auth

var (
	ErrInvalidToken         = errors.New("invalid token")
	ErrMissingAuthorization = errors.New("authorization header missing or malformed")
	ErrMissingCacheScopes   = errors.New("token does not contain cache scopes")
	ErrInvalidCacheScopes   = errors.New("invalid JSON in cache scopes")
	ErrNoCacheScopes        = errors.New("token does not contain any cache scopes")
	ErrMissingRepositoryID  = errors.New("token does not contain repository id")
	// ErrKeyUnavailable marks server-side key resolution failures (degraded
	// JWKS), mapped to 503 instead of a client-fault 401.
	ErrKeyUnavailable = errors.New("verification key unavailable")
)