apierr

var (
	ErrInvalidRequest       = New(CodeInvalidRequest, http.StatusBadRequest, "The request is invalid.")
	ErrInvalidCredentials   = New(CodeInvalidCredentials, http.StatusUnauthorized, "Invalid email or password.")
	ErrEmailAlreadyExists   = New(CodeEmailAlreadyExists, http.StatusConflict, "An account with this email already exists.")
	ErrWeakPassword         = New(CodeWeakPassword, http.StatusBadRequest, "The password does not meet the password policy.")
	ErrInvalidToken         = New(CodeInvalidToken, http.StatusBadRequest, "The token is invalid or expired.")
	ErrUnauthorized         = New(CodeUnauthorized, http.StatusUnauthorized, "Authentication is required.")
	ErrForbidden            = New(CodeForbidden, http.StatusForbidden, "The operation is not permitted.")
	ErrNotFound             = New(CodeNotFound, http.StatusNotFound, "The resource does not exist.")
	ErrMethodNotAllowed     = New(CodeMethodNotAllowed, http.StatusMethodNotAllowed, "The method is not allowed.")
	ErrOriginNotAllowed     = New(CodeOriginNotAllowed, http.StatusForbidden, "The request origin is not allowed.")
	ErrEmailNotVerified     = New(CodeEmailNotVerified, http.StatusForbidden, "The email address is not verified.")
	ErrNoPasswordCredential = New(CodeNoPasswordCredential, http.StatusBadRequest, "This account has no password.")
	ErrAccountAlreadyLinked = New(CodeAccountAlreadyLinked, http.StatusConflict, "This provider account is already linked to another user.")
	ErrAccountNotLinked     = New(CodeAccountNotLinked, http.StatusNotFound, "This provider account is not linked.")
	ErrLastAuthMethod       = New(CodeLastAuthMethod, http.StatusConflict, "The last remaining authentication method cannot be removed.")
	ErrProviderNotFound     = New(CodeProviderNotFound, http.StatusNotFound, "The provider is not configured.")
	ErrOAuthStateInvalid    = New(CodeOAuthStateInvalid, http.StatusBadRequest, "The OAuth state is invalid or expired.")
	ErrOAuthFailed          = New(CodeOAuthFailed, http.StatusBadRequest, "The provider did not complete authentication.")
	ErrRateLimited          = New(CodeRateLimited, http.StatusTooManyRequests, "Too many requests.")
	// ErrInvalidTOTPCode reports a code that does not authenticate. The message
	// names no reason, so a wrong code and a replayed code look equal.
	ErrInvalidTOTPCode     = New(CodeInvalidTOTPCode, http.StatusBadRequest, "The code is invalid.")
	ErrTOTPNotEnrolled     = New(CodeTOTPNotEnrolled, http.StatusBadRequest, "No second factor is set up.")
	ErrTOTPAlreadyEnrolled = New(CodeTOTPAlreadyEnrolled, http.StatusConflict, "A second factor is already set up.")
	// ErrInvalidRecoveryCode reports a recovery code that does not match. The
	// message names no reason, so a wrong code and a spent code look equal.
	ErrInvalidRecoveryCode = New(CodeInvalidRecoveryCode, http.StatusBadRequest, "The recovery code is invalid.")
	ErrInternal            = New(CodeInternal, http.StatusInternalServerError, "An internal error occurred.")

	// Errors of the v0.3.0 release.
	ErrInsufficientRole = New(CodeInsufficientRole, http.StatusForbidden, "The role of the caller is too low.")
	ErrRoleUnknown      = New(CodeRoleUnknown, http.StatusBadRequest, "The role is not configured.")
	ErrRoleNotAllowed   = New(CodeRoleNotAllowed, http.StatusForbidden, "The role is above the role of the caller.")
	// ErrUserDisabled appears only after a correct password, so it tells
	// nothing to a caller without the password.
	ErrUserDisabled           = New(CodeUserDisabled, http.StatusForbidden, "The account is disabled.")
	ErrPasswordChangeRequired = New(CodePasswordChangeRequired, http.StatusForbidden, "The password must change before this operation.")
	ErrLastAdmin              = New(CodeLastAdmin, http.StatusConflict, "The last enabled administrator cannot lose the role.")
	ErrAPIKeyExpiryTooLong    = New(CodeAPIKeyExpiryTooLong, http.StatusBadRequest, "The expiry is above the maximum.")
	ErrAPIKeyExpiryRequired   = New(CodeAPIKeyExpiryRequired, http.StatusBadRequest, "An expiry is required.")

	// Errors of the v0.4.0 release.
	ErrSlugTaken            = New(CodeSlugTaken, http.StatusConflict, "The slug belongs to another organization.")
	ErrPermissionDenied     = New(CodePermissionDenied, http.StatusForbidden, "The permission set does not hold the statement.")
	ErrNoActiveOrganization = New(CodeNoActiveOrganization, http.StatusForbidden, "The session names no organization.")
	ErrNotAMember           = New(CodeNotAMember, http.StatusForbidden, "The user holds no active membership.")
	ErrAlreadyMember        = New(CodeAlreadyMember, http.StatusConflict, "The address already holds a membership.")
	ErrLastOwner            = New(CodeLastOwner, http.StatusConflict, "The last owner cannot lose the role.")
	// ErrInvitationInvalid names no reason, so an unknown invitation, a used
	// invitation, a revoked invitation, and an expired invitation look equal.
	ErrInvitationInvalid = New(CodeInvitationInvalid, http.StatusBadRequest, "The invitation is invalid.")
	ErrMemberLimit       = New(CodeMemberLimit, http.StatusConflict, "The organization reached its member limit.")
)