auth

var (
	// ErrInvalidToken indicates a malformed or invalid token.
	ErrInvalidToken = errors.New("invalid token")
	// ErrUnsupportedAlg indicates an unsupported signing algorithm.
	ErrUnsupportedAlg = errors.New("unsupported jwt alg")
	// ErrExpiredToken indicates an expired token.
	ErrExpiredToken = errors.New("token expired")
	// ErrNotBefore indicates a token that is not valid yet.
	ErrNotBefore = errors.New("token not valid yet")
	// ErrInvalidIssuer indicates an issuer mismatch.
	ErrInvalidIssuer = errors.New("token issuer invalid")
	// ErrInvalidAudience indicates an audience mismatch.
	ErrInvalidAudience = errors.New("token audience invalid")
)

var (
	// ErrMissingRole indicates a missing required role.
	ErrMissingRole = errors.New("missing required role")
	// ErrMissingPermission indicates a missing required permission.
	ErrMissingPermission = errors.New("missing required permission")
)

var ErrInvalidKey = errors.New("invalid signing key")