export declare const SESSION_COOKIE_NAME = "__Host-awp_session";
export declare const INTERNAL_SESSION_HEADER = "x-awp-session";
export declare function sessionFromCookie(cookieHeader: string | undefined): string | undefined;
export declare function setSessionCookie(token: string): string;
export declare function clearSessionCookie(): string;
export declare function internalSessionHeaders(token: string, contentType?: string): Record<string, string>;
export declare function mutationIsCrossSite(input: {
    readonly method?: string;
    readonly origin?: string;
    readonly secFetchSite?: string;
    readonly host?: string;
}): boolean;
export declare class LoginRateLimiter {
    private readonly maxAttempts;
    private readonly windowMs;
    private readonly now;
    private readonly attempts;
    constructor(maxAttempts?: number, windowMs?: number, now?: () => number);
    allow(key: string): boolean;
    reset(key: string): void;
}
export declare function loginPage(error?: string): string;
//# sourceMappingURL=session-gateway.d.ts.map