/**
 * CSRF Middleware
 * Protects against Cross-Site Request Forgery attacks
 * Uses CsrfTokenManager for token generation and validation
 */
import { type MiddlewareFailureResponder } from './MiddlewareFailureResponder';
import type { Middleware } from './MiddlewareStack';
export interface CsrfOptions {
    cookieName?: string;
    headerName?: string;
    bodyKey?: string;
    ignoreMethods?: string[];
    /**
     * Optional path patterns to bypass CSRF entirely.
     *
     * Supports simple glob-style matching where `*` matches any characters.
     * Examples:
     * - `/api/*`
     * - `/api/v1/auth/login`
     */
    skipPaths?: ReadonlyArray<string>;
    onFailure?: MiddlewareFailureResponder;
}
export declare const CsrfMiddleware: Readonly<{
    /**
     * Create CSRF protection middleware
     */
    create(options?: CsrfOptions): Middleware;
}>;
//# sourceMappingURL=CsrfMiddleware.d.ts.map