auth

var (
	// ErrCredentials is a sign-in with an unknown e-mail address or a wrong
	// password. The two are not told apart, so the answer reveals no
	// accounts.
	ErrCredentials = errors.New("invalid_credentials")
	// ErrSession is a session token that is unknown, expired, revoked or
	// belongs to a disabled account.
	ErrSession = errors.New("invalid_session")
	// ErrBootstrap refuses the first-run setup once any account exists.
	ErrBootstrap = errors.New("bootstrap_requires_empty_accounts")
	// ErrPassword is a password shorter than 12 characters (or absurdly
	// long).
	ErrPassword = errors.New("password_too_short")
	// ErrEmail is an e-mail address that is not one.
	ErrEmail = errors.New("invalid_email")
	// ErrDuplicate is an e-mail address another account has, or a group
	// name another group has.
	ErrDuplicate = errors.New("duplicate_email_or_group")
	// ErrRateLimit refuses a sign-in after too many failed attempts for the
	// same address in a short time, to slow down guessing.
	ErrRateLimit = errors.New("login_rate_limited")
	// ErrNotFound is an account, session or group that does not exist.
	ErrNotFound = errors.New("account_not_found")
	// ErrLastAdmin refuses a change that would leave no active
	// administrator, as nobody could manage the accounts any more.
	ErrLastAdmin = errors.New("last_active_admin")
)

var (
	// ErrSecondStep is the correct password of an account with two-step
	// sign-in on, given to Login. Such accounts sign in with SignIn and
	// FinishSignIn.
	ErrSecondStep = errors.New("second_step_required")
	// ErrCode is a code that is wrong or was used already: a code of the
	// authenticator app or a recovery code.
	ErrCode = errors.New("invalid_code")
	// ErrPending is a pending sign-in that is unknown, finished or older
	// than PendingLifetime.
	ErrPending = errors.New("invalid_pending_sign_in")
	// ErrTwoStepOn refuses to set up two-step sign-in while it is on.
	ErrTwoStepOn = errors.New("two_step_on")
	// ErrTwoStepOff is an account without two-step sign-in, or without a
	// setup that waits for its first code.
	ErrTwoStepOff = errors.New("two_step_off")
	// ErrNoSecrets refuses two-step sign-in on a service without the site's
	// keys (see UseSecrets): it could not keep the secrets of
	// authenticator apps.
	ErrNoSecrets = errors.New("two_step_without_keys")
)

var Actions = []string{Read, Create, Edit, Publish, Delete, Review, Export}

var ErrGroupName = errors.New("invalid_group_name")

var ErrResetToken = errors.New("invalid_reset_token")