+    /**
+     * The Cognito domain (e.g., "your-app.auth.us-east-1.amazoncognito.com")
+     */
+    domain: string;
+    /**
+     * AWS region where User Pool is hosted (e.g., "us-east-1")
+     */
+    region: string;
+    userPoolId: string;
+    requireClientSecret?: boolean | undefined;
+}
+
+/**
+ * Standard OIDC-style profile claims returned by an Athena identity provider.
+ *
+ * Field names follow common OIDC claim names so Athena Auth can stay compatible
+ * with generic OIDC clients while remaining first-class in this SDK.
+ */
+interface AthenaProfile {
+    sub: string;
+    email?: string | undefined;
+    email_verified?: boolean | undefined;
+    name?: string | undefined;
+    given_name?: string | undefined;
+    family_name?: string | undefined;
+    preferred_username?: string | undefined;
+    picture?: string | undefined;
+    locale?: string | undefined;
+    updated_at?: number | undefined;
+    iss?: string | undefined;
+    aud?: string | string[] | undefined;
+    exp?: number | undefined;
+    iat?: number | undefined;
+    [key: string]: unknown;
+}
+interface AthenaOptions extends ProviderOptions<AthenaProfile> {
+    clientId: string;
+    /**
+     * Base issuer URL for the Athena identity provider
+     * (e.g. `https://auth.example.com` or a tenant-specific auth root).
+     *
+     * Defaults for authorization, token, userinfo, and JWKS endpoints are
+     * derived from this issuer when the explicit endpoint overrides are omitted.
+     */
+    issuer?: string | undefined;
+    /**
+     * Override the authorization endpoint. Defaults to `{issuer}/oauth2/authorize`.
+     */
+    authorizationEndpoint?: string | undefined;
+    /**
+     * Override the token endpoint. Defaults to `{issuer}/oauth2/token`.
+     */
+    tokenEndpoint?: string | undefined;
+    /**
+     * Override the userinfo endpoint. Defaults to `{issuer}/oauth2/userinfo`.
+     */
+    userInfoEndpoint?: string | undefined;
+}
+/**
+ * Athena first-party OAuth / OIDC social provider factory.
+ *
+ * Athena Auth will expose an Athena identity provider; this client module is
+ * ready so apps can configure `socialProviders.athena` the same way as Google,
+ * GitHub, etc. Defaults endpoints to `{issuer}/oauth2/authorize|token|userinfo`.
+ *
+ * @param options - Client credentials and issuer (or full endpoint overrides)
+ */
+declare const athena: (options: AthenaOptions) => {
+    id: "athena";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI, }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: AthenaOptions;
+};
+
+interface AtlassianProfile {
+    account_type?: string | undefined;
+    account_id: string;
+    email?: string | undefined;
+    name: string;
+    picture?: string | undefined;
+    nickname?: string | undefined;
+    locale?: string | undefined;
+    extended_profile?: {
+        job_title?: string;
+        organization?: string;
+        department?: string;
+        location?: string;
+    } | undefined;
+}
+interface AtlassianOptions extends ProviderOptions<AtlassianProfile> {
+    clientId: string;
+}
+declare const atlassian: (options: AtlassianOptions) => {
+    id: "atlassian";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: AtlassianOptions;
+};
+
+/**
+ * Claims from a Sign in with Apple identity token (`id_token`).
+ * @see https://developer.apple.com/documentation/sign_in_with_apple/sign_in_with_apple_rest_api/authenticating_users_with_sign_in_with_apple
+ */
+interface AppleProfile {
+    /**
+     * The subject registered claim identifies the principal that’s the subject
+     * of the identity token. Because this token is for your app, the value is
+     * the unique identifier for the user.
+     */
+    sub: string;
+    /**
+     * A String value representing the user's email address.
+     * The email address is either the user's real email address or the proxy
+     * address, depending on their status private email relay service.
+     */
+    email?: string;
+    /**
+     * A string or Boolean value that indicates whether the service verifies
+     * the email. The value can either be a string ("true" or "false") or a
+     * Boolean (true or false). The system may not verify email addresses for
+     * Sign in with Apple at Work & School users, and this claim is "false" or
+     * false for those users.
+     */
+    email_verified: true | "true";
+    /**
+     * A string or Boolean value that indicates whether the email that the user
+     * shares is the proxy address. The value can either be a string ("true" or
+     * "false") or a Boolean (true or false).
+     */
+    is_private_email: boolean;
+    /**
+     * An Integer value that indicates whether the user appears to be a real
+     * person. Use the value of this claim to mitigate fraud. The possible
+     * values are: 0 (or Unsupported), 1 (or Unknown), 2 (or LikelyReal). For
+     * more information, see ASUserDetectionStatus. This claim is present only
+     * in iOS 14 and later, macOS 11 and later, watchOS 7 and later, tvOS 14
+     * and later. The claim isn’t present or supported for web-based apps.
+     */
+    real_user_status: number;
+    /**
+     * The user’s full name in the format provided during the authorization
+     * process.
+     */
+    name: string;
+    /**
+     * The URL to the user's profile picture.
+     */
+    picture: string;
+    user?: AppleNonConformUser | undefined;
+}
+/**
+ * Shape of the `user` field Apple returns **only on first consent**.
+ *
+ * After authorize (`GET https://appleid.apple.com/auth/authorize`), Apple may
+ * include a JSON `user` parameter with name/email when those scopes were
+ * requested. Subsequent authorizations omit this payload — persist it server-side.
+ *
+ * Name is **not** included in the identity token; validate/sanitize before storage.
+ *
+ * @see https://developer.apple.com/documentation/signinwithapplerestapi/request-an-authorization-to-the-sign-in-with-apple-server
+ */
+interface AppleNonConformUser {
+    /** Given / family name shared on first consent when the `name` scope was used. */
+    name: {
+        firstName: string;
+        lastName: string;
+    };
+    /** Email shared on first consent when the `email` scope was used. */
+    email: string;
+}
+/**
+ * Configuration for the Sign in with Apple social provider.
+ */
+interface AppleOptions extends ProviderOptions<AppleProfile> {
+    clientId: string | string[];
+    /**
+     * Native app bundle identifier used as JWT audience when verifying
+     * tokens issued to the mobile app (instead of the Services ID).
+     */
+    appBundleIdentifier?: string | undefined;
+    /**
+     * Explicit JWT audience override. Defaults to `appBundleIdentifier` or `clientId`.
+     */
+    audience?: (string | string[]) | undefined;
+}
+
+/**
+ * Built-in social / OAuth provider factories (Better Auth–compatible shape).
+ * Includes first-party `athena` for the upcoming Athena Auth identity provider.
+ */
+declare const socialProviders: {
+    apple: (options: AppleOptions) => {
+        id: "apple";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: AppleOptions;
+    };
+    atlassian: (options: AtlassianOptions) => {
+        id: "atlassian";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: AtlassianOptions;
+    };
+    athena: (options: AthenaOptions) => {
+        id: "athena";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI, }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: AthenaOptions;
+    };
+    cognito: (options: CognitoOptions) => {
+        id: "cognito";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: CognitoOptions;
+    };
+    discord: (options: DiscordOptions) => {
+        id: "discord";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): url.URL;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: DiscordOptions;
+    };
+    facebook: (options: FacebookOptions) => {
+        id: "facebook";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI, loginHint }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: FacebookOptions;
+    };
+    figma: (options: FigmaOptions) => {
+        id: "figma";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: FigmaOptions;
+    };
+    github: (options: GithubOptions) => {
+        id: "github";
+        name: string;
+        createAuthorizationURL({ state, scopes, loginHint, codeVerifier, redirectURI, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens | null>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: GithubOptions;
+    };
+    microsoft: (options: MicrosoftOptions) => {
+        id: "microsoft";
+        name: string;
+        createAuthorizationURL(data: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }): Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        options: MicrosoftOptions;
+    };
+    google: (options: GoogleOptions) => {
+        id: "google";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: GoogleOptions;
+    };
+    huggingface: (options: HuggingFaceOptions) => {
+        id: "huggingface";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: HuggingFaceOptions;
+    };
+    slack: (options: SlackOptions) => {
+        id: "slack";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): url.URL;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: SlackOptions;
+    };
+    spotify: (options: SpotifyOptions) => {
+        id: "spotify";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: SpotifyOptions;
+    };
+    twitch: (options: TwitchOptions) => {
+        id: "twitch";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: TwitchOptions;
+    };
+    twitter: (options: TwitterOption) => {
+        id: "twitter";
+        name: string;
+        createAuthorizationURL(data: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: TwitterOption;
+    };
+    dropbox: (options: DropboxOptions) => {
+        id: "dropbox";
+        name: string;
+        createAuthorizationURL: ({ state, scopes, codeVerifier, redirectURI, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }) => Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: DropboxOptions;
+    };
+    kick: (options: KickOptions) => {
+        id: "kick";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI, codeVerifier }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode({ code, redirectURI, codeVerifier }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }): Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: KickOptions;
+    };
+    linear: (options: LinearOptions) => {
+        id: "linear";
+        name: string;
+        createAuthorizationURL({ state, scopes, loginHint, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: LinearOptions;
+    };
+    linkedin: (options: LinkedInOptions) => {
+        id: "linkedin";
+        name: string;
+        createAuthorizationURL: ({ state, scopes, redirectURI, loginHint, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }) => Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: LinkedInOptions;
+    };
+    gitlab: (options: GitlabOptions) => {
+        id: "gitlab";
+        name: string;
+        createAuthorizationURL: ({ state, scopes, codeVerifier, loginHint, redirectURI, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }) => Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | {
+            user: {
+                id: number;
+                name: string;
+                email: string;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string | number;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string | number;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            };
+            data: GitlabProfile;
+        } | null>;
+        options: GitlabOptions;
+    };
+    tiktok: (options: TiktokOptions) => {
+        id: "tiktok";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): url.URL;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: TiktokOptions;
+    };
+    reddit: (options: RedditOptions) => {
+        id: "reddit";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: RedditOptions;
+    };
+    roblox: (options: RobloxOptions) => {
+        id: "roblox";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): url.URL;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: RobloxOptions;
+    };
+    salesforce: (options: SalesforceOptions) => {
+        id: "salesforce";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: SalesforceOptions;
+    };
+    vk: (options: VkOption) => {
+        id: "vk";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI, deviceId, }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(data: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: VkOption;
+    };
+    zoom: (userOptions: ZoomOptions) => {
+        id: "zoom";
+        name: string;
+        createAuthorizationURL: ({ state, redirectURI, codeVerifier }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }) => Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+    };
+    notion: (options: NotionOptions) => {
+        id: "notion";
+        name: string;
+        createAuthorizationURL({ state, scopes, loginHint, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: NotionOptions;
+    };
+    kakao: (options: KakaoOptions) => {
+        id: "kakao";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | {
+            user: {
+                id: string;
+                name: string;
+                email: string | undefined;
+                image: string | undefined;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            };
+            data: KakaoProfile;
+        } | null>;
+        options: KakaoOptions;
+    };
+    naver: (options: NaverOptions) => {
+        id: "naver";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | {
+            user: {
+                id: string;
+                name: string;
+                email: string;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            };
+            data: NaverProfile;
+        } | null>;
+        options: NaverOptions;
+    };
+    line: (options: LineOptions) => {
+        id: "line";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | {
+            user: {
+                id: any;
+                name: any;
+                email: any;
+                image: any;
+                emailVerified: false;
+            } | {
+                id: any;
+                name: any;
+                email: any;
+                image: any;
+                emailVerified: boolean;
+            } | {
+                id: any;
+                name: any;
+                email: any;
+                image: any;
+                emailVerified: boolean;
+            };
+            data: any;
+        } | null>;
+        options: LineOptions;
+    };
+    paybin: (options: PaybinOptions) => {
+        id: "paybin";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: PaybinOptions;
+    };
+    paypal: (options: PayPalOptions) => {
+        id: "paypal";
+        name: string;
+        createAuthorizationURL({ state, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<{
+            accessToken: string;
+            refreshToken: string | undefined;
+            accessTokenExpiresAt: Date | undefined;
+            idToken: string | undefined;
+        }>;
+        refreshAccessToken: ((refreshToken: string) => Promise<OAuth2Tokens>) | ((refreshToken: string) => Promise<{
+            accessToken: any;
+            refreshToken: any;
+            accessTokenExpiresAt: Date | undefined;
+        }>);
+        verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | {
+            user: {
+                id: string;
+                name: string;
+                email: string;
+                image: string | undefined;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            } | {
+                id: string;
+                name: string;
+                email: string | null;
+                image: string;
+                emailVerified: boolean;
+            };
+            data: PayPalProfile;
+        } | null>;
+        options: PayPalOptions;
+    };
+    polar: (options: PolarOptions) => {
+        id: "polar";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: PolarOptions;
+    };
+    railway: (options: RailwayOptions) => {
+        id: "railway";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: RailwayOptions;
+    };
+    vercel: (options: VercelOptions) => {
+        id: "vercel";
+        name: string;
+        createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): Promise<url.URL>;
+        validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<OAuth2Tokens>;
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: VercelOptions;
+    };
+    wechat: (options: WeChatOptions) => {
+        id: "wechat";
+        name: string;
+        createAuthorizationURL({ state, scopes, redirectURI }: {
+            state: string;
+            codeVerifier: string;
+            scopes?: string[] | undefined;
+            redirectURI: string;
+            display?: string | undefined;
+            loginHint?: string | undefined;
+        }): url.URL;
+        validateAuthorizationCode: ({ code }: {
+            code: string;
+            redirectURI: string;
+            codeVerifier?: string | undefined;
+            deviceId?: string | undefined;
+        }) => Promise<{
+            tokenType: "Bearer";
+            accessToken: string;
+            refreshToken: string;
+            accessTokenExpiresAt: Date;
+            scopes: string[];
+            openid: string;
+            unionid: string | undefined;
+        }>;
+        refreshAccessToken: ((refreshToken: string) => Promise<OAuth2Tokens>) | ((refreshToken: string) => Promise<{
+            tokenType: "Bearer";
+            accessToken: string;
+            refreshToken: string;
+            accessTokenExpiresAt: Date;
+            scopes: string[];
+        }>);
+        getUserInfo(token: OAuth2Tokens & {
+            user?: {
+                name?: {
+                    firstName?: string;
+                    lastName?: string;
+                };
+                email?: string;
+            } | undefined;
+        }): Promise<{
+            user: {
+                id: string;
+                name?: string;
+                email?: string | null;
+                image?: string;
+                emailVerified: boolean;
+                [key: string]: any;
+            };
+            data: any;
+        } | null>;
+        options: WeChatOptions;
+    };
+};
+/** Runtime list of built-in provider ids (includes `athena`). */
+declare const socialProviderList: ["github", ...(keyof typeof socialProviders)[]];
+/**
+ * Zod schema for a social provider id: any built-in key or open string
+ * (custom providers via `(string & {})`).
+ */
+declare const SocialProviderListEnum: z.ZodType<SocialProviderList[number] | (string & {})>;
+/** Provider id string with autocomplete for built-ins and allowance for custom keys. */
+type SocialProvider = z.infer<typeof SocialProviderListEnum>;
+/**
+ * Config map for enabling/configuring social providers on an auth instance.
+ * Each key is optional; values may be options objects or async factories.
+ */
+type SocialProviders = {
+    [K in SocialProviderList[number]]?: AwaitableFunction<Parameters<(typeof socialProviders)[K]>[0] & {
+        enabled?: boolean | undefined;
+    }>;
+};
+/** Tuple type of {@link socialProviderList}. */
+type SocialProviderList = typeof socialProviderList;
+
+/** Minimal JWK fields used when selecting a key from a JWKS document. */
+type JwkLike = {
+    kid: string;
+    alg: string;
+    kty: string;
+    use?: string;
+    n?: string;
+    e?: string;
+    x5c?: string[];
+    x5t?: string;
+    [key: string]: unknown;
+};
+/**
+ * Fetch a JWKS document, find the key by `kid`, and import it for JWT verify.
+ *
+ * Shared by Apple, Google, Microsoft, Cognito, PayPal, and other OIDC providers
+ * that publish RSA/EC public keys at a well-known JWKS URL.
+ *
+ * @param jwksUrl - Absolute URL of the provider JWKS (`/.well-known/jwks.json` or equivalent)
+ * @param kid - Key id from the JWT protected header
+ * @returns Key material suitable for `jose` `jwtVerify`
+ * @throws {APIError} When the JWKS response has no `keys` array
+ * @throws {Error} When no key matches `kid`
+ */
+declare function getJwksPublicKey(jwksUrl: string, kid: string): Promise<Awaited<ReturnType<typeof importJWK>>>;
+
+/**
+ * Merge default, configured, and request-time OAuth scopes without duplicates.
+ *
+ * Order of application: defaults → `optionScopes` → `requestScopes`.
+ * When `disableDefaultScope` is true, the default list is skipped.
+ *
+ * @param defaults - Provider default scopes (e.g. `openid profile email`)
+ * @param optionScopes - Scopes from provider options
+ * @param requestScopes - Scopes from the authorization request call
+ * @param disableDefaultScope - When true, omit `defaults`
+ * @returns Deduplicated scope list preserving first-seen order
+ */
+declare function mergeScopes(defaults: string[], optionScopes: string[] | undefined, requestScopes: string[] | undefined, disableDefaultScope?: boolean): string[];
+
+/**
+ * Strip trailing `/` characters without a ReDoS-prone regex (loop-based).
+ *
+ * Used for OAuth authority/issuer base URLs so endpoint concatenation never
+ * produces double slashes that break issuer comparisons.
+ *
+ * @param value - Absolute or path-like URL string
+ * @returns Same string with all trailing slashes removed
+ */
+declare function trimTrailingSlash(value: string): string;
+
+/**
+ * Fetch Apple's JWKS and import the key for the given JWT `kid`.
+ * @see https://appleid.apple.com/auth/keys
+ */
+declare const getApplePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | crypto.webcrypto.CryptoKey>;
+
+/**
+ * Sign in with Apple OAuth provider factory.
+ *
+ * Uses `response_mode=form_post` and `code id_token` when requesting
+ * name/email scopes (Apple REST API requirements).
+ *
+ * @param options - Apple Services ID / client secret configuration
+ */
+declare const apple: (options: AppleOptions) => {
+    id: "apple";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: AppleOptions;
+};
+
+/**
+ * Fetch the Cognito User Pool JWKS and import the key for `kid`.
+ *
+ * @param kid - JWT header key id
+ * @param region - AWS region of the pool (e.g. `us-east-1`)
+ * @param userPoolId - Cognito User Pool id
+ */
+declare const getCognitoPublicKey: (kid: string, region: string, userPoolId: string) => Promise<Uint8Array<ArrayBufferLike> | crypto.webcrypto.CryptoKey>;
+
+/**
+ * Amazon Cognito Hosted UI OAuth provider factory.
+ *
+ * @param options - Domain, region, user pool id, and app client settings
+ */
+declare const cognito: (options: CognitoOptions) => {
+    id: "cognito";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: CognitoOptions;
+};
+
+/**
+ * Validate an opaque Facebook access token against the configured app.
+ *
+ * Facebook access tokens are not audience-bound at Graph `/me`: a token
+ * minted for any Facebook app returns that app's profile. Without this check,
+ * a token issued to an unrelated app could be accepted on the direct sign-in
+ * path. Calls `debug_token` and requires the token to be valid, bound to one
+ * of the configured client ids, and tied to a user.
+ *
+ * @see https://developers.facebook.com/docs/facebook-login/guides/access-tokens/debugging
+ *
+ * @returns The inspected token's `user_id` when valid, otherwise `null`.
+ */
+declare function verifyFacebookAccessToken(accessToken: string, options: FacebookOptions): Promise<string | null>;
+
+/**
+ * Facebook Login OAuth provider factory (Graph API v24).
+ *
+ * Supports limited-login JWT ID tokens and opaque access tokens (with
+ * `debug_token` app binding).
+ *
+ * @param options - App id/secret and optional field extensions
+ */
+declare const facebook: (options: FacebookOptions) => {
+    id: "facebook";
+    name: string;
+    createAuthorizationURL({ state, scopes, redirectURI, loginHint }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: FacebookOptions;
+};
+
+declare const getGooglePublicKey: (kid: string) => Promise<Uint8Array<ArrayBufferLike> | crypto.webcrypto.CryptoKey>;
+
+/**
+ * Verifies a Google ID token against Google's issuer, audience, signature,
+ * expiry, and maximum token age.
+ */
+declare const verifyGoogleIdToken: ({ token, audience, nonce, }: VerifyGoogleIdTokenOptions) => Promise<JWTPayload | null>;
+/**
+ * Checks whether Google's verified `hd` claim satisfies the configured hosted
+ * domain restriction. `hd: "*"` accepts any Google Workspace hosted domain.
+ */
+declare const isGoogleHostedDomainAllowed: (configuredHostedDomain: string | undefined, tokenHostedDomain: unknown) => boolean;
+
+/**
+ * Google OAuth / OpenID Connect provider factory.
+ *
+ * @param options - Client id/secret, optional hosted domain (`hd`), access type
+ * @returns Provider with authorize, token, refresh, ID-token verify, and userinfo
+ */
+declare const google: (options: GoogleOptions) => {
+    id: "google";
+    name: string;
+    createAuthorizationURL({ state, scopes, codeVerifier, redirectURI, loginHint, display, }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    options: GoogleOptions;
+};
+
+/**
+ * Import the Microsoft Entra ID JWKS public key for the given JWT `kid`.
+ *
+ * @param kid - JWT protected-header key id
+ * @param tenant - Tenant id or common/organizations/consumers
+ * @param authority - Authority host (no trailing slash), e.g. login.microsoftonline.com
+ */
+declare const getMicrosoftPublicKey: (kid: string, tenant: string, authority: string) => Promise<Uint8Array<ArrayBufferLike> | crypto.webcrypto.CryptoKey>;
+
+/**
+ * Microsoft Entra ID (Azure AD) OAuth provider factory.
+ *
+ * Supports multi-tenant endpoints (common/organizations/consumers) with
+ * explicit tenant-class checks on ID tokens.
+ *
+ * @param options - Client id, optional tenant/authority, profile photo settings
+ */
+declare const microsoft: (options: MicrosoftOptions) => {
+    id: "microsoft";
+    name: string;
+    createAuthorizationURL(data: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode({ code, codeVerifier, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }): Promise<OAuth2Tokens>;
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    options: MicrosoftOptions;
+};
+
+/**
+ * Import the PayPal JWKS public key matching `kid` for RS256 ID-token verify.
+ *
+ * @param kid - Key id from the JWT protected header
+ * @param jwksUri - Sandbox or live JWKS endpoint
+ */
+declare const getPayPalPublicKey: (kid: string, jwksUri: string) => Promise<Uint8Array<ArrayBufferLike> | crypto.webcrypto.CryptoKey>;
+
+/**
+ * PayPal Login with PayPal OAuth provider factory.
+ *
+ * @param options - Client credentials and sandbox/live environment
+ * @returns OAuth provider implementation for PayPal
+ */
+declare const paypal: (options: PayPalOptions) => {
+    id: "paypal";
+    name: string;
+    createAuthorizationURL({ state, codeVerifier, redirectURI }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }): Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<{
+        accessToken: string;
+        refreshToken: string | undefined;
+        accessTokenExpiresAt: Date | undefined;
+        idToken: string | undefined;
+    }>;
+    refreshAccessToken: ((refreshToken: string) => Promise<OAuth2Tokens>) | ((refreshToken: string) => Promise<{
+        accessToken: any;
+        refreshToken: any;
+        accessTokenExpiresAt: Date | undefined;
+    }>);
+    verifyIdToken(token: string, nonce: string | undefined): Promise<boolean>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | {
+        user: {
+            id: string;
+            name: string;
+            email: string;
+            image: string | undefined;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        } | {
+            id: string;
+            name: string;
+            email: string | null;
+            image: string;
+            emailVerified: boolean;
+        };
+        data: PayPalProfile;
+    } | null>;
+    options: PayPalOptions;
+};
+
+/**
+ * Zoom OAuth provider factory (Users API).
+ *
+ * @param userOptions - Client id/secret; PKCE defaults to enabled
+ * @see https://developers.zoom.us/docs/integrations/oauth/
+ */
+declare const zoom: (userOptions: ZoomOptions) => {
+    id: "zoom";
+    name: string;
+    createAuthorizationURL: ({ state, redirectURI, codeVerifier }: {
+        state: string;
+        codeVerifier: string;
+        scopes?: string[] | undefined;
+        redirectURI: string;
+        display?: string | undefined;
+        loginHint?: string | undefined;
+    }) => Promise<url.URL>;
+    validateAuthorizationCode: ({ code, redirectURI, codeVerifier }: {
+        code: string;
+        redirectURI: string;
+        codeVerifier?: string | undefined;
+        deviceId?: string | undefined;
+    }) => Promise<OAuth2Tokens>;
+    refreshAccessToken: (refreshToken: string) => Promise<OAuth2Tokens>;
+    getUserInfo(token: OAuth2Tokens & {
+        user?: {
+            name?: {
+                firstName?: string;
+                lastName?: string;
+            };
+            email?: string;
+        } | undefined;
+    }): Promise<{
+        user: {
+            id: string;
+            name?: string;
+            email?: string | null;
+            image?: string;
+            emailVerified: boolean;
+            [key: string]: any;
+        };
+        data: any;
+    } | null>;
+};
+
+export { type AccountStatus, type AppleNonConformUser, type AppleOptions, type AppleProfile, type AthenaOptions, type AthenaProfile, type AtlassianOptions, type AtlassianProfile, type CognitoOptions, type CognitoProfile, type DiscordOptions, type DiscordProfile, type DropboxOptions, type DropboxProfile, type FacebookOptions, type FacebookProfile, type FigmaOptions, type FigmaProfile, type GithubOptions, type GithubProfile, type GitlabOptions, type GitlabProfile, type GoogleOptions, type GoogleProfile, type HuggingFaceOptions, type HuggingFaceProfile, type JwkLike, type KakaoOptions, type KakaoProfile, type KickOptions, type KickProfile, type LineIdTokenPayload, type LineOptions, type LineUserInfo, type LinearOptions, type LinearProfile, type LinearUser, type LinkedInOptions, type LinkedInProfile, type LoginType, MICROSOFT_CONSUMER_TENANT_ID, type MicrosoftEntraIDProfile, type MicrosoftOptions, type NaverOptions, type NaverProfile, type NotionOptions, type NotionProfile, type PayPalOptions, type PayPalProfile, type PayPalTokenResponse, type PaybinOptions, type PaybinProfile, type PhoneNumber, type PolarOptions, type PolarProfile, type PronounOption, type RailwayOptions, type RailwayProfile, type RedditOptions, type RedditProfile, type RobloxOptions, type RobloxProfile, type SalesforceOptions, type SalesforceProfile, type SlackOptions, type SlackProfile, type SocialProvider, type SocialProviderList, SocialProviderListEnum, type SocialProviders, type SpotifyOptions, type SpotifyProfile, type TiktokOptions, type TiktokProfile, type TwitchOptions, type TwitchProfile, type TwitterOption, type TwitterProfile, type VercelOptions, type VercelProfile, type VerifyGoogleIdTokenOptions, type VkOption, type VkProfile, type WeChatOptions, type WeChatProfile, type ZoomOptions, type ZoomProfile, apple, athena, atlassian, cognito, discord, dropbox, facebook, figma, getApplePublicKey, getCognitoPublicKey, getGooglePublicKey, getJwksPublicKey, getMicrosoftPublicKey, getPayPalPublicKey, github, gitlab, google, huggingface, isGoogleHostedDomainAllowed, kakao, kick, line, linear, linkedin, mergeScopes, microsoft, naver, notion, paybin, paypal, polar, railway, reddit, roblox, salesforce, slack, socialProviderList, socialProviders, spotify, tiktok, trimTrailingSlash, twitch, twitter, vercel, verifyFacebookAccessToken, verifyGoogleIdToken, vk, wechat, zoom };