With PROXY_ROLE_ASSIGNMENT_DRIVER=oidc, a token whose claims give no
OpenCloud role made the account resolver answer 500. Mark these claim
errors with userroles.ErrRoleClaim and answer 403 for them. Failures of
the settings or gateway service still answer 500.
Signed-off-by: Ryo Kusnadi <ryokusnadi@gmail.com>
Ryo Kusnadi
31722c878e