code: func IsReseller(token string) (*models.Principal, error) {
  	claims, err := parseAndCheckToken(token)
  	if err == nil {
  		if claims.Issuer == issuerName && claims.Id != "" {
  			isReseller := false
  			for _, role := range claims.Roles {
  				if role == "reseller" {
  					isReseller = true
  					break
  				}
  			}
  			if isReseller {
  				return &models.Principal{
  					Name: claims.Id,
  				}, nil
  			}
  			return nil, errors.New(403, "Forbidden: insufficient API key privileges")
  		}
  	}
  	return nil, errors.New(401, "Unauthorized: invalid API key token: %v", err)
  }
docs: // IsReseller tells if the API key is a JWT signed by us with a claim to be a reseller