Function isWrappedErr

app/cli/main.go:140–143

target is the expected error grpcStatus is the actual error that might be wrapped in both the status and the error NOTE: We intentionally do NOT use kratos errors.Is() here because it only compares Code and Reason. Since all JWT errors share the same Code (401) and Reason ("UNAUTHORIZED"), errors.I

(grpcStatus *status.Status, target *errors.Error)

// JWT sentinel — causing e.g. "token invalid" to be reported as "token expired".
// Instead we compare Code and Message, which carry the distinguishing text.
func isWrappedErr(grpcStatus *status.Status, target *errors.Error) bool {
	err := errors.FromError(grpcStatus.Err())
	return target.Code == err.Code && err.Message == target.Message
}

// isUnmatchedAuthErr returns true when the gRPC status represents an
// Unauthenticated (401-equivalent) error that was not matched by any of the