authentication

var (
	// E2EScope authorizes a user to change their keys in the keyserver.
	E2EScope = "https://www.googleapis.com/auth/e2ekeys"
	// RequiredScopes is the set of scopes the server requires for a user to change keys.
	RequiredScopes = []string{gAPI.UserinfoEmailScope, E2EScope}

	// ErrBadFormat occurs when the authentication header is malformed.
	ErrBadFormat = errors.New("auth: bad authorization header format")
	// ErrInvalidToken occurs when the authentication header is not valid.
	ErrInvalidToken = errors.New("auth: invalid token")
	// ErrEmailNotVerified occurs when token info indicates that email has not been verified.
	ErrEmailNotVerified = errors.New("auth: unverified email address")
	// ErrMissingScope occurs when a required scope is missing.
	ErrMissingScope = errors.New("auth: missing scope")
)