GetAccessToken obtains the raw access token from the context.

GetClaims extracts all jwt token claims from the context.

GetGroups extracts the groups from the jwt token that came with the request or from the groups retrieved from userinfo, if using authorization token.

GetRequestID extracts the request ID from the context.

GetSubject extracts the subject field from the jwt token or the userinfo response, if using an authorization token.

HasGroup checks that the user has a group.

NewAPIError creates a generic API error from directly provided information.

permissions missing.

token missing completely or invalid or expired.

APIError allows lower layers of the service to provide detailed information about an error.

ErrorMessageCode is a key to use for error messages in frontends or other automated systems interacting with our API.