grpcjwt

var (
	ErrMissingMetadata = status.Error(
		codes.Unauthenticated, "missing GRPC metadata",
	)
	ErrMissingAuthMeta = status.Error(
		codes.Unauthenticated, "missing GRPC authorization metadata",
	)
	ErrWrongSigningMethod = status.Error(
		codes.Unauthenticated, "wrong JWT signing method",
	)
	ErrMissingX5c = status.Error(
		codes.Unauthenticated, "missing JWT x5c header",
	)
	ErrMalformedX5c = status.Error(
		codes.Unauthenticated, "malformed JWT x5c header",
	)
	ErrInvalidX5cKeyUsage = status.Error(
		codes.Unauthenticated,
		"JWT x5c key usage does not include signing",
	)
	ErrWrongX5cOU = status.Error(
		codes.Unauthenticated, "JWT x5c header has wrong X.509 OU",
	)
	ErrInvalidIssuer = status.Error(
		codes.Unauthenticated, "invalid token issuer",
	)
	ErrInvalidAudience = status.Error(
		codes.Unauthenticated, "invalid token audience",
	)
	ErrMissingSubject = status.Error(
		codes.Unauthenticated, "missing token subject",
	)
	ErrMalformedXcrd = status.Error(
		codes.Unauthenticated, "malformed token claim `xcrd`",
	)
	ErrMalformedSan = status.Error(
		codes.Unauthenticated, "malformed token claim `san`",
	)
	ErrInvalidSan = status.Error(
		codes.Unauthenticated, "invalid token claim `san` entry",
	)
	ErrMalformedSc = status.Error(
		codes.Unauthenticated, "malformed token claim `sc`",
	)
	ErrUnknownScAction = status.Error(
		codes.Unauthenticated, "unknown `sc.aa` in token claim",
	)
)

var ErrMalformedJWT = errors.New("malformed JWT")