Set up the project infrastructure

31 files changed, 3320 insertions, 0 deletions

diff --git a/.guix-channel b/.guix-channel
new file mode 100644
index 0000000..8e7197b
--- /dev/null
+++ b/.guix-channel
@@ -0,0 +1,6 @@
+(channel
+ (version 0)
+ (directory "guix"))
+;; Local Variables:
+;; mode: scheme
+;; End:
diff --git a/AUTHORS b/AUTHORS
new file mode 100644
index 0000000..15138c6
--- /dev/null
+++ b/AUTHORS
@@ -0,0 +1,6 @@
+#+title: Webid-oidc authors
+#+language: en
+#+author: Vivien Kraus
+#+email: vivien@planete-kraus.eu
+
+* Vivien Kraus [[mailto:vivien@planete-kraus.eu]]
\ No newline at end of file
diff --git a/COPYING b/COPYING
new file mode 100644
index 0000000..f288702
--- /dev/null
+++ b/COPYING
@@ -0,0 +1,674 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU General Public License is a free, copyleft license for
+software and other kinds of works.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+the GNU General Public License is intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.  We, the Free Software Foundation, use the
+GNU General Public License for most of our software; it applies also to
+any other work released this way by its authors.  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  To protect your rights, we need to prevent others from denying you
+these rights or asking you to surrender the rights.  Therefore, you have
+certain responsibilities if you distribute copies of the software, or if
+you modify it: responsibilities to respect the freedom of others.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must pass on to the recipients the same
+freedoms that you received.  You must make sure that they, too, receive
+or can get the source code.  And you must show them these terms so they
+know their rights.
+
+  Developers that use the GNU GPL protect your rights with two steps:
+(1) assert copyright on the software, and (2) offer you this License
+giving you legal permission to copy, distribute and/or modify it.
+
+  For the developers' and authors' protection, the GPL clearly explains
+that there is no warranty for this free software.  For both users' and
+authors' sake, the GPL requires that modified versions be marked as
+changed, so that their problems will not be attributed erroneously to
+authors of previous versions.
+
+  Some devices are designed to deny users access to install or run
+modified versions of the software inside them, although the manufacturer
+can do so.  This is fundamentally incompatible with the aim of
+protecting users' freedom to change the software.  The systematic
+pattern of such abuse occurs in the area of products for individuals to
+use, which is precisely where it is most unacceptable.  Therefore, we
+have designed this version of the GPL to prohibit the practice for those
+products.  If such problems arise substantially in other domains, we
+stand ready to extend this provision to those domains in future versions
+of the GPL, as needed to protect the freedom of users.
+
+  Finally, every program is threatened constantly by software patents.
+States should not allow patents to restrict development and use of
+software on general-purpose computers, but in those that do, we wish to
+avoid the special danger that patents applied to a free program could
+make it effectively proprietary.  To prevent this, the GPL assures that
+patents cannot be used to render the program non-free.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+to the extent that it includes a convenient and prominently visible
+feature that (1) displays an appropriate copyright notice, and (2)
+tells the user that there is no warranty for the work (except to the
+extent that warranties are provided), that licensees may convey the
+work under this License, and how to view a copy of this License.  If
+the interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+    a) The work must carry prominent notices stating that you modified
+    it, and giving a relevant date.
+
+    b) The work must carry prominent notices stating that it is
+    released under this License and any conditions added under section
+    7.  This requirement modifies the requirement in section 4 to
+    "keep intact all notices".
+
+    c) You must license the entire work, as a whole, under this
+    License to anyone who comes into possession of a copy.  This
+    License will therefore apply, along with any applicable section 7
+    additional terms, to the whole of the work, and all its parts,
+    regardless of how they are packaged.  This License gives no
+    permission to license the work in any other way, but it does not
+    invalidate such permission if you have separately received it.
+
+    d) If the work has interactive user interfaces, each must display
+    Appropriate Legal Notices; however, if the Program has interactive
+    interfaces that do not display Appropriate Legal Notices, your
+    work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+    a) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by the
+    Corresponding Source fixed on a durable physical medium
+    customarily used for software interchange.
+
+    b) Convey the object code in, or embodied in, a physical product
+    (including a physical distribution medium), accompanied by a
+    written offer, valid for at least three years and valid for as
+    long as you offer spare parts or customer support for that product
+    model, to give anyone who possesses the object code either (1) a
+    copy of the Corresponding Source for all the software in the
+    product that is covered by this License, on a durable physical
+    medium customarily used for software interchange, for a price no
+    more than your reasonable cost of physically performing this
+    conveying of source, or (2) access to copy the
+    Corresponding Source from a network server at no charge.
+
+    c) Convey individual copies of the object code with a copy of the
+    written offer to provide the Corresponding Source.  This
+    alternative is allowed only occasionally and noncommercially, and
+    only if you received the object code with such an offer, in accord
+    with subsection 6b.
+
+    d) Convey the object code by offering access from a designated
+    place (gratis or for a charge), and offer equivalent access to the
+    Corresponding Source in the same way through the same place at no
+    further charge.  You need not require recipients to copy the
+    Corresponding Source along with the object code.  If the place to
+    copy the object code is a network server, the Corresponding Source
+    may be on a different server (operated by you or a third party)
+    that supports equivalent copying facilities, provided you maintain
+    clear directions next to the object code saying where to find the
+    Corresponding Source.  Regardless of what server hosts the
+    Corresponding Source, you remain obligated to ensure that it is
+    available for as long as needed to satisfy these requirements.
+
+    e) Convey the object code using peer-to-peer transmission, provided
+    you inform other peers where the object code and Corresponding
+    Source of the work are being offered to the general public at no
+    charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+tangible personal property which is normally used for personal, family,
+or household purposes, or (2) anything designed or sold for incorporation
+into a dwelling.  In determining whether a product is a consumer product,
+doubtful cases shall be resolved in favor of coverage.  For a particular
+product received by a particular user, "normally used" refers to a
+typical or common use of that class of product, regardless of the status
+of the particular user or of the way in which the particular user
+actually uses, or expects or is expected to use, the product.  A product
+is a consumer product regardless of whether the product has substantial
+commercial, industrial or non-consumer uses, unless such uses represent
+the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+procedures, authorization keys, or other information required to install
+and execute modified versions of a covered work in that User Product from
+a modified version of its Corresponding Source.  The information must
+suffice to ensure that the continued functioning of the modified object
+code is in no case prevented or interfered with solely because
+modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+specifically for use in, a User Product, and the conveying occurs as
+part of a transaction in which the right of possession and use of the
+User Product is transferred to the recipient in perpetuity or for a
+fixed term (regardless of how the transaction is characterized), the
+Corresponding Source conveyed under this section must be accompanied
+by the Installation Information.  But this requirement does not apply
+if neither you nor any third party retains the ability to install
+modified object code on the User Product (for example, the work has
+been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+requirement to continue to provide support service, warranty, or updates
+for a work that has been modified or installed by the recipient, or for
+the User Product in which it has been modified or installed.  Access to a
+network may be denied when the modification itself materially and
+adversely affects the operation of the network or violates the rules and
+protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+in accord with this section must be in a format that is publicly
+documented (and with an implementation available to the public in
+source code form), and must require no special password or key for
+unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+License by making exceptions from one or more of its conditions.
+Additional permissions that are applicable to the entire Program shall
+be treated as though they were included in this License, to the extent
+that they are valid under applicable law.  If additional permissions
+apply only to part of the Program, that part may be used separately
+under those permissions, but the entire Program remains governed by
+this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+remove any additional permissions from that copy, or from any part of
+it.  (Additional permissions may be written to require their own
+removal in certain cases when you modify the work.)  You may place
+additional permissions on material, added by you to a covered work,
+for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+add to a covered work, you may (if authorized by the copyright holders of
+that material) supplement the terms of this License with terms:
+
+    a) Disclaiming warranty or limiting liability differently from the
+    terms of sections 15 and 16 of this License; or
+
+    b) Requiring preservation of specified reasonable legal notices or
+    author attributions in that material or in the Appropriate Legal
+    Notices displayed by works containing it; or
+
+    c) Prohibiting misrepresentation of the origin of that material, or
+    requiring that modified versions of such material be marked in
+    reasonable ways as different from the original version; or
+
+    d) Limiting the use for publicity purposes of names of licensors or
+    authors of the material; or
+
+    e) Declining to grant rights under trademark law for use of some
+    trade names, trademarks, or service marks; or
+
+    f) Requiring indemnification of licensors and authors of that
+    material by anyone who conveys the material (or modified versions of
+    it) with contractual assumptions of liability to the recipient, for
+    any liability that these contractual assumptions directly impose on
+    those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+restrictions" within the meaning of section 10.  If the Program as you
+received it, or any part of it, contains a notice stating that it is
+governed by this License along with a term that is a further
+restriction, you may remove that term.  If a license document contains
+a further restriction but permits relicensing or conveying under this
+License, you may add to a covered work material governed by the terms
+of that license document, provided that the further restriction does
+not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+must place, in the relevant source files, a statement of the
+additional terms that apply to those files, or a notice indicating
+where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+form of a separately written license, or stated as exceptions;
+the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+provided under this License.  Any attempt otherwise to propagate or
+modify it is void, and will automatically terminate your rights under
+this License (including any patent licenses granted under the third
+paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+license from a particular copyright holder is reinstated (a)
+provisionally, unless and until the copyright holder explicitly and
+finally terminates your license, and (b) permanently, if the copyright
+holder fails to notify you of the violation by some reasonable means
+prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+reinstated permanently if the copyright holder notifies you of the
+violation by some reasonable means, this is the first time you have
+received notice of violation of this License (for any work) from that
+copyright holder, and you cure the violation prior to 30 days after
+your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+licenses of parties who have received copies or rights from you under
+this License.  If your rights have been terminated and not permanently
+reinstated, you do not qualify to receive new licenses for the same
+material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+run a copy of the Program.  Ancillary propagation of a covered work
+occurring solely as a consequence of using peer-to-peer transmission
+to receive a copy likewise does not require acceptance.  However,
+nothing other than this License grants you permission to propagate or
+modify any covered work.  These actions infringe copyright if you do
+not accept this License.  Therefore, by modifying or propagating a
+covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+receives a license from the original licensors, to run, modify and
+propagate that work, subject to this License.  You are not responsible
+for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+organization, or substantially all assets of one, or subdividing an
+organization, or merging organizations.  If propagation of a covered
+work results from an entity transaction, each party to that
+transaction who receives a copy of the work also receives whatever
+licenses to the work the party's predecessor in interest had or could
+give under the previous paragraph, plus a right to possession of the
+Corresponding Source of the work from the predecessor in interest, if
+the predecessor has it or can get it with reasonable efforts.
+
+  You may not impose any further restrictions on the exercise of the
+rights granted or affirmed under this License.  For example, you may
+not impose a license fee, royalty, or other charge for exercise of
+rights granted under this License, and you may not initiate litigation
+(including a cross-claim or counterclaim in a lawsuit) alleging that
+any patent claim is infringed by making, using, selling, offering for
+sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+License of the Program or a work on which the Program is based.  The
+work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+owned or controlled by the contributor, whether already acquired or
+hereafter acquired, that would be infringed by some manner, permitted
+by this License, of making, using, or selling its contributor version,
+but do not include claims that would be infringed only as a
+consequence of further modification of the contributor version.  For
+purposes of this definition, "control" includes the right to grant
+patent sublicenses in a manner consistent with the requirements of
+this License.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+patent license under the contributor's essential patent claims, to
+make, use, sell, offer for sale, import and otherwise run, modify and
+propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+agreement or commitment, however denominated, not to enforce a patent
+(such as an express permission to practice a patent or covenant not to
+sue for patent infringement).  To "grant" such a patent license to a
+party means to make such an agreement or commitment not to enforce a
+patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+and the Corresponding Source of the work is not available for anyone
+to copy, free of charge and under the terms of this License, through a
+publicly available network server or other readily accessible means,
+then you must either (1) cause the Corresponding Source to be so
+available, or (2) arrange to deprive yourself of the benefit of the
+patent license for this particular work, or (3) arrange, in a manner
+consistent with the requirements of this License, to extend the patent
+license to downstream recipients.  "Knowingly relying" means you have
+actual knowledge that, but for the patent license, your conveying the
+covered work in a country, or your recipient's use of the covered work
+in a country, would infringe one or more identifiable patents in that
+country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+arrangement, you convey, or propagate by procuring conveyance of, a
+covered work, and grant a patent license to some of the parties
+receiving the covered work authorizing them to use, propagate, modify
+or convey a specific copy of the covered work, then the patent license
+you grant is automatically extended to all recipients of the covered
+work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+the scope of its coverage, prohibits the exercise of, or is
+conditioned on the non-exercise of one or more of the rights that are
+specifically granted under this License.  You may not convey a covered
+work if you are a party to an arrangement with a third party that is
+in the business of distributing software, under which you make payment
+to the third party based on the extent of your activity of conveying
+the work, and under which the third party grants, to any of the
+parties who would receive the covered work from you, a discriminatory
+patent license (a) in connection with copies of the covered work
+conveyed by you (or copies made from those copies), or (b) primarily
+for and in connection with specific products or compilations that
+contain the covered work, unless you entered into that arrangement,
+or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+any implied license or other defenses to infringement that may
+otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot convey a
+covered work so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you may
+not convey it at all.  For example, if you agree to terms that obligate you
+to collect a royalty for further conveying from those to whom you convey
+the Program, the only way you could satisfy both those terms and this
+License would be to refrain entirely from conveying the Program.
+
+  13. Use with the GNU Affero General Public License.
+
+  Notwithstanding any other provision of this License, you have
+permission to link or combine any covered work with a work licensed
+under version 3 of the GNU Affero General Public License into a single
+combined work, and to convey the resulting work.  The terms of this
+License will continue to apply to the part which is the covered work,
+but the special requirements of the GNU Affero General Public License,
+section 13, concerning interaction through a network will apply to the
+combination as such.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+the GNU General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+Program specifies that a certain numbered version of the GNU General
+Public License "or any later version" applies to it, you have the
+option of following the terms and conditions either of that numbered
+version or of any later version published by the Free Software
+Foundation.  If the Program does not specify a version number of the
+GNU General Public License, you may choose any version ever published
+by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+versions of the GNU General Public License can be used, that proxy's
+public statement of acceptance of a version permanently authorizes you
+to choose that version for the Program.
+
+  Later license versions may give you additional or different
+permissions.  However, no additional obligations are imposed on any
+author or copyright holder as a result of your choosing to follow a
+later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+above cannot be given local legal effect according to their terms,
+reviewing courts shall apply local law that most closely approximates
+an absolute waiver of all civil liability in connection with the
+Program, unless a warranty or assumption of liability accompanies a
+copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
+
+Also add information on how to contact you by electronic and paper mail.
+
+  If the program does terminal interaction, make it output a short
+notice like this when it starts in an interactive mode:
+
+    <program>  Copyright (C) <year>  <name of author>
+    This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, your program's commands
+might be different; for a GUI interface, you would use an "about box".
+
+  You should also get your employer (if you work as a programmer) or school,
+if any, to sign a "copyright disclaimer" for the program, if necessary.
+For more information on this, and how to apply and follow the GNU GPL, see
+<https://www.gnu.org/licenses/>.
+
+  The GNU General Public License does not permit incorporating your program
+into proprietary programs.  If your program is a subroutine library, you
+may consider it more useful to permit linking proprietary applications with
+the library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.  But first, please read
+<https://www.gnu.org/licenses/why-not-lgpl.html>.
diff --git a/ChangeLog b/ChangeLog
new file mode 100644
index 0000000..f93cc8e
--- /dev/null
+++ b/ChangeLog
@@ -0,0 +1,16 @@
+2021-04-19  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* ci.scm (dist-without-maintainer): Checking a commit (more specifically, a git index) can be done with guix build -L guix -f ci.scm
+
+2020-12-05  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* .guix-channel: new file to consider this a guix channel.
+
+2020-11-26  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* get-version: Never print a newline.
+
+2020-11-22  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* README: Initial version
+
diff --git a/Makefile.am b/Makefile.am
new file mode 100644
index 0000000..fcfde44
--- /dev/null
+++ b/Makefile.am
@@ -0,0 +1,21 @@
+lib_LTLIBRARIES =
+noinst_LTLIBRARIES =
+noinst_PROGRAMS =
+EXTRA_DIST =
+BUILT_SOURCES =
+DISTCHECK_CONFIGURE_FLAGS = CONFIG_SHELL=$(CONFIG_SHELL) SHELL=$(SHELL)
+SUFFIXES =
+SUBDIRS = . po man
+ACLOCAL_AMFLAGS = -I m4
+AM_CPPFLAGS = -DLOCALEDIR=\"$(localedir)\" -I. -I$(srcdir)
+AM_CFLAGS = $(GUILE_CFLAGS) $(NETTLE_CFLAGS)
+
+include src/Makefile.am
+
+EXTRA_DIST += $(top_srcdir)/.version
+BUILT_SOURCES += $(top_srcdir)/.version
+$(top_srcdir)/.version:
+	echo $(VERSION) > $@-t
+	@mv $@-t $@
+dist-hook:
+	echo $(VERSION) > $(distdir)/.tarball-version
diff --git a/NEWS b/NEWS
new file mode 100644
index 0000000..8a3f965
--- /dev/null
+++ b/NEWS
@@ -0,0 +1,10 @@
+#+title: What's new in webidoidc?
+#+language: en
+#+author: Vivien Kraus
+#+email: vivien@planete-kraus.eu
+
+* Initial features
+
+# Local Variables:
+# mode: org
+# End:
diff --git a/README b/README
new file mode 100644
index 0000000..2a4aad4
--- /dev/null
+++ b/README
@@ -0,0 +1,11 @@
+#+title: Webid-oidc
+#+language: en
+#+author: Vivien Kraus
+#+email: vivien@planete-kraus.eu
+
+This is a WIP implementation of the OIDC specification with
+decentralization through webid.
+
+# Local Variables:
+# mode: org
+# End:
diff --git a/bootstrap b/bootstrap
new file mode 100755
index 0000000..4c37c0f
--- /dev/null
+++ b/bootstrap
@@ -0,0 +1,13 @@
+#!/bin/sh
+
+autoreconf -vif || exit 1
+sed -i 's|SHELL = /bin/sh|SHELL = @SHELL@|g' po/Makefile.in.in || exit 1
+
+## Prepare the man pages
+mkdir -p .native || exit 1
+cd .native || exit 1
+bash ../configure SHELL=$(which sh) || exit 1
+make -j V=1 || exit 1
+make -j dist || exit 1
+cd .. || exit 1
+rm -rf .native || exit 1
diff --git a/ci b/ci
new file mode 100755
index 0000000..84790af
--- /dev/null
+++ b/ci
@@ -0,0 +1,7 @@
+#!/bin/sh
+
+ref=$(guix environment --ad-hoc --container git -- git symbolic-ref HEAD)
+commit=$(guix environment --ad-hoc --container git -- git rev-parse $ref)
+parent=$(guix environment --ad-hoc --container git -- git log --pretty=%P -n 1 $commit)
+
+./hooks/update $ref $parent $commit
diff --git a/ci.scm b/ci.scm
new file mode 100644
index 0000000..85fb21d
--- /dev/null
+++ b/ci.scm
@@ -0,0 +1,75 @@
+(use-modules (vkraus packages webid-oidc))
+(use-modules (gnu packages bash))
+(use-modules (gnu packages base))
+(use-modules (gnu packages tex))
+(use-modules (gnu packages code))
+(use-modules (gnu packages version-control))
+(use-modules (guix build-system gnu))
+(use-modules (guix packages))
+(use-modules (guix gexp))
+(use-modules (guix modules))
+(use-modules (guix build utils))
+(use-modules (guix store))
+(use-modules (ice-9 textual-ports))
+
+(define ref
+  (getenv "CI_REF"))
+
+(let ((checked-out-index
+       (let ((tmp-dirname (tmpnam))
+             (git
+              (run-with-store
+               (open-connection)
+               (package-file git "bin/git")))
+             (bash
+              (run-with-store
+               (open-connection)
+               (package-file bash "bin/bash")))
+             (tar
+              (run-with-store
+               (open-connection)
+               (package-file tar "bin/tar"))))
+         (mkdir tmp-dirname)
+         (if ref
+             (begin
+               (invoke git "archive" ref "-o" (string-append tmp-dirname "/source.tar.gz"))
+               (with-directory-excursion
+                tmp-dirname
+                (invoke tar "xf" (string-append tmp-dirname "/source.tar.gz"))
+                (delete-file (string-append tmp-dirname "/source.tar.gz"))))
+             (invoke git
+                     "checkout-index"
+                     (format #f "--prefix=~a/" tmp-dirname)
+                     "-a"))
+         (invoke bash
+                 "-c"
+                 (format #f "~a describe ~a --tags --always > ~a/.tarball-version"
+                         git (or ref "") tmp-dirname))
+         (let ((interned
+                (run-with-store
+                 (open-connection)
+                 (interned-file tmp-dirname "ci-checkout" #:recursive? #t))))
+           (delete-file-recursively tmp-dirname)
+           interned))))
+  (let ((dist-without-maintainer (dist-package webid-oidc-snapshot checked-out-index))
+        (version
+         (car
+          (string-split
+           (call-with-input-file (string-append checked-out-index "/.tarball-version")
+             get-string-all)
+           #\newline))))
+    (let ((tar-name (string-append "webid-oidc-" version ".tar.gz")))
+      (computed-file
+       tar-name
+       #~(let ((source
+                #$(file-append
+                   (package
+                    (inherit dist-without-maintainer)
+                    (native-inputs
+                     (cons* `("indent" ,indent)
+                            `("texlive" ,texlive)
+                            (package-native-inputs dist-without-maintainer))))
+                   "/" tar-name))
+               (destination #$output))
+           (format (current-error-port) "Symlinking ~a -> ~a...\n" source destination)
+           (symlink source destination))))))
diff --git a/configure.ac b/configure.ac
new file mode 100644
index 0000000..44d902b
--- /dev/null
+++ b/configure.ac
@@ -0,0 +1,28 @@
+AC_INIT([webid-oidc], m4_esyscmd([bash ./get-version]), [vivien@planete-kraus.eu])
+AC_CONFIG_SRCDIR([src/libwebidoidc.c])
+AM_INIT_AUTOMAKE([subdir-objects])
+AM_SILENT_RULES([yes])
+
+AC_PROG_CC
+AM_MISSING_PROG([SNARF], [guile-snarf])
+AM_MISSING_PROG([HELP2MAN], [help2man])
+LT_INIT
+AC_CONFIG_HEADERS([config.h])
+AM_GNU_GETTEXT([external])
+AM_GNU_GETTEXT_VERSION([0.20])
+GUILE_PKG([3.0])
+GUILE_PROGS
+GUILE_SITE_DIR
+PKG_CHECK_MODULES([NETTLE], [nettle])
+PKG_CHECK_MODULES([HOGWEED], [hogweed])
+PKG_CHECK_MODULES([GUILE], [guile-$GUILE_EFFECTIVE_VERSION])
+GUILE_MODULE_REQUIRED([json])
+GUILE_MODULE_REQUIRED([rdf rdf])
+GUILE_MODULE_REQUIRED([turtle tordf])
+GUILE_MODULE_REQUIRED([turtle fromrdf])
+GUILE_MODULE_REQUIRED([nquads tordf])
+GUILE_MODULE_REQUIRED([nquads fromrdf])
+
+AC_CONFIG_FILES([Makefile po/Makefile.in man/Makefile])
+AC_CONFIG_FILES([man/reset-env], [chmod +x man/reset-env])
+AC_OUTPUT
diff --git a/doc/ChangeLog b/doc/ChangeLog
new file mode 100644
index 0000000..e3a508c
--- /dev/null
+++ b/doc/ChangeLog
@@ -0,0 +1,10 @@
+2021-03-13  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* Makefile.am (AM_MAKEINFOHTMLFLAGS): Add a stylesheet for the
+	manual.
+
+2021-03-12  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* html2texi.xsl: add a template for <h2>, <info:var> and
+	<info:defvr>, and merge the vr index.
+
diff --git a/get-version b/get-version
new file mode 100755
index 0000000..22aa929
--- /dev/null
+++ b/get-version
@@ -0,0 +1,5 @@
+#!/bin/sh
+
+TARBALL_VERSION=$(cat .tarball-version 2>/dev/null || echo "SNAPSHOT")
+
+printf "%s" $TARBALL_VERSION
diff --git a/guix/vkraus/packages/ChangeLog b/guix/vkraus/packages/ChangeLog
new file mode 100644
index 0000000..630e7ed
--- /dev/null
+++ b/guix/vkraus/packages/ChangeLog
@@ -0,0 +1,13 @@
+2020-12-06  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* webid-oidc.scm (webid-oidc-snapshot): Call wrap-program to set
+	up the paths.
+
+2020-11-26  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* webid-oidc.scm (webid-oidc-snapshot): change the guix name of
+	the snapshot package so that there is no conflict with the
+	release.
+	(webid-oidc-release): use an explicit guix package name, we don't
+	want to inherit the snapshot name.
+
diff --git a/guix/vkraus/packages/webid-oidc.scm b/guix/vkraus/packages/webid-oidc.scm
new file mode 100644
index 0000000..f05477a
--- /dev/null
+++ b/guix/vkraus/packages/webid-oidc.scm
@@ -0,0 +1,140 @@
+(define-module (vkraus packages webid-oidc)
+  #:use-module (guix packages)
+  #:use-module (guix gexp)
+  #:use-module ((guix licenses) #:prefix license:)
+  #:use-module (guix download)
+  #:use-module (guix git-download)
+  #:use-module (guix build-system gnu)
+  #:use-module (gnu packages)
+  #:use-module (gnu packages base)
+  #:use-module (gnu packages guile)
+  #:use-module (gnu packages guile-xyz)
+  #:use-module (gnu packages nettle)
+  #:use-module (gnu packages pkg-config)
+  #:use-module (gnu packages texinfo)
+  #:use-module (gnu packages autotools)
+  #:use-module (gnu packages gettext)
+  #:use-module (gnu packages man)
+  #:use-module (gnu packages tls))
+
+(define-public webid-oidc-snapshot
+  (package
+   (name "webid-oidc-snapshot")
+   (version "SNAPSHOT")
+   (source "./webid-oidc-SNAPSHOT.tar.gz")
+   (build-system gnu-build-system)
+   (arguments
+    '(#:modules ((guix build utils)
+                 (guix build gnu-build-system)
+                 (ice-9 rdelim)
+                 (ice-9 popen))
+      #:phases
+      (modify-phases
+       %standard-phases
+       (add-after
+        'install 'wrap-program
+        (lambda* (#:key native-inputs inputs outputs #:allow-other-keys)
+          (let* ((out (assoc-ref outputs "out"))
+                 (the-guile (assoc-ref (or native-inputs inputs) "guile"))
+                 (the-guile-exec (format #f "~a/bin/guile" the-guile))
+                 (effective-version
+                  (read-line
+                   (open-pipe* OPEN_READ
+                               the-guile-exec
+                               "-c"
+                               "(display (effective-version))")))
+                 (guile-propagated-inputs
+                  (cons out
+                        (map (lambda (name)
+                               (assoc-ref inputs name))
+                             '("guile-json" "guile-rdf" "gnutls"))))
+                 (mod-paths
+                  (map (lambda (prop-input)
+                         (format #f "~a/share/guile/site/~a"
+                                 prop-input effective-version))
+                       guile-propagated-inputs))
+                 (go-paths
+                  (map (lambda (prop-input)
+                         (format #f "~a/lib/guile/~a/site-ccache"
+                                 prop-input effective-version))
+                       guile-propagated-inputs)))
+            (wrap-program
+             (format #f "~a/bin/webid-oidc-issuer" out)
+             `("GUILE_LOAD_PATH" ":" = ,mod-paths)
+             `("GUILE_LOAD_COMPILED_PATH" ":" = ,go-paths))))))))
+   (native-inputs
+    `(("pkg-config" ,pkg-config)
+      ("guile" ,guile-3.0)
+      ("texinfo" ,texinfo)
+      ("autoconf" ,autoconf)
+      ("autoconf-archive" ,autoconf-archive)
+      ("automake" ,automake)
+      ("libtool" ,libtool)
+      ("gettext" ,gnu-gettext)
+      ("coreutils" ,coreutils) ;; for link (wrap-program)
+      ("help2man" ,help2man)
+      ("which" ,which)))
+   (inputs `(("guile" ,guile-3.0)
+             ("nettle" ,nettle)))
+   (propagated-inputs
+    `(("guile" ,guile-3.0)
+      ("guile-json" ,guile-json-4)
+      ("guile-rdf" ,guile-rdf)
+      ("gnutls" ,gnutls)))
+   (synopsis "")
+   (description "")
+   (home-page "https://labo.planete-kraus.eu/webid-oidc.git")
+   (license license:gpl3+)
+   (native-search-paths
+    (list (search-path-specification
+           (variable "LTDL_LIBRARY_PATH")
+           (files '("lib")))))))
+
+(define-public (webid-oidc-release version commit hash)
+  (package
+   (inherit webid-oidc-snapshot)
+   (name "webid-oidc")
+   (version version)
+   (source
+    (origin
+     (method git-fetch)
+     (uri (git-reference
+           (url "https://labo.planete-kraus.eu/webid-oidc.git")
+           (commit commit)))
+     (sha256 (base32 hash))
+     (snippet
+      `(begin
+         (with-output-to-file ".tarball-version"
+           (lambda _ (format #t "~a~%" ,version)))
+         #t))))))
+
+(define-public (webid-oidc-htmlize webid-oidc)
+  (package
+   (inherit webid-oidc)
+   (name "webid-oidc-html")
+   (arguments
+    '(#:phases
+      (modify-phases
+       %standard-phases
+       (add-after
+        'build 'build-html
+        (lambda* (#:key make-flags parallel-build? #:allow-other-keys)
+          (apply invoke "make" "html"
+                 `(,@(if parallel-build?
+                         `("-j" ,(number->string (parallel-job-count)))
+                         '())
+                   ,@make-flags))))
+       (replace
+        'install
+        (lambda* (#:key make-flags parallel-build? #:allow-other-keys)
+          (apply invoke "make" "install-html"
+                 `(,@(if parallel-build?
+                         `("-j" ,(number->string (parallel-job-count)))
+                         '())
+                   ,@make-flags)))))))
+   (synopsis "HTML documentation for webid-oidc")
+   (description "The manual for webid-oidc is provided as a texinfo
+file, which is exported to HTML.")))
+
+(define-public (make-website webid-oidc)
+  (file-append (webid-oidc-htmlize webid-oidc) "/share/doc/webid-oidc/webid-oidc.html"))
diff --git a/hooks/ChangeLog b/hooks/ChangeLog
new file mode 100644
index 0000000..2a86088
--- /dev/null
+++ b/hooks/ChangeLog
@@ -0,0 +1,8 @@
+2020-12-04  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* update: build with 4 cores
+
+2020-11-25  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* pre-commit: Check that the code is indented in the pre-commit hook.
+
diff --git a/hooks/update b/hooks/update
new file mode 100755
index 0000000..1fc463d
--- /dev/null
+++ b/hooks/update
@@ -0,0 +1,58 @@
+#!/bin/sh
+
+refname="$1"
+oldrev="$2"
+newrev="$3"
+zero=$(guix environment --ad-hoc git -- git hash-object --stdin </dev/null | tr '[0-9a-f]' '0')
+span="^$oldrev $newrev"
+if test "x$oldrev" = "x$zero"
+then
+    >&2 echo "Creating a new branch, $refname..."
+    span="$newrev"
+fi
+
+if test "x$newrev" = "x$zero"
+then
+    >&2 echo "Deleting a branch, that's OK."
+    exit 0
+fi
+
+if test "x$refname" = "xrefs/notes/dist"
+then
+    >&2 echo "Error: the server does not accept dist notes."
+    exit 1
+fi
+
+>&2 echo "Checking all refs in range $span."
+
+for ref in $(guix environment --ad-hoc git -- git rev-list $span)
+do
+    # If there is not already a note on the refs/notes/dist ref, then we
+    # should run the CI.
+    >&2 echo "Checking new commit $ref."
+    if git notes --ref="refs/notes/dist" list "$ref"
+    then
+	>&2 echo "CI already ran for $ref, skipping."
+    else
+	>&2 echo "This commit has not seen CI yet."
+	CLONEREPO=$(mktemp -d 2>/dev/null || mktemp -d -t "clone")
+	REPO=$(pwd)
+	cd "$CLONEREPO"
+	guix environment --ad-hoc --pure git -- git clone "$REPO" .
+	guix environment --ad-hoc --container git -- git checkout "$ref"
+	guix environment --ad-hoc --container git -- git checkout-index -a -f --prefix=source/
+	if OUTCOME=$(guix build -c 4 -L guix -f ci.scm)
+	then
+	    cd $REPO
+	    export BLOB="$(git hash-object -w $OUTCOME/*.tar.gz)"
+	    >&2 echo "Adding blob $BLOB as the results of the CI."
+	    guix environment --ad-hoc --container git -- git notes --ref=refs/notes/dist add \
+		 --allow-empty -f -C "$BLOB" "$ref"
+	    rm -rf $CLONEREPO
+	else
+	    cd $REPO
+	    rm -rf $CLONEREPO
+	    exit 1
+	fi
+    fi
+done
diff --git a/man/Makefile.am b/man/Makefile.am
new file mode 100644
index 0000000..4008ab9
--- /dev/null
+++ b/man/Makefile.am
@@ -0,0 +1,3 @@
+dist_man8_MANS =
+
+EXTRA_DIST = ./reset-env
diff --git a/man/reset-env.in b/man/reset-env.in
new file mode 100755
index 0000000..d333e44
--- /dev/null
+++ b/man/reset-env.in
@@ -0,0 +1,8 @@
+#!@SHELL@
+
+export LANG=C
+export XDG_DATA_HOME=UNKNOWN
+export XDG_CACHE_HOME=UNKNOWN
+export HOME=UNKNOWN
+
+exec "$@"
diff --git a/po/ChangeLog b/po/ChangeLog
new file mode 100644
index 0000000..f303b24
--- /dev/null
+++ b/po/ChangeLog
@@ -0,0 +1,16 @@
+2020-11-22  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* LINGUAS: add fr
+
+2020-11-22  gettextize  <bug-gnu-gettext@gnu.org>
+
+	* Makefile.in.in: New file, from gettext-0.20.1.
+	* boldquot.sed: New file, from gettext-0.20.1.
+	* en@boldquot.header: New file, from gettext-0.20.1.
+	* en@quot.header: New file, from gettext-0.20.1.
+	* insert-header.sin: New file, from gettext-0.20.1.
+	* quot.sed: New file, from gettext-0.20.1.
+	* remove-potcdate.sin: New file, from gettext-0.20.1.
+	* Rules-quot: New file, from gettext-0.20.1.
+	* POTFILES.in: New file.
+
diff --git a/po/LINGUAS b/po/LINGUAS
new file mode 100644
index 0000000..717280a
--- /dev/null
+++ b/po/LINGUAS
@@ -0,0 +1 @@
+fr
\ No newline at end of file
diff --git a/po/Makevars b/po/Makevars
new file mode 100644
index 0000000..d325102
--- /dev/null
+++ b/po/Makevars
@@ -0,0 +1,82 @@
+# Makefile variables for PO directory in any package using GNU gettext.
+#
+# Copyright (C) 2003-2019 Free Software Foundation, Inc.
+# This file is free software; the Free Software Foundation gives
+# unlimited permission to use, copy, distribute, and modify it.
+
+# Usually the message domain is the same as the package name.
+DOMAIN = $(PACKAGE)
+
+# These two variables depend on the location of this directory.
+subdir = po
+top_builddir = ..
+
+# These options get passed to xgettext.
+XGETTEXT_OPTIONS = --keyword=_ --keyword=N_ --keyword=G_ --from-code=utf-8
+
+# This is the copyright holder that gets inserted into the header of the
+# $(DOMAIN).pot file.  Set this to the copyright holder of the surrounding
+# package.  (Note that the msgstr strings, extracted from the package's
+# sources, belong to the copyright holder of the package.)  Translators are
+# expected to transfer the copyright for their translations to this person
+# or entity, or to disclaim their copyright.  The empty string stands for
+# the public domain; in this case the translators are expected to disclaim
+# their copyright.
+COPYRIGHT_HOLDER = Vivien Kraus
+
+# This tells whether or not to prepend "GNU " prefix to the package
+# name that gets inserted into the header of the $(DOMAIN).pot file.
+# Possible values are "yes", "no", or empty.  If it is empty, try to
+# detect it automatically by scanning the files in $(top_srcdir) for
+# "GNU packagename" string.
+PACKAGE_GNU =
+
+# This is the email address or URL to which the translators shall report
+# bugs in the untranslated strings:
+# - Strings which are not entire sentences, see the maintainer guidelines
+#   in the GNU gettext documentation, section 'Preparing Strings'.
+# - Strings which use unclear terms or require additional context to be
+#   understood.
+# - Strings which make invalid assumptions about notation of date, time or
+#   money.
+# - Pluralisation problems.
+# - Incorrect English spelling.
+# - Incorrect formatting.
+# It can be your email address, or a mailing list address where translators
+# can write to without being subscribed, or the URL of a web page through
+# which the translators can contact you.
+MSGID_BUGS_ADDRESS = vivien@planete-kraus.eu
+
+# This is the list of locale categories, beyond LC_MESSAGES, for which the
+# message catalogs shall be used.  It is usually empty.
+EXTRA_LOCALE_CATEGORIES =
+
+# This tells whether the $(DOMAIN).pot file contains messages with an 'msgctxt'
+# context.  Possible values are "yes" and "no".  Set this to yes if the
+# package uses functions taking also a message context, like pgettext(), or
+# if in $(XGETTEXT_OPTIONS) you define keywords with a context argument.
+USE_MSGCTXT = no
+
+# These options get passed to msgmerge.
+# Useful options are in particular:
+#   --previous            to keep previous msgids of translated messages,
+#   --quiet               to reduce the verbosity.
+MSGMERGE_OPTIONS =
+
+# These options get passed to msginit.
+# If you want to disable line wrapping when writing PO files, add
+# --no-wrap to MSGMERGE_OPTIONS, XGETTEXT_OPTIONS, and
+# MSGINIT_OPTIONS.
+MSGINIT_OPTIONS =
+
+# This tells whether or not to regenerate a PO file when $(DOMAIN).pot
+# has changed.  Possible values are "yes" and "no".  Set this to no if
+# the POT file is checked in the repository and the version control
+# program ignores timestamps.
+PO_DEPENDS_ON_POT = yes
+
+# This tells whether or not to forcibly update $(DOMAIN).pot and
+# regenerate PO files on "make dist".  Possible values are "yes" and
+# "no".  Set this to no if the POT file and PO files are maintained
+# externally.
+DIST_DEPENDS_ON_UPDATE_PO = yes
diff --git a/po/POTFILES.in b/po/POTFILES.in
new file mode 100644
index 0000000..4c23b00
--- /dev/null
+++ b/po/POTFILES.in
@@ -0,0 +1,2 @@
+# List of source files which contain translatable strings.
+src/libwebidoidc.c
diff --git a/po/fr.po b/po/fr.po
new file mode 100644
index 0000000..dffa2ae
--- /dev/null
+++ b/po/fr.po
@@ -0,0 +1,1538 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: webid-oidc 0.0.0\n"
+"Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
+"POT-Creation-Date: 2021-06-05 16:08+0200\n"
+"PO-Revision-Date: 2021-06-05 11:07+0200\n"
+"Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
+"Language-Team: French <vivien@planete-kraus.eu>\n"
+"Language: fr\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"Plural-Forms: nplurals=2; plural=(n > 1);\n"
+
+#: src/libwebidoidc.c:6
+msgid "This is the main function."
+msgstr "Ceci est la fonction principale."
+
+#, c-format
+#~ msgid "Could not set the global random generator up.\n"
+#~ msgstr ""
+#~ "Impossible d'initialiser le générateur de nombres aléatoires global.\n"
+
+#, c-format
+#~ msgid "Could not set the global random generator up: out of memory.\n"
+#~ msgstr ""
+#~ "Impossible d'initialiser le générateur de nombres aléatoires global : "
+#~ "plus de mémoire.\n"
+
+#, c-format
+#~ msgid ""
+#~ "Warning: could not open the seed file, maybe the parent directory is "
+#~ "missing...\n"
+#~ msgstr ""
+#~ "Attention : impossible d'ouvrir le fichier graine, peut-être que le "
+#~ "dossier parent n'existe pas...\n"
+
+#, c-format
+#~ msgid "Warning: could not create the cache directory '%s'.\n"
+#~ msgstr "Attention : impossible de créer le dossier de cache « %s ».\n"
+
+#~ msgid "when creating the cache directory"
+#~ msgstr "en créant le dossier de cache"
+
+#, c-format
+#~ msgid "Warning: could not create the package cache directory '%s'.\n"
+#~ msgstr ""
+#~ "Attention : impossible de créer le dossier de cache du paquet « %s ».\n"
+
+#~ msgid "when creating the package cache directory"
+#~ msgstr "en créant le dossier de cache du paquet"
+
+#, c-format
+#~ msgid "Could not open the seed file '%s'.\n"
+#~ msgstr "Impossible d'ouvrir le fichier graine « %s ».\n"
+
+#~ msgid "when opening the seed file"
+#~ msgstr "en ouvrant le fichier graine"
+
+#, c-format
+#~ msgid "Could not lock the seed file '%s'.\n"
+#~ msgstr "Impossible de verrouiller le fichier graine « %s ».\n"
+
+#~ msgid "when locking the seed file"
+#~ msgstr "en verrouillant le fichier graine"
+
+#, c-format
+#~ msgid ""
+#~ "Warning: the seed file '%s' is too short. This weakens the random number "
+#~ "generator. Please write more random data in it.\n"
+#~ msgstr ""
+#~ "Attention : le fichier de graine « %s » est trop court. Ceci affaiblit le "
+#~ "générateur de nombres aléatoires. Veuillez écrire plus de données "
+#~ "dedans.\n"
+
+#, c-format
+#~ msgid "Could not update the seed file '%s'.\n"
+#~ msgstr "Impossible de mettre à jour le fichier graine « %s ».\n"
+
+#~ msgid "when rewinding the seed file"
+#~ msgstr "en rembobinant le fichier de graine"
+
+#, c-format
+#~ msgid "Could not unlock the seed file '%s'.\n"
+#~ msgstr "Impossible de déverrouiller le fichier graine « %s ».\n"
+
+#~ msgid "when unlocking the seed file"
+#~ msgstr "en déverrouillant le fichier graine"
+
+#, c-format
+#~ msgid "Could not set the thread-local random generator up.\n"
+#~ msgstr ""
+#~ "Impossible d'initialiser le générateur de nombres aléatoires du fil.\n"
+
+#, c-format
+#~ msgid ""
+#~ "The random module has not been initialized. Please call "
+#~ "webid_oidc_random_init first.\n"
+#~ msgstr ""
+#~ "Le module aléatoire n'a pas été initialisé. Veuillez appeler "
+#~ "webid_oidc_random_init d'abort.\n"
+
+#, c-format
+#~ msgid "Usage: generate-random [NUMBER OF BYTES]\n"
+#~ msgstr "Utilisation : generate-random [NOMBRE D'OCTETS]\n"
+
+#, c-format
+#~ msgid "Usage: generate-key [NUMBER OF BITS | CURVE]\n"
+#~ msgstr "Utilisation : generate-key [NOMBRE DE BITS | COURBE]\n"
+
+#~ msgid "that’s how it is"
+#~ msgstr "c’est comme ça"
+
+#, scheme-format
+#~ msgid "the value ~s is not a base64 string (because ~a)"
+#~ msgstr "la valeur ~s n’est pas une chaîne base64 (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s is not JSON (because ~a)"
+#~ msgstr "la valeur ~s n’est pas du JSON (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s is not Turtle (because ~a)"
+#~ msgstr "la valeur ~s n’est pas du Turtle (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify an elleptic curve"
+#~ msgstr "la valeur ~s n’identifie pas une courbe elliptique"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a JWK (because ~a)"
+#~ msgstr "la valeur ~s n’identifie pas une JWK (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a JWK"
+#~ msgstr "la valeur ~s n’identifie pas une JWK"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a public JWK (because ~a)"
+#~ msgstr "la valeur ~s n’identifie pas une JWK publique (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a public JWK"
+#~ msgstr "la valeur ~s n’identifie pas une JWK publique"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a private JWK (because ~a)"
+#~ msgstr "la valeur ~s n’identifie pas une JWK privée (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a private JWK"
+#~ msgstr "la valeur ~s n’identifie pas une JWK privée"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a JWKS (because ~a)"
+#~ msgstr "la valeur ~s n’identifie pas un JWKS (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a JWKS"
+#~ msgstr "la valeur ~s n’identifie pas un JWKS"
+
+#, scheme-format
+#~ msgid "the value ~s does not identify a hash algorithm"
+#~ msgstr "la valeur ~s n’identifie pas un algorithme de hachage"
+
+#, scheme-format
+#~ msgid "the value ~s is not an alist or misses key ~s"
+#~ msgstr "la valeur ~s n’est pas une alist ou il manque la clé ~s"
+
+#, scheme-format
+#~ msgid "the value ~s is not a JWS header (because ~a)"
+#~ msgstr "la valeur ~s n’est pas un header JWS (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s is not a JWS payload (because ~a)"
+#~ msgstr "la valeur ~s n’est pas un contenu JWS (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s is not a JWS (because ~a)"
+#~ msgstr "la valeur ~s n’est pas un JWS (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the string ~s cannot be split in 3 parts with ~s"
+#~ msgstr "la chaîne ~s ne peut pas être découpée en 3 parties avec ~s"
+
+#, scheme-format
+#~ msgid ""
+#~ "all key candidates failed to verify signature ~s with algorithm ~s and "
+#~ "payload ~a (there were ~a: ~s)"
+#~ msgstr ""
+#~ "aucune clé candidate n’a pu vérifier la signature ~s avec l’algorithme ~s "
+#~ "et le contenu ~a (il y en avait ~a : ~s)"
+
+#, scheme-format
+#~ msgid "I cannot decode JWS ~a (because ~a)"
+#~ msgstr "je n’ai pas pu décoder le JWS encodé par ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot encode JWS ~a (because ~a)"
+#~ msgstr "je n’ai pas pu encoder le JWS ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid ""
+#~ "the server request unexpectedly failed with code ~a and reason phrase ~s"
+#~ msgstr ""
+#~ "la requête au serveur a échoué de façon inattendue avec un code ~a et une "
+#~ "raison ~s"
+
+#, scheme-format
+#~ msgid "the header ~a should not have the value ~s"
+#~ msgstr "l’en-tête ~a ne devrait pas avoir la valeur ~s"
+
+#, scheme-format
+#~ msgid "the header ~a should be present"
+#~ msgstr "l’en-tête ~a devrait être présent"
+
+#, scheme-format
+#~ msgid "the server response wasn't expected: ~s (because ~a)"
+#~ msgstr "la réponse du serveur est inattendue : ~s (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the value ~s is not an OIDC configuration (because ~a)"
+#~ msgstr "la valeur ~s n’est pas une configuration OIDC (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the webid field is incorrect: ~s"
+#~ msgstr "le champ webid est incorrect : ~s"
+
+#~ msgid "the webid field is missing"
+#~ msgstr "le champ webid est manquant"
+
+#, scheme-format
+#~ msgid "the sub field is incorrect: ~s"
+#~ msgstr "le champ sub est incorrect : ~s"
+
+#~ msgid "the sub field is missing"
+#~ msgstr "le champ sub est manquant"
+
+#, scheme-format
+#~ msgid "the iss field is incorrect: ~s"
+#~ msgstr "le champ iss est incorrect : ~s"
+
+#~ msgid "the iss field is missing"
+#~ msgstr "le champ iss est manquant"
+
+#, scheme-format
+#~ msgid "the aud field is incorrect: ~s"
+#~ msgstr "le champ aud est incorrect : ~s"
+
+#~ msgid "the aud field is missing"
+#~ msgstr "le champ aud est manquant"
+
+#, scheme-format
+#~ msgid "the iat field is incorrect: ~s"
+#~ msgstr "le champ iat est incorrect : ~s"
+
+#~ msgid "the iat field is missing"
+#~ msgstr "le champ iat est manquant"
+
+#, scheme-format
+#~ msgid "the exp field is incorrect: ~s"
+#~ msgstr "le champ exp est incorrect : ~s"
+
+#~ msgid "the exp field is missing"
+#~ msgstr "le champ exp est manquant"
+
+#, scheme-format
+#~ msgid "the cnf/jkt field is incorrect: ~s"
+#~ msgstr "le champ cnf/jkt est incorrect : ~s"
+
+#~ msgid "the cnf/jkt field is missing"
+#~ msgstr "le champ cnf/jkt est manquant"
+
+#, scheme-format
+#~ msgid "the client-id field is incorrect: ~s"
+#~ msgstr "le champ client-id est incorrect : ~s"
+
+#~ msgid "the client-id field is missing"
+#~ msgstr "le champ client-id est manquant"
+
+#, scheme-format
+#~ msgid "the redirect_uris field is incorrect: ~s"
+#~ msgstr "le champ redirect_uris est incorrect : ~s"
+
+#~ msgid "the redirect_uris field is missing"
+#~ msgstr "le champ redirect_uris est manquant"
+
+#, scheme-format
+#~ msgid "the typ field is incorrect: ~s"
+#~ msgstr "le champ typ est incorrect : ~s"
+
+#~ msgid "the typ field is missing"
+#~ msgstr "le champ typ est manquant"
+
+#, scheme-format
+#~ msgid "the jwk field is incorrect: ~s (because ~a)"
+#~ msgstr "le champ jwk est incorrect : ~s (parce que ~a)"
+
+#~ msgid "the jwk field is missing"
+#~ msgstr "le champ jwk est manquant"
+
+#, scheme-format
+#~ msgid "the jti field is incorrect: ~s"
+#~ msgstr "le champ jti est incorrect : ~s"
+
+#~ msgid "the jti field is missing"
+#~ msgstr "le champ jti est manquant"
+
+#, scheme-format
+#~ msgid "the nonce field is incorrect: ~s"
+#~ msgstr "le champ nonce est incorrect : ~s"
+
+#~ msgid "the nonce field is missing"
+#~ msgstr "le champ nonce est manquant"
+
+#, scheme-format
+#~ msgid "the htm field is incorrect: ~s"
+#~ msgstr "le champ htm est incorrect : ~s"
+
+#~ msgid "the htm field is missing"
+#~ msgstr "le champ htm est manquant"
+
+#, scheme-format
+#~ msgid "the htu field is incorrect: ~s"
+#~ msgstr "le champ htu est incorrect : ~s"
+
+#~ msgid "the htu field is missing"
+#~ msgstr "le champ htu est manquant"
+
+#, scheme-format
+#~ msgid "~s is not an access token (because ~a)"
+#~ msgstr "~s n’est pas un jeton d’accès (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an access token header (because ~a)"
+#~ msgstr "~s n’est pas un en-tête de jeton d’accès (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an access token payload (because ~a)"
+#~ msgstr "~s n’est pas un contenu de jeton d’accès (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not a DPoP proof (because ~a)"
+#~ msgstr "~s n’est pas une preuve DPoP (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not a DPoP proof header (because ~a)"
+#~ msgstr "~s n’est pas un en-tête de preuve DPoP (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not a DPoP proof payload (because ~a)"
+#~ msgstr "~s n’est pas un contenu de preuve DPoP (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
+#~ msgstr ""
+#~ "je n’ai pas pu récupérer la configuration de l’émetteur ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
+#~ msgstr "je n’ai pas pu récupérer le JWKS de ~a à ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the HTTP method is signed for ~s, but ~s was requested"
+#~ msgstr "la méthode HTTP a été signée pour ~s, mais ~s a été demandé"
+
+#, scheme-format
+#~ msgid "the HTTP uri is signed for ~a, but ~a was requested"
+#~ msgstr "l’uri HTTP a été signé pour ~a, mais ~a a été demandé"
+
+#, scheme-format
+#~ msgid "the date is ~a, but the DPoP proof is signed in the future at ~a"
+#~ msgstr "la date est ~a, mais la preuve DPoP a été signée dans le futur à ~a"
+
+#, scheme-format
+#~ msgid "the date is ~a, but the DPoP proof was signed too long ago at ~a"
+#~ msgstr ""
+#~ "la date est ~a, mais la preuve DPoP a été signée il y a trop longtemps à "
+#~ "~a"
+
+#, scheme-format
+#~ msgid "the key ~s does not hash to ~a"
+#~ msgstr "la clé ~s ne donne pas un hash de ~a"
+
+#, scheme-format
+#~ msgid "the key confirmation of ~s failed (because ~a)"
+#~ msgstr "la confirmation de clé de ~s a échoué (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the key confirmation of ~s failed"
+#~ msgstr "la confirmation de la clé ~s a échoué"
+
+#, scheme-format
+#~ msgid "the jti ~s has already been found (because ~a)"
+#~ msgstr "le jti ~s a déjà été trouvé (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot decode ~s as an access token (because ~a)"
+#~ msgstr "je n’ai pas pu décoder ~s comme jeton d’accès (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
+#~ msgstr ""
+#~ "je n’ai pas pu encoder ~s comme un jeton d’accès avec la clé ~s (parce "
+#~ "que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot decode ~s as a DPoP proof (because ~a)"
+#~ msgstr "je n’ai pas pu décoder ~s comme preuve DPoP (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot encode ~s as a DPoP proof (because ~a)"
+#~ msgstr "je n’ai pas pu encoder ~s comme une preuve DPoP (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I could not fetch a RDF graph at ~a (because ~a)"
+#~ msgstr "je n’ai pas pu récupérer de graphe RDF à ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not a client manifest (because ~a)"
+#~ msgstr "~s n’est pas un manifeste client (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s does not authorize redirection URI ~a"
+#~ msgstr "~s n’autorise pas l’URI de redirection ~a"
+
+#~ msgid "I cannot serve a public manifest"
+#~ msgstr "je ne peux pas servir un manifeste public"
+
+#, scheme-format
+#~ msgid "~a does not have a client manifest registration triple"
+#~ msgstr "~a n’a pas de triplet d’enregistrement de manifeste client"
+
+#, scheme-format
+#~ msgid "the client manifest at ~a is advertised for ~a"
+#~ msgstr "le manifeste client ~a est publié pour ~a"
+
+#, scheme-format
+#~ msgid "I could not fetch the client manifest of ~a (because ~a)"
+#~ msgstr "je n’ai pas pu récupérer le manifeste client de ~a (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an authorization code (because ~a)"
+#~ msgstr "~s n’est pas un code d’autorisation (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an authorization code header (because ~a)"
+#~ msgstr "~s n’est pas un en-tête de code d’autorisation (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an authorization code payload (because ~a)"
+#~ msgstr "~s n’est pas un contenu de code d’autorisation (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the current time is ~a, and the authorization code expired at ~a"
+#~ msgstr ""
+#~ "la date est actuellement ~a, et le code d’autorisation a expiré à la date "
+#~ "~a"
+
+#, scheme-format
+#~ msgid "I cannot decode ~s as an authorization code (because ~a)"
+#~ msgstr ""
+#~ "je n’ai pas pu décoder ~s comme un code d’autorisation (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot encode ~s as an authorization code (because ~a)"
+#~ msgstr ""
+#~ "je n’ai pas pu encoder ~s comme un code d’autorisation (parce que ~a)"
+
+#, scheme-format
+#~ msgid "there is no such refresh token as ~s"
+#~ msgstr "il n’y a pas de jeton de rafraîchissement ~s"
+
+#, scheme-format
+#~ msgid ""
+#~ "the refresh token is bound to a key confirmed as ~s, but it is used with "
+#~ "key ~s"
+#~ msgstr ""
+#~ "Le jeton de rafraîchissement est lié à une clé confirmée par ~s, mais il "
+#~ "est utilisé avec la clé ~s"
+
+#, scheme-format
+#~ msgid "I cannot decode ~s as an ID token (because ~a)"
+#~ msgstr "je n’ai pas pu décoder ~s comme jeton d’identité (parce que ~a)"
+
+#, scheme-format
+#~ msgid "I cannot encode ~s as an ID token (because ~a)"
+#~ msgstr "je n’ai pas pu encoder ~s comme un jeton d’identité (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the grant type ~s is not supported"
+#~ msgstr "le type d’octroi ~s n’est pas supporté "
+
+#~ msgid "there is no authorization code in the request"
+#~ msgstr "il n’y a pas de code d’autorisation dans la requête"
+
+#~ msgid "there is no refresh token in the request"
+#~ msgstr "il n’y a pas de jeton de rafraîchissement dans la requête"
+
+#, scheme-format
+#~ msgid "~s is not an ID token (because ~a)"
+#~ msgstr "~s n’est pas un jeton d’identité (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an ID token header (because ~a)"
+#~ msgstr "~s n’est pas un en-tête de jeton d’identité (parce que ~a)"
+
+#, scheme-format
+#~ msgid "~s is not an ID token payload (because ~a)"
+#~ msgstr "~s n’est pas un contenu de jeton d’identité (parce que ~a)"
+
+#, scheme-format
+#~ msgid ""
+#~ "I couldn’t set the locale to ~s as an approximation of the client locale "
+#~ "~s"
+#~ msgstr ""
+#~ "je n’ai pas pu définir la locale à ~s comme approximation de la locale du "
+#~ "client ~s"
+
+#, scheme-format
+#~ msgid "~s does not admit ~s as an identity provider"
+#~ msgstr "~s n’admet pas ~s comme fournisseur d’identité"
+
+#, scheme-format
+#~ msgid ""
+#~ "~a is neither an identity provider (because ~a) nor a webid (because ~a)"
+#~ msgstr ""
+#~ "~a n’est ni un fournisseur d’identité (parce que ~a) ni un webid (parce "
+#~ "que ~a)"
+
+#, scheme-format
+#~ msgid "the token request failed (because ~a)"
+#~ msgstr "la requête de jeton a échoué (parce que ~a)"
+
+#, scheme-format
+#~ msgid "you don’t have a refresh token for identity ~a certified by ~a in ~s"
+#~ msgstr ""
+#~ "vous n’avez pas de jeton de rafraîchissement pour l’identité ~a certifié "
+#~ "par ~a dans ~s"
+
+#, scheme-format
+#~ msgid "all identity provider candidates for ~a failed: ~a"
+#~ msgstr ""
+#~ "tous les candidats de fournisseurs d’identité pour ~a ont échoué : ~a"
+
+#, scheme-format
+#~ msgid "~s failed (because ~a)"
+#~ msgstr "~s a échoué (parce que ~a)"
+
+#~ msgid ", "
+#~ msgstr ", "
+
+#, scheme-format
+#~ msgid "the resource ~s could not be found (because ~a)"
+#~ msgstr "la ressource ~s n’a pas été trouvée (parce que ~a)"
+
+#, scheme-format
+#~ msgid "the resource is missing an etag (see ~s)"
+#~ msgstr "la ressource n’a pas d’etag (voir ~s)"
+
+#, scheme-format
+#~ msgid "the resource is missing a content type (see ~s)"
+#~ msgstr "la ressource n’a pas de type de contenu (voir ~s)"
+
+#, scheme-format
+#~ msgid ""
+#~ "the precondition failed for etag ~s: if-match ~s and if-none-match ~s"
+#~ msgstr ""
+#~ "la pré-condition a échoué pour l’etag ~s : if-match ~s et if-none-match ~s"
+
+#, scheme-format
+#~ msgid ""
+#~ "the precondition failed for a non-existing resource: if-match ~s and if-"
+#~ "none-match ~s"
+#~ msgstr ""
+#~ "la précondition a échoué pour une ressource inexistante : if-match ~s et "
+#~ "if-none-match ~s"
+
+#, scheme-format
+#~ msgid "the group ~a is not under the server URI ~a"
+#~ msgstr "le groupe ~a n’est pas sous l’URI du serveur ~a"
+
+#, scheme-format
+#~ msgid "the group ~a cannot be fetched (because ~a)"
+#~ msgstr "le groupe ~a n’a pas pu être récupéré (parce que ~a)"
+
+#, scheme-format
+#~ msgid "no resource has been found to serve URI path ~s"
+#~ msgstr "aucune ressource n’a été trouvée pour servir le chemin d’URI ~s"
+
+#, scheme-format
+#~ msgid "no resource has been found to serve URI path ~s, but ~s exists"
+#~ msgstr ""
+#~ "aucune ressource n’a été trouvée pour servir le chemin d’URI ~s, mais ~s "
+#~ "existe"
+
+#~ msgid "the root storage cannot be deleted"
+#~ msgstr "le stockage racine ne peut pas être détruit"
+
+#, scheme-format
+#~ msgid "the container ~s should be emptied before being deleted"
+#~ msgstr "le conteneur ~s doit être vidé avant d’être détruit"
+
+#~ msgid "that’s it"
+#~ msgstr "c’est tout"
+
+#, scheme-format
+#~ msgid "~a and ~a"
+#~ msgstr "~a et ~a"
+
+#, scheme-format
+#~ msgid "~a, ~a"
+#~ msgstr "~a, ~a"
+
+#, scheme-format
+#~ msgid "the signature ~a does not match key ~s with payload ~a"
+#~ msgstr "la signature ~a ne correspond pas à la clé ~s avec le contenu ~a"
+
+#~ msgid "there is an undefined variable"
+#~ msgstr "il y a une variable non définie"
+
+#, scheme-format
+#~ msgid "the origin is ~a"
+#~ msgstr "l’origine est ~a"
+
+#, scheme-format
+#~ msgid "a message is attached: ~a"
+#~ msgstr "un message est attaché : ~a"
+
+#, scheme-format
+#~ msgid "the values ~s are problematic"
+#~ msgstr "les valeurs ~s sont problématiques"
+
+#~ msgid "there is a kind and args"
+#~ msgstr "il y a un type et des arguments"
+
+#~ msgid "there is an assertion failure"
+#~ msgstr "il y a un échec d’assertion"
+
+#, scheme-format
+#~ msgid "the program quits with code ~a"
+#~ msgstr "le programme quitte avec le code ~a"
+
+#~ msgid "the program cannot recover from this exception"
+#~ msgstr "le programme ne peut pas récupérer après cette exception"
+
+#~ msgid "there is an error"
+#~ msgstr "il y a une erreur"
+
+#~ msgid "there is an external error"
+#~ msgstr "il y a une erreur externe"
+
+#, scheme-format
+#~ msgid "Unhandled exception type ~a."
+#~ msgstr "Type d’exception non pris en charge ~a."
+
+#~ msgid "Warning: generating a new key pair."
+#~ msgstr "Attention : génération d'une nouvelle paire de clé."
+
+#~ msgid "command-line|version"
+#~ msgstr "version"
+
+#~ msgid "comand-line|help"
+#~ msgstr "aide"
+
+#~ msgid "comand-line|issuer"
+#~ msgstr "émetteur"
+
+#~ msgid "comand-line|key-file"
+#~ msgstr "fichier-clé"
+
+#~ msgid "comand-line|subject"
+#~ msgstr "sujet"
+
+#~ msgid "comand-line|password"
+#~ msgstr "mot-de-passe"
+
+#~ msgid "comand-line|jwks-uri"
+#~ msgstr "uri-jwks"
+
+#~ msgid "comand-line|authorization-endpoint-uri"
+#~ msgstr "uri-terminal-autorisation"
+
+#~ msgid "comand-line|token-endpoint-uri"
+#~ msgstr "uri-terminal-jeton"
+
+#~ msgid "comand-line|port"
+#~ msgstr "port"
+
+#~ msgid "comand-line|log-file"
+#~ msgstr "fichier-journal"
+
+#~ msgid "comand-line|error-file"
+#~ msgstr "fichier-erreur"
+
+#, scheme-format
+#~ msgid ""
+#~ "Usage: ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Run the Solid identity provider for a specific user.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -i URI, --~a=URI:\n"
+#~ "      set the public server host name.\n"
+#~ "  -k FILE, --~a=FILE.jwk:\n"
+#~ "      set the file name of the key file. If it does not exist, a new\n"
+#~ "      key is generated.\n"
+#~ "  -s WEBID, --~a=WEBID:\n"
+#~ "      set the identity of the subject.\n"
+#~ "  -w PASSWORD, --~a=PASSWORD:\n"
+#~ "      set the password to recognize the user.\n"
+#~ "  -j URI, --~a=URI:\n"
+#~ "      set the URI to query the key of the server.\n"
+#~ "  -a URI, --~a=URI:\n"
+#~ "      set the authorization endpoint of the issuer.\n"
+#~ "  -t URI, --~a=URI:\n"
+#~ "      set the token endpoint of the issuer.\n"
+#~ "  -p PORT, --~a=PORT:\n"
+#~ "      set the port to bind (instead of 8080).\n"
+#~ "  -l FILE.log, --~a=FILE.log:\n"
+#~ "      dump the standard output to that file.\n"
+#~ "  -e FILE.err, --~a=FILE.err:\n"
+#~ "      dump the standard error to that file.\n"
+#~ "\n"
+#~ "Environment variables:\n"
+#~ "\n"
+#~ "  LANG: set the locale of the sysadmin-facing interface (the user\n"
+#~ "pages are translated according to the user agent’s Accept-language\n"
+#~ "header), for log files and command-line interface. It is currently ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME: where to store the refresh tokens (under the\n"
+#~ "webid-oidc directory). For a system service, it is recommended to set\n"
+#~ "it to /var/lib. Currently set to ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME: where to store and update the seed file for the\n"
+#~ "random number generator. If you remove it, you need to restart the\n"
+#~ "program to use a different seed. Currently set to ~a.\n"
+#~ "\n"
+#~ "  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
+#~ "computed from the value of the HOME environment variable. It is not\n"
+#~ "used otherwise. Currently set to ~a.\n"
+#~ "\n"
+#~ "Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
+#~ "by shepherd in reality):\n"
+#~ "\n"
+#~ "    export LANG=C\n"
+#~ "    export XDG_DATA_HOME=/var/lib\n"
+#~ "    export XDG_CACHE_HOME=/var/cache\n"
+#~ "    webid-oidc-issuer \\\n"
+#~ "      --issuer https://webid-oidc-demo.planete-kraus.eu \\\n"
+#~ "      --key-file /var/lib/webid-oidc/issuer/key.jwk \\\n"
+#~ "      --subject https://webid-oidc-demo.planete-kraus.eu/profile/card#me "
+#~ "\\\n"
+#~ "      --password \"$PASSWORD\" \\\n"
+#~ "      --jwks-uri https://webid-oidc-demo.planete-kraus.eu/keys \\\n"
+#~ "      --authorization-endpoint-uri https://webid-oidc-demo.planete-kraus."
+#~ "eu/authorize \\\n"
+#~ "      --token-endpoint-uri https://webid-oidc-demo.planete-kraus.eu/token "
+#~ "\\\n"
+#~ "      --port $PORT\n"
+#~ "\n"
+#~ "If you find a bug, send a report to ~a.\n"
+#~ msgstr ""
+#~ "Utilisation : ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Exécute le fournisseur d’identité Solid pour un utilisateur spécifique.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -i URI, --~a=URI :\n"
+#~ "      définit le nom public du serveur.\n"
+#~ "  -k FICHIER, --~a=FICHIER.jwk :\n"
+#~ "      définit le nom du fichier de clé. S’il n’existe pas, une\n"
+#~ "      nouvelle clé sera générée.\n"
+#~ "  -s WEBID, --~a=WEBID :\n"
+#~ "      définit l’identité du sujet.\n"
+#~ "  -w MOTDEPASSE, --~a=MOTDEPASSE :\n"
+#~ "      définit le mot de passe pour reconnaître l’utilisateur.\n"
+#~ "  -j URI, --~a=URI :\n"
+#~ "      définit l’URI pour obtenir la clé publique du serveur.\n"
+#~ "  -a URI, --~a=URI :\n"
+#~ "      définit le terminal d’autorisation de l’émetteur (authorization\n"
+#~ "      endpoint).\n"
+#~ "  -t URI, --~a=URI :\n"
+#~ "      définit le terminal de jeton de l’émetteur (token endpoint).\n"
+#~ "  -p PORT, --~a=PORT :\n"
+#~ "      définit le port à lier (au lieu de 8080).\n"
+#~ "  -l FICHIER.log, --~a=FICHIER.log :\n"
+#~ "      déverser la sortie standard vers ce fichier.\n"
+#~ "  -e FICHIER.err, --~a=FICHIER.err :\n"
+#~ "      déverser la sortie d’erreur vers ce fichier.\n"
+#~ "\n"
+#~ "Variables d’environnement :\n"
+#~ "\n"
+#~ "  LANG : définit la locale de l’interface de l’administrateur système\n"
+#~ "(les pages utilisateur sont traduites selon l’en-tête Accept-Language\n"
+#~ "de l’agent), pour les fichiers de journaux et l’interface en ligne de\n"
+#~ "commande. Elle vaut actuellement ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME : où stocker les jetons de rafraîchissement (refresh\n"
+#~ "tokens, dans un sous-dossier webid-oidc). Pour un service système, il\n"
+#~ "est recommandé d’affecter /var/lib. Actuellement définie à ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME : où stocker et modifier le fichier de graine pour le\n"
+#~ "générateur de nombres aléatoires. Si vous le supprimez, vous devez\n"
+#~ "redémarrer le programme pour utiliser une graine\n"
+#~ "différente. Actuellement définie à ~a.\n"
+#~ "\n"
+#~ "  HOME : si XDG_DATA_HOME ou XDG_CACHE_HOME ne sont pas définies,\n"
+#~ "elles sont calculées à partir de la valeur de la variable\n"
+#~ "d’environnement HOME. Elle n’est pas utilisée dans les autres\n"
+#~ "cas. Actuellement définie à ~a.\n"
+#~ "\n"
+#~ "Exemple utilisé pour webid-oidc-demo.planete-kraus.eu (sauf que le\n"
+#~ "service est géré par shepherd en réalité, et les URI sont en\n"
+#~ "anglais) :\n"
+#~ "\n"
+#~ "    export LANG=fr_FR.UTF-8\n"
+#~ "    export XDG_DATA_HOME=/var/lib\n"
+#~ "    export XDG_CACHE_HOME=/var/cache\n"
+#~ "    webid-oidc-issuer \\\n"
+#~ "      --émetteur https://webid-oidc-demo.planete-kraus.eu \\\n"
+#~ "      --fichier-clé /var/lib/webid-oidc/émetteur/clé.jwk \\\n"
+#~ "      --sujet https://webid-oidc-demo.planete-kraus.eu/profil/carte#moi "
+#~ "\\\n"
+#~ "      --mot-de-passe \"$MOTDEPASSE\" \\\n"
+#~ "      --uri-jwks https://webid-oidc-demo.planete-kraus.eu/clés \\\n"
+#~ "      --uri-terminal-autorisation https://webid-oidc-demo.planete-kraus."
+#~ "eu/autoriser \\\n"
+#~ "      --uri-terminal-jeton https://webid-oidc-demo.planete-kraus.eu/jeton "
+#~ "\\\n"
+#~ "      --port $PORT\n"
+#~ "\n"
+#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à "
+#~ "~a.\n"
+
+#, scheme-format
+#~ msgid "~a version ~a\n"
+#~ msgstr "~a version ~a\n"
+
+#~ msgid "You need to set the issuer.\n"
+#~ msgstr "Vous devez définir l'émetteur.\n"
+
+#~ msgid "You need to set the file name of the key file.\n"
+#~ msgstr "Vous devez définir le nom de ficher du fichier de clé.\n"
+
+#~ msgid "You need to set the identity of the subject.\n"
+#~ msgstr "Vous devez définir l'identité du sujet.\n"
+
+#~ msgid ""
+#~ "You need to set the password to verify the identity of the subject.\n"
+#~ msgstr "Vous devez définir le mot de passe pour identifier le sujet.\n"
+
+#~ msgid "You need to set the JWKS URI.\n"
+#~ msgstr "Vous devez définir l'URI du JWKS.\n"
+
+#~ msgid "You need to set the authorization endpoint URI.\n"
+#~ msgstr "Vous devez définir l'URI du terminal d'autorisation.\n"
+
+#~ msgid "You need to set the token endpoint URI.\n"
+#~ msgstr "Vous devez définir l'URI du terminal de jeton.\n"
+
+#~ msgid "The port should be a number between 0 and 65535.\n"
+#~ msgstr "Le port doit être un nombre entre 0 et 65535.\n"
+
+#, scheme-format
+#~ msgid "~a: Internal server error: ~a\n"
+#~ msgstr "~a : Erreur interne du serveur : ~a\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "The client locale ~s can’t be approximated by system locale ~s (because "
+#~ "~a), using C.\n"
+#~ msgstr ""
+#~ "La locale du client ~s ne peut pas être approchée par la locale système "
+#~ "~s (parce que ~a), on utilise C.\n"
+
+#~ msgid "xml-lang|en"
+#~ msgstr "fr"
+
+#~ msgid "page-title|Authorization"
+#~ msgstr "Autorisation"
+
+#~ msgid "Authorize this anonymous application?"
+#~ msgstr "Autoriser cette application anonyme ?"
+
+#, scheme-format
+#~ msgid "Authorize <a href=~s>~a</a>?"
+#~ msgstr "Autoriser <a href=~s>~a</a> ?"
+
+#~ msgid "Do you want to authorize this application to represent you?"
+#~ msgstr "Voulez-vous autoriser cette application à vous représenter ?"
+
+#~ msgid "Please retry your password:"
+#~ msgstr "Veuillez réessayer votre mot de passe :"
+
+#~ msgid "Please enter your password:"
+#~ msgstr "Veuillez entrer votre mot de passe :"
+
+#~ msgid "Allow"
+#~ msgstr "Autoriser"
+
+#~ msgid "Bad request"
+#~ msgstr "Requête invalide"
+
+#~ msgid "The application did not set the <emph>client_id</emph> parameter."
+#~ msgstr "L'application n'a pas spécifié le paramètre <emph>client_id</emph>."
+
+#~ msgid "The application did not set the <emph>redirect_uri</emph> parameter."
+#~ msgstr ""
+#~ "L'application n'a pas spécifié le paramètre <emph>redirect_uri</emph>."
+
+#, scheme-format
+#~ msgid "the value ~s is not a base64 string."
+#~ msgstr "la valeur ~s n’est pas une chaîne base64."
+
+#~ msgid "the following value is not JSON:"
+#~ msgstr "la valeur suivante n’est pas du JSON :"
+
+#~ msgid "the following value is not Turtle:"
+#~ msgstr "la valeur suivante n’est pas du Turtle :"
+
+#, scheme-format
+#~ msgid ""
+#~ "the server request unexpectedly failed with code ~a and reason phrase ~s."
+#~ msgstr ""
+#~ "la requête au serveur a échoué de façon inattendue avec un code ~a et une "
+#~ "raison ~s."
+
+#, scheme-format
+#~ msgid "the header ~a should not have the value ~s.\n"
+#~ msgstr "l’en-tête ~a ne devrait pas avoir la valeur ~s.\n"
+
+#, scheme-format
+#~ msgid "the header ~a should be present."
+#~ msgstr "l’en-tête ~a devrait être présent."
+
+#~ msgid "the server response wasn’t expected:"
+#~ msgstr "la réponse du serveur est inattendue :"
+
+#, scheme-format
+#~ msgid "the client_id field is incorrect: ~s"
+#~ msgstr "le champ client_id est incorrect : ~s"
+
+#~ msgid "the client_id field is missing"
+#~ msgstr "le champ client_id est manquant"
+
+#, scheme-format
+#~ msgid "I could not fetch a RDF graph at ~a;"
+#~ msgstr "je n’ai pas pu récupérer de graphe RDF à ~a;"
+
+#~ msgid "this is not a client manifest:"
+#~ msgstr "ceci n’est pas un manifeste client :"
+
+#, scheme-format
+#~ msgid "the manifest does not authorize redirection URI ~a:"
+#~ msgstr "le manifeste n’autorise pas l’URI de redirection ~a :"
+
+#, scheme-format
+#~ msgid "the client manifest at ~a is advertised for ~a;"
+#~ msgstr "le manifeste client ~a est publié pour ~a ;"
+
+#, scheme-format
+#~ msgid "I could not fetch the client manifest of ~a;"
+#~ msgstr "je n’ai pas pu récupérer le manifeste client de ~a ;"
+
+#~ msgid "I could not issue an authorization code for you;"
+#~ msgstr "je n’ai pas pu émettre un code d’autorisation pour vous ;"
+
+#~ msgid ""
+#~ "The application you are trying to authorize behaved unexpectedly. Here is "
+#~ "the explanation of the error:"
+#~ msgstr ""
+#~ "L’application que vous essayez d’autoriser se comporte de façon "
+#~ "inattendue. Ci-après une explication de l’erreur :"
+
+#~ msgid "Redirecting..."
+#~ msgstr "Redirection..."
+
+#, scheme-format
+#~ msgid ""
+#~ "<a href=~s>~a</a> can now log in on your behalf. You still need to adjust "
+#~ "permissions."
+#~ msgstr ""
+#~ "<a href=~s>~a</a> peut maintenant s'identifier en votre nom. Vous devez "
+#~ "toujours ajuster ses permissions."
+
+#, scheme-format
+#~ msgid "~a: authentication failure: ~a\n"
+#~ msgstr "~a : échec d’authentificationn : ~a\n"
+
+#~ msgid "command-line|help"
+#~ msgstr "aide"
+
+#~ msgid "command-line|port"
+#~ msgstr "port"
+
+#~ msgid "command-line|inbound-uri"
+#~ msgstr "uri-entrant"
+
+#~ msgid "command-line|outbound-uri"
+#~ msgstr "uri-sortant"
+
+#~ msgid "command-line|header"
+#~ msgstr "en-tête"
+
+#, scheme-format
+#~ msgid ""
+#~ "Usage: ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Run a reverse proxy, taking requests with webid-oidc authentication\n"
+#~ "and passing them to the outbound URI with an additional header\n"
+#~ "containing the webid of the agent.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -p PORT, --~a=8080:\n"
+#~ "      set the port to bind.\n"
+#~ "  -i URI, --~a=URI: \n"
+#~ "      set the public URI of the reverse proxy.\n"
+#~ "  -o URI, --~a=URI:\n"
+#~ "      pass the requests to the server running at URI.\n"
+#~ "  -H HEADER, --~a=HEADER:\n"
+#~ "      pass request with optional HEADER set to the webid, XXX-Agent by "
+#~ "default.\n"
+#~ "  -l FILE.log, --~a=FILE.log:\n"
+#~ "      dump the standard output to that file.\n"
+#~ "  -e FILE.err, --~a=FILE.err:\n"
+#~ "      dump the standard error to that file.\n"
+#~ "\n"
+#~ "Environment variables:\n"
+#~ "\n"
+#~ "  LANG: set the locale of the sysadmin-facing interface. It is\n"
+#~ "currently ~a.\n"
+#~ "\n"
+#~ "Example:\n"
+#~ "\n"
+#~ "Suppose that you operate data.provider.com. Since everything is behind\n"
+#~ "a big global reverse proxy, the authenticated proxy listens on\n"
+#~ "http://localhost:8080. You have the data server running at\n"
+#~ "https://private.data.provider.com, set up so that only you can query\n"
+#~ "it.  The private server needs the XXX-Agent header to contain the\n"
+#~ "authenticated webid of the user, if the user is authenticated.  That’s\n"
+#~ "why you don’t want anyone to query it. You would run:\n"
+#~ "\n"
+#~ "    export LANG=C\n"
+#~ "    webid-oidc-reverse-proxy \\\n"
+#~ "      --port 8080 \\\n"
+#~ "      --inbound-uri https://data.provider.com \\\n"
+#~ "      --outbound-uri https://private.data.provider.com \\\n"
+#~ "      --header XXX-Agent \\\n"
+#~ "      --log-file /var/log/proxy.log \\\n"
+#~ "      --error-file /var/log/proxy.err\n"
+#~ "\n"
+#~ "If you find a bug, send a report to ~a.\n"
+#~ msgstr ""
+#~ "Utilisation : ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Exécute un proxy inversé, prenant des requêtes avec authentification\n"
+#~ "webid-oidc et les passant à un URI sortant avec un en-tête\n"
+#~ "additionel contenant le webid de l’agent.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -p PORT, --~a=PORT :\n"
+#~ "      définit le port à lier.\n"
+#~ "  -i URI, --~a=URI :\n"
+#~ "      définit le nom public du proxy inversé.\n"
+#~ "  -o URI, --~a=URI :\n"
+#~ "      passe les requêtes au serveur exécuté à URI.\n"
+#~ "  -h ENTÊTE, --~a=ENTÊTE :\n"
+#~ "      passe les requêtes avec un ENTÊTE optionnel défini par la valeur\n"
+#~ "      du webid, XXX-Agent par défaut.\n"
+#~ "  -l FICHIER.log, --~a=FICHIER.log :\n"
+#~ "      déverser la sortie standard vers ce fichier.\n"
+#~ "  -e FICHIER.err, --~a=FICHIER.err :\n"
+#~ "      déverser la sortie d’erreur vers ce fichier.\n"
+#~ "\n"
+#~ "Variables d’environnement :\n"
+#~ "\n"
+#~ "  LANG : définit la locale de l’interface de l’administrateur système\n"
+#~ "Elle vaut actuellement ~a.\n"
+#~ "\n"
+#~ "Exemple :\n"
+#~ "\n"
+#~ "Supposons que vous opérez donnees.fournisseur.com. Puisque tout est\n"
+#~ "derrière un grand proxy inversé global, le proxy d’authentification\n"
+#~ "écoute sur http://localhost:8080. Vous avez le serveur de données sur\n"
+#~ "https://prive.donnees.fournisseur.com, configuré de sorte à ce que\n"
+#~ "vous seul puissiez le requêter. Le serveur privé nécessite que la\n"
+#~ "valeur de l’en-tête XXX-Agent contienne le webid de l’utilisateur\n"
+#~ "authentifié, si c’est le cas. C’est pourquoi vous ne voulez pas que\n"
+#~ "n’importe qui puisse le requêter. Vous exécuteriez :\n"
+#~ "\n"
+#~ "    export LANG=fr_FR.UTF-8\n"
+#~ "    webid-oidc-reverse-proxy \\\n"
+#~ "      --port 8080 \\\n"
+#~ "      --uri-entrant https://donnees.fournisseur.com \\\n"
+#~ "      --uri-sortant https://prive.donnees.fournisseur.com \\\n"
+#~ "      --en-tête XXX-Agent \\\n"
+#~ "      --fichier-journal /var/log/proxy.log \\\n"
+#~ "      --fichier-erreur /var/log/proxy.err\n"
+#~ "\n"
+#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à\n"
+#~ "~a.\n"
+
+#~ msgid ""
+#~ "The public name of the server must be present (with scheme) as --inbound-"
+#~ "uri.\n"
+#~ msgstr ""
+#~ "Le nom public du serveur doit être présent (avec protocole) avec\n"
+#~ "--uri-entrant.\n"
+
+#~ msgid ""
+#~ "The address of the proxy must be present (with scheme) as --outbound-"
+#~ "uri.\n"
+#~ msgstr ""
+#~ "L’adresse du serveur doit être présent (avec protocole) avec\n"
+#~ "--uri-sortant.\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Display your identity contained in the XXX-Agent header.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -p PORT, --port=~a:\n"
+#~ "      set the port to bind.\n"
+#~ msgstr ""
+#~ "~a [OPTIONS]…\n"
+#~ "\n"
+#~ "Affiche votre identité contenue dans l’en-tête XXX-Agent.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -p PORT, --~a=8080 :\n"
+#~ "      définit le port à lier.\n"
+
+#~ msgid "comand-line|client-id"
+#~ msgstr "id-client"
+
+#~ msgid "comand-line|redirect-uri"
+#~ msgstr "uri-redirection"
+
+#~ msgid "comand-line|client-name"
+#~ msgstr "nom-client"
+
+#~ msgid "comand-line|client-uri"
+#~ msgstr "uri-client"
+
+#, scheme-format
+#~ msgid ""
+#~ "Usage: ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Serve public pages for an application.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -i URI, --~a=URI:\n"
+#~ "      set the webid of the client.\n"
+#~ "  -r FILE, --~a=URI:\n"
+#~ "      set the redirection URI where to get the authorization code.\n"
+#~ "  -n NAME, --~a=NAME:\n"
+#~ "      set the name of the application.\n"
+#~ "  -u URI, --~a=URI:\n"
+#~ "      set the address of the application (informative).\n"
+#~ "  -p PORT, --~a=PORT:\n"
+#~ "      set the port to bind (instead of 8080).\n"
+#~ "  -l FILE.log, --~a=FILE.log:\n"
+#~ "      dump the standard output to that file.\n"
+#~ "  -e FILE.err, --~a=FILE.err:\n"
+#~ "      dump the standard error to that file.\n"
+#~ "\n"
+#~ "Environment variables:\n"
+#~ "\n"
+#~ "  LANG: set the locale of the sysadmin-facing interface, for log files\n"
+#~ "and command-line interface. It is currently ~a.\n"
+#~ "\n"
+#~ "Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
+#~ "by shepherd in reality):\n"
+#~ "\n"
+#~ "    export LANG=C\n"
+#~ "    webid-oidc-client-service \\\n"
+#~ "      --client-id 'https://webid-oidc-demo.planete-kraus.eu/example-"
+#~ "application#id' \\\n"
+#~ "      --redirect-uri 'https://webid-oidc-demo.planete-kraus.eu/"
+#~ "authorized' \\\n"
+#~ "      --client-name 'Example Solid Application' \\\n"
+#~ "      --client-uri 'https://webid-oidc.planete-kraus.eu/Running-a-client."
+#~ "html#Running-a-client' \\\n"
+#~ "      --port $PORT\n"
+#~ "\n"
+#~ "If you find a bug, send a report to ~a.\n"
+#~ msgstr ""
+#~ "Utilisation : ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Sert les pages publiques d’une application.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -i URI, --~a=URI :\n"
+#~ "      définit le webid du client.\n"
+#~ "  -r URI, --~a=URI :\n"
+#~ "      définit l’URI de redirection où obtenir le code d’autorisation.\n"
+#~ "  -n NOM, --~a=NOM :\n"
+#~ "      définit le nom de l’application.\n"
+#~ "  -u URI, --~a=URI :\n"
+#~ "      définit l’adresse de l’application (à titre informatif).\n"
+#~ "  -p PORT, --~a=PORT :\n"
+#~ "      définit le port à lier (au lieu de 8080).\n"
+#~ "  -l FICHIER.log, --~a=FICHIER.log :\n"
+#~ "      déverser la sortie standard vers ce fichier.\n"
+#~ "  -e FICHIER.err, --~a=FICHIER.err :\n"
+#~ "      déverser la sortie d’erreur vers ce fichier.\n"
+#~ "\n"
+#~ "Variables d’environnement :\n"
+#~ "\n"
+#~ "  LANG : définit la locale de l’interface de l’administrateur système,\n"
+#~ "pour les fichiers de journaux et l’interface en ligne de\n"
+#~ "commande. Elle vaut actuellement ~a.\n"
+#~ "\n"
+#~ "Exemple utilisé pour webid-oidc-demo.planete-kraus.eu (sauf que le\n"
+#~ "service est géré par shepherd en réalité, et les URI sont en\n"
+#~ "anglais) :\n"
+#~ "\n"
+#~ "    export LANG=fr_FR.UTF-8\n"
+#~ "    webid-oidc-client-service \\\n"
+#~ "      --id-client 'https://webid-oidc-demo.planete-kraus.eu/application-"
+#~ "exemple#id' \\\n"
+#~ "      --uri-redirection 'https://webid-oidc-demo.planete-kraus.eu/"
+#~ "autorisé' \\\n"
+#~ "      --nom-client 'Exemple d’application Solid' \\\n"
+#~ "      --uri-client 'https://webid-oidc.planete-kraus.eu/Running-a-client."
+#~ "html#Running-a-client' \\\n"
+#~ "      --port $PORT\n"
+#~ "\n"
+#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à "
+#~ "~a.\n"
+
+#~ msgid "You need to set the client ID as an URI.\n"
+#~ msgstr "Vous devez définir l’identifiant du client comme URI.\n"
+
+#~ msgid "You need to set the redirect URI.\n"
+#~ msgstr "Vous devez définir l'URI de redirection.\n"
+
+#~ msgid "The client URI should be an URI.\n"
+#~ msgstr "L’URI du client doit être un URI.\n"
+
+#, scheme-format
+#~ msgid "~a.\t~a, certified by ~a;\n"
+#~ msgstr "~a.\t~a, certifié par ~a ;\n"
+
+#, scheme-format
+#~ msgid "~a – ~a\n"
+#~ msgstr "~a – ~a\n"
+
+#, scheme-format
+#~ msgid "I’m expecting a number between ~a and ~a.\n"
+#~ msgstr "J’attends un nombre entre ~a et ~a.\n"
+
+#~ msgid "Please enter an URI to GET: "
+#~ msgstr "Veuillez entrer un URI à requêter avec GET :"
+
+#, scheme-format
+#~ msgid "Sending a request: ~s\n"
+#~ msgstr "Envoi d’une requête : ~s\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "Usage: ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Demonstrate a webid-oidc application.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "\n"
+#~ "Environment variables:\n"
+#~ "\n"
+#~ "  LANG: set the locale. Currently ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME: where the seed for the key generator is\n"
+#~ "stored. Currently ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME: where the login credentials are stored. Currently ~a.\n"
+#~ "\n"
+#~ "  HOME: to compute a default value for XDG_CACHE_HOME and\n"
+#~ "XDG_DATA_HOME, if missing. Currently ~a.\n"
+#~ "\n"
+#~ "If you find a bug, send a report to ~a.\n"
+#~ msgstr ""
+#~ "Utilisation : ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Fait démonstration d’une application webid-oidc.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "\n"
+#~ "Variables d’environnement :\n"
+#~ "\n"
+#~ "  LANG : définit la locale. Actuellement ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME : où stocker la graine aléatoire du générateur de\n"
+#~ "clé. Actuellement ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME : où les données d’authentification sont\n"
+#~ "stockées. Actuellement ~a.\n"
+#~ "\n"
+#~ "  HOME : pour calculer une valeur par défaut de XDG_CACHE_HOME et\n"
+#~ "XDG_DATA_HOME, si manquant. Actuellement ~a.\n"
+#~ "\n"
+#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à\n"
+#~ "~a.\n"
+
+#~ msgid "First, let’s log in. Here are your options:\n"
+#~ msgstr "En premier lieu, authentifions-nous. Voici vos options :\n"
+
+#~ msgid "0.\tLog in with a different identity.\n"
+#~ msgstr "0.\tS’authentifier avec une identité différente.\n"
+
+#~ msgid "Please indicate your choice number: "
+#~ msgstr "Veuillez indiquer votre choix de numéro : "
+
+#~ msgid "Please enter your webid, or identity server: "
+#~ msgstr "Veuillez entrer votre webid, ou serveur d’identité : "
+
+#~ msgid "There are different possible identity providers for your webid:\n"
+#~ msgstr ""
+#~ "Il y a différents fournisseurs d’identité possibles pour votre\n"
+#~ "webid :\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "Please visit the following URI with a web browser:\n"
+#~ "~a\n"
+#~ msgstr ""
+#~ "Veuillez accéder à cet URI avec un navigateur web :\n"
+#~ "~a\n"
+
+#~ msgid "Please paste your authorization code: "
+#~ msgstr "Veuillez coller votre code d’autorisation : "
+
+#, scheme-format
+#~ msgid ""
+#~ "Log in success. Keep this identity token for yourself:\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "Now, you can do authenticated request by presenting the following access "
+#~ "token:\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "and signing DPoP proofs with the following key:\n"
+#~ "\n"
+#~ "~a\n"
+#~ msgstr ""
+#~ "Authentification réussie. Gardez ce jeton d’identité pour vous :\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "À partir de maintenant, vous pouvez effectuer des requêtes\n"
+#~ "authentifiées en présentant le jeton d’accès suivant :\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "et en signant les preuves DPoP avec la clé suivante :\n"
+#~ "\n"
+#~ "~a\n"
+
+#, scheme-format
+#~ msgid "There was an error: ~a\n"
+#~ msgstr "Il y a eu une erreur : ~a\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "The application is not a Solid application because the client ID, "
+#~ "<strong>~a</strong>, is not a valid URI."
+#~ msgstr ""
+#~ "L'application n'est pas une application Solid parce que l'ID de client, "
+#~ "<strong>~a</strong>, n'est pas une URI valide."
+
+#, scheme-format
+#~ msgid ""
+#~ "The application that you tried to log in with states that the "
+#~ "authorization should be sent to <a href=~s>~a</href>, which is not "
+#~ "controlled by the real <a href=~s>~a</href> application. To be clear, the "
+#~ "page you just visited is either badly configured, or it is trying to "
+#~ "impersonate <a href=~s>~a</href>."
+#~ msgstr ""
+#~ "L'application à travers laquelle vous avez essayé de vous identifier "
+#~ "indique que l'autorisation doit être délivrée à l'adresse <a href=~s>~a</"
+#~ "href>, qui n'est pas contrôlée par la vraie application <a href=~s>~a</"
+#~ "href>. Pour être clair, la page que vous venez de visiter est soit mal "
+#~ "configurée, soit essaye d'usurper l'identité de <a href=~s>~a</href>."
+
+#, scheme-format
+#~ msgid ""
+#~ "~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Run a reverse proxy, taking requests with webid-oidc authentication\n"
+#~ "and passing them to the outbound URI with an additional header\n"
+#~ "containing the webid of the agent.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --help:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --version:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -p PORT, --port=8080:\n"
+#~ "      set the port to bind.\n"
+#~ "  -i URI, --inbound-uri=URI: \n"
+#~ "      set the public URI of the reverse proxy.\n"
+#~ "  -o URI, --outbound-uri=URI:\n"
+#~ "      pass the requests to the server running at URI.\n"
+#~ "  -H HEADER, --header=HEADER:\n"
+#~ "      pass request with optional HEADER set to the webid, XXX-Agent by "
+#~ "default.\n"
+#~ msgstr ""
+#~ "~a [OPTIONS]…\n"
+#~ "\n"
+#~ "Exécute un proxy inversé, prenant des requêtes avec authentification\n"
+#~ "webid-oidc et les passant à une URI sortante avec un en-tête\n"
+#~ "additionel contenant le webid de l’agent.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --aide :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --version :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -p PORT, --port=8080 :\n"
+#~ "      définit le port à lier.\n"
+#~ "  -i URI, --uri-entrant=URI :\n"
+#~ "      définit l’URI public du proxy inversé.\n"
+#~ "  -o URI, --uri-sortant=URI :\n"
+#~ "      passe les requêtes au serveur disponible à URI.\n"
+#~ "  -H EN-TÊTE, --en-tête=EN-TÊTE :\n"
+#~ "      passe les requêtes avec l’EN-TÊTE optionnel ayant pour valeur le\n"
+#~ "      webid, XXX-Agent par défaut.\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Run the Solid identity provider for a specific user.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --help:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --version:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "  -i URI, --issuer=\"https://public.server\":\n"
+#~ "      set the public server host name.\n"
+#~ "  -k FILE, --key-file=\"/path/to/key.jwk\":\n"
+#~ "      set the file name of the key file. If it does not exist, a new\n"
+#~ "      key is generated.\n"
+#~ "  -s SUBJECT, --subject=\"https://public.server/profile/card#me\":\n"
+#~ "      set the identity of the subject.\n"
+#~ "  -w PASSWORD, --password=\"p4ssw0rd\":\n"
+#~ "      set the password to recognize the user.\n"
+#~ "  -j URI, --jwks-uri=\"https://public.server/cert\":\n"
+#~ "      set the URI to query the key of the server.\n"
+#~ "  -a URI, --authorization-endpoint-uri=\"https://public.server/authorize"
+#~ "\":\n"
+#~ "      set the authorization endpoint of the issuer.\n"
+#~ "  -t URI, --token-endpoint-uri=\"https://public.server/token\":\n"
+#~ "      set the token endpoint of the issuer.\n"
+#~ "  -p PORT, --port=8080:\n"
+#~ "      set the port to bind.\n"
+#~ msgstr ""
+#~ "~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Exécute l'émetteur d'identité Solid pour un utilisateur spécifique.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --aide :\n"
+#~ "      affiche ce message d'aide et quitte.\n"
+#~ "  -v, --version :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "  -i URI, --émetteur=\"https://serveur.public\" :\n"
+#~ "      définit le nom d'hôte du serveur public.\n"
+#~ "  -k FICHIER, --fichier-clé=\"/chemin/vers/clé.jwk\" :\n"
+#~ "      définit le nom du fichier de clé. Si ce fichier n'existe pas,\n"
+#~ "      une nouvelle paire de clés est générée.\n"
+#~ "  -s SUJET, --sujet=\"https://serveur.public/profil/carte#moi\" :\n"
+#~ "      définit l'identité du sujet.\n"
+#~ "  -w MOT_DE_PASSE, --mot-de-passe=\"m0t2p4ss3\" :\n"
+#~ "      définit le mot de passe pour reconnaître l'utilisateur.\n"
+#~ "  -j URI, --uri-jwks=\"https://serveur.public/cert\" :\n"
+#~ "      définit l'URI pour télécharger la clé publique.\n"
+#~ "  -a URI, --uri-terminal-autorisation=\"https://serveur.public/autorise"
+#~ "\" :\n"
+#~ "      définit l'URI pour le terminal d'autorisation.\n"
+#~ "  -t URI, --uri-terminal-jeton=\"https://serveur.public/jeton\" :\n"
+#~ "      définit l'URI pour le terminal de jeton.\n"
+#~ "  -p PORT, --port=8080 ;\n"
+#~ "      définit le port à écouter.\n"
+
+#, c-format
+#~ msgid "Warning: cannot create a seed file in $XDG_CACHE_HOME.\n"
+#~ msgstr ""
+#~ "Attention : impossible de créer le fichier graine dans $XDG_CACHE_HOME.\n"
+
+#, c-format
+#~ msgid "Could not set up the mutex root.\n"
+#~ msgstr "Impossible de mettre en place la racine mutex.\n"
diff --git a/po/webid-oidc.pot b/po/webid-oidc.pot
new file mode 100644
index 0000000..c3af83a
--- /dev/null
+++ b/po/webid-oidc.pot
@@ -0,0 +1,22 @@
+# SOME DESCRIPTIVE TITLE.
+# Copyright (C) YEAR Vivien Kraus
+# This file is distributed under the same license as the webid-oidc package.
+# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
+#
+#, fuzzy
+msgid ""
+msgstr ""
+"Project-Id-Version: webid-oidc SNAPSHOT\n"
+"Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
+"POT-Creation-Date: 2021-06-05 16:08+0200\n"
+"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
+"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
+"Language-Team: LANGUAGE <LL@li.org>\n"
+"Language: \n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=CHARSET\n"
+"Content-Transfer-Encoding: 8bit\n"
+
+#: src/libwebidoidc.c:6
+msgid "This is the main function."
+msgstr ""
diff --git a/src/Makefile.am b/src/Makefile.am
new file mode 100644
index 0000000..832391d
--- /dev/null
+++ b/src/Makefile.am
@@ -0,0 +1,10 @@
+lib_LTLIBRARIES += %reldir%/libwebidoidc.la
+
+AM_CPPFLAGS += -I %reldir% -I $(srcdir)/%reldir%
+
+%canon_reldir%_libwebidoidc_la_SOURCES = %reldir%/gettext.h %reldir%/libwebidoidc.c
+%canon_reldir%_libwebidoidc_la_LIBADD = $(noinst_LTLIBRARIES) $(GUILE_LIBS) $(NETTLE_LIBS)
+
+SUFFIXES += .c .x
+.c.x:
+	$(AM_V_GEN) $(SNARF) -o $@ $< $(DEFS) $(INCLUDES) $(CPPFLAGS) $(CFLAGS) $(AM_CPPFLAGS) $(AM_CFLAGS) $(GUILE_CFLAGS) $(NETTLE_CFLAGS)
diff --git a/src/gettext.h b/src/gettext.h
new file mode 100644
index 0000000..1382000
--- /dev/null
+++ b/src/gettext.h
@@ -0,0 +1,290 @@
+/* Convenience header for conditional use of GNU <libintl.h>.
+   Copyright (C) 1995-1998, 2000-2002, 2004-2006, 2009-2018 Free Software
+   Foundation, Inc.
+
+   This program is free software: you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see <https://www.gnu.org/licenses/>.  */
+
+#ifndef _LIBGETTEXT_H
+#define _LIBGETTEXT_H 1
+
+/* NLS can be disabled through the configure --disable-nls option
+   or through "#define ENABLE NLS 0" before including this file.  */
+#if defined ENABLE_NLS && ENABLE_NLS
+
+/* Get declarations of GNU message catalog functions.  */
+#include <libintl.h>
+
+/* You can set the DEFAULT_TEXT_DOMAIN macro to specify the domain used by
+   the gettext() and ngettext() macros.  This is an alternative to calling
+   textdomain(), and is useful for libraries.  */
+#ifdef DEFAULT_TEXT_DOMAIN
+#undef gettext
+#define gettext(Msgid) \
+     dgettext (DEFAULT_TEXT_DOMAIN, Msgid)
+#undef ngettext
+#define ngettext(Msgid1, Msgid2, N) \
+     dngettext (DEFAULT_TEXT_DOMAIN, Msgid1, Msgid2, N)
+#endif
+
+#else
+
+/* Solaris /usr/include/locale.h includes /usr/include/libintl.h, which
+   chokes if dcgettext is defined as a macro.  So include it now, to make
+   later inclusions of <locale.h> a NOP.  We don't include <libintl.h>
+   as well because people using "gettext.h" will not include <libintl.h>,
+   and also including <libintl.h> would fail on SunOS 4, whereas <locale.h>
+   is OK.  */
+#if defined(__sun)
+#include <locale.h>
+#endif
+
+/* Many header files from the libstdc++ coming with g++ 3.3 or newer include
+   <libintl.h>, which chokes if dcgettext is defined as a macro.  So include
+   it now, to make later inclusions of <libintl.h> a NOP.  */
+#if defined(__cplusplus) && defined(__GNUG__) && (__GNUC__ >= 3)
+#include <cstdlib>
+#if (__GLIBC__ >= 2 && !defined __UCLIBC__) || _GLIBCXX_HAVE_LIBINTL_H
+#include <libintl.h>
+#endif
+#endif
+
+/* Disabled NLS.
+   The casts to 'const char *' serve the purpose of producing warnings
+   for invalid uses of the value returned from these functions.
+   On pre-ANSI systems without 'const', the config.h file is supposed to
+   contain "#define const".  */
+#undef gettext
+#define gettext(Msgid) ((const char *) (Msgid))
+#undef dgettext
+#define dgettext(Domainname, Msgid) ((void) (Domainname), gettext (Msgid))
+#undef dcgettext
+#define dcgettext(Domainname, Msgid, Category) \
+    ((void) (Category), dgettext (Domainname, Msgid))
+#undef ngettext
+#define ngettext(Msgid1, Msgid2, N) \
+    ((N) == 1 \
+     ? ((void) (Msgid2), (const char *) (Msgid1)) \
+     : ((void) (Msgid1), (const char *) (Msgid2)))
+#undef dngettext
+#define dngettext(Domainname, Msgid1, Msgid2, N) \
+    ((void) (Domainname), ngettext (Msgid1, Msgid2, N))
+#undef dcngettext
+#define dcngettext(Domainname, Msgid1, Msgid2, N, Category) \
+    ((void) (Category), dngettext (Domainname, Msgid1, Msgid2, N))
+#undef textdomain
+#define textdomain(Domainname) ((const char *) (Domainname))
+#undef bindtextdomain
+#define bindtextdomain(Domainname, Dirname) \
+    ((void) (Domainname), (const char *) (Dirname))
+#undef bind_textdomain_codeset
+#define bind_textdomain_codeset(Domainname, Codeset) \
+    ((void) (Domainname), (const char *) (Codeset))
+
+#endif
+
+/* Prefer gnulib's setlocale override over libintl's setlocale override.  */
+#ifdef GNULIB_defined_setlocale
+#undef setlocale
+#define setlocale rpl_setlocale
+#endif
+
+/* A pseudo function call that serves as a marker for the automated
+   extraction of messages, but does not call gettext().  The run-time
+   translation is done at a different place in the code.
+   The argument, String, should be a literal string.  Concatenated strings
+   and other string expressions won't work.
+   The macro's expansion is not parenthesized, so that it is suitable as
+   initializer for static 'char[]' or 'const char[]' variables.  */
+#define gettext_noop(String) String
+
+/* The separator between msgctxt and msgid in a .mo file.  */
+#define GETTEXT_CONTEXT_GLUE "\004"
+
+/* Pseudo function calls, taking a MSGCTXT and a MSGID instead of just a
+   MSGID.  MSGCTXT and MSGID must be string literals.  MSGCTXT should be
+   short and rarely need to change.
+   The letter 'p' stands for 'particular' or 'special'.  */
+#ifdef DEFAULT_TEXT_DOMAIN
+#define pgettext(Msgctxt, Msgid) \
+   pgettext_aux (DEFAULT_TEXT_DOMAIN, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, LC_MESSAGES)
+#else
+#define pgettext(Msgctxt, Msgid) \
+   pgettext_aux (NULL, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, LC_MESSAGES)
+#endif
+#define dpgettext(Domainname, Msgctxt, Msgid) \
+  pgettext_aux (Domainname, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, LC_MESSAGES)
+#define dcpgettext(Domainname, Msgctxt, Msgid, Category) \
+  pgettext_aux (Domainname, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, Category)
+#ifdef DEFAULT_TEXT_DOMAIN
+#define npgettext(Msgctxt, Msgid, MsgidPlural, N) \
+   npgettext_aux (DEFAULT_TEXT_DOMAIN, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, MsgidPlural, N, LC_MESSAGES)
+#else
+#define npgettext(Msgctxt, Msgid, MsgidPlural, N) \
+   npgettext_aux (NULL, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, MsgidPlural, N, LC_MESSAGES)
+#endif
+#define dnpgettext(Domainname, Msgctxt, Msgid, MsgidPlural, N) \
+  npgettext_aux (Domainname, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, MsgidPlural, N, LC_MESSAGES)
+#define dcnpgettext(Domainname, Msgctxt, Msgid, MsgidPlural, N, Category) \
+  npgettext_aux (Domainname, Msgctxt GETTEXT_CONTEXT_GLUE Msgid, Msgid, MsgidPlural, N, Category)
+
+#ifdef __GNUC__
+__inline
+#else
+#ifdef __cplusplus
+inline
+#endif
+#endif
+static const char *
+pgettext_aux (const char *domain,
+	      const char *msg_ctxt_id, const char *msgid, int category)
+{
+  const char *translation = dcgettext (domain, msg_ctxt_id, category);
+  if (translation == msg_ctxt_id)
+    return msgid;
+  else
+    return translation;
+}
+
+#ifdef __GNUC__
+__inline
+#else
+#ifdef __cplusplus
+inline
+#endif
+#endif
+static const char *
+npgettext_aux (const char *domain,
+	       const char *msg_ctxt_id, const char *msgid,
+	       const char *msgid_plural, unsigned long int n, int category)
+{
+  const char *translation =
+    dcngettext (domain, msg_ctxt_id, msgid_plural, n, category);
+  if (translation == msg_ctxt_id || translation == msgid_plural)
+    return (n == 1 ? msgid : msgid_plural);
+  else
+    return translation;
+}
+
+/* The same thing extended for non-constant arguments.  Here MSGCTXT and MSGID
+   can be arbitrary expressions.  But for string literals these macros are
+   less efficient than those above.  */
+
+#include <string.h>
+
+#if (((__GNUC__ >= 3 || __GNUG__ >= 2) && !defined __STRICT_ANSI__) \
+     /* || (__STDC_VERSION__ == 199901L && !defined __HP_cc)
+        || (__STDC_VERSION__ >= 201112L && !defined __STDC_NO_VLA__) */ )
+#define _LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS 1
+#else
+#define _LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS 0
+#endif
+
+#if !_LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS
+#include <stdlib.h>
+#endif
+
+#define pgettext_expr(Msgctxt, Msgid) \
+  dcpgettext_expr (NULL, Msgctxt, Msgid, LC_MESSAGES)
+#define dpgettext_expr(Domainname, Msgctxt, Msgid) \
+  dcpgettext_expr (Domainname, Msgctxt, Msgid, LC_MESSAGES)
+
+#ifdef __GNUC__
+__inline
+#else
+#ifdef __cplusplus
+inline
+#endif
+#endif
+static const char *
+dcpgettext_expr (const char *domain,
+		 const char *msgctxt, const char *msgid, int category)
+{
+  size_t msgctxt_len = strlen (msgctxt) + 1;
+  size_t msgid_len = strlen (msgid) + 1;
+  const char *translation;
+#if _LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS
+  char msg_ctxt_id[msgctxt_len + msgid_len];
+#else
+  char buf[1024];
+  char *msg_ctxt_id =
+    (msgctxt_len + msgid_len <= sizeof (buf)
+     ? buf : (char *) malloc (msgctxt_len + msgid_len));
+  if (msg_ctxt_id != NULL)
+#endif
+    {
+      int found_translation;
+      memcpy (msg_ctxt_id, msgctxt, msgctxt_len - 1);
+      msg_ctxt_id[msgctxt_len - 1] = '\004';
+      memcpy (msg_ctxt_id + msgctxt_len, msgid, msgid_len);
+      translation = dcgettext (domain, msg_ctxt_id, category);
+      found_translation = (translation != msg_ctxt_id);
+#if !_LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS
+      if (msg_ctxt_id != buf)
+	free (msg_ctxt_id);
+#endif
+      if (found_translation)
+	return translation;
+    }
+  return msgid;
+}
+
+#define npgettext_expr(Msgctxt, Msgid, MsgidPlural, N) \
+  dcnpgettext_expr (NULL, Msgctxt, Msgid, MsgidPlural, N, LC_MESSAGES)
+#define dnpgettext_expr(Domainname, Msgctxt, Msgid, MsgidPlural, N) \
+  dcnpgettext_expr (Domainname, Msgctxt, Msgid, MsgidPlural, N, LC_MESSAGES)
+
+#ifdef __GNUC__
+__inline
+#else
+#ifdef __cplusplus
+inline
+#endif
+#endif
+static const char *
+dcnpgettext_expr (const char *domain,
+		  const char *msgctxt, const char *msgid,
+		  const char *msgid_plural, unsigned long int n, int category)
+{
+  size_t msgctxt_len = strlen (msgctxt) + 1;
+  size_t msgid_len = strlen (msgid) + 1;
+  const char *translation;
+#if _LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS
+  char msg_ctxt_id[msgctxt_len + msgid_len];
+#else
+  char buf[1024];
+  char *msg_ctxt_id =
+    (msgctxt_len + msgid_len <= sizeof (buf)
+     ? buf : (char *) malloc (msgctxt_len + msgid_len));
+  if (msg_ctxt_id != NULL)
+#endif
+    {
+      int found_translation;
+      memcpy (msg_ctxt_id, msgctxt, msgctxt_len - 1);
+      msg_ctxt_id[msgctxt_len - 1] = '\004';
+      memcpy (msg_ctxt_id + msgctxt_len, msgid, msgid_len);
+      translation =
+	dcngettext (domain, msg_ctxt_id, msgid_plural, n, category);
+      found_translation = !(translation == msg_ctxt_id
+			    || translation == msgid_plural);
+#if !_LIBGETTEXT_HAVE_VARIABLE_SIZE_ARRAYS
+      if (msg_ctxt_id != buf)
+	free (msg_ctxt_id);
+#endif
+      if (found_translation)
+	return translation;
+    }
+  return (n == 1 ? msgid : msgid_plural);
+}
+
+#endif /* _LIBGETTEXT_H */
diff --git a/src/libwebidoidc.c b/src/libwebidoidc.c
new file mode 100644
index 0000000..213cbcd
--- /dev/null
+++ b/src/libwebidoidc.c
@@ -0,0 +1,7 @@
+#define N_(s)
+
+void
+init_webidoidc (void)
+{
+  N_("This is the main function.");
+}
diff --git a/src/scm/webid-oidc/ChangeLog b/src/scm/webid-oidc/ChangeLog
new file mode 100644
index 0000000..1223e69
--- /dev/null
+++ b/src/scm/webid-oidc/ChangeLog
@@ -0,0 +1,124 @@
+2021-04-30  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* reverse-proxy.scm (make-reverse-proxy): Make the auth header
+	lowercase, so that all capitalizations of that header in the
+	incoming requests are dropped.
+
+2021-04-26  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* identity-provider.scm (make-identity-provider): while saving the
+	key to file, close the port so that it gets flushed.
+
+2021-04-22  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* oidc-configuration.scm (get-oidc-configuration): accept hosts as
+	URIs (discard everything but the host).
+
+	* token-endpoint.scm (make-token-endpoint): use (webid-oidc
+	oidc-id-token) to issue the ID token.
+
+	* oidc-id-token.scm (issue-id-token): fix function.
+	(id-token-payload?): now the std uses a "webid" claim for the
+	webid of the user, fix that.
+
+	* token-endpoint.scm (make-token-endpoint): also return the ID
+	token.
+
+	* oidc-id-token.scm (id-token-decode): this function still used a
+	cache and current-time arguments.
+
+2021-03-30  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* hello-world.scm (webid-oidc): remove the hello world.
+
+	* resource.scm: don’t provide a Linked Data Platform
+	implementation here.
+
+	* resource-server.scm (make-authenticator): The server’s public
+	URI is now exported, so you don’t rely on the Host header anymore.
+
+	* dpop-proof.scm (uris-compatible): Check decoded paths, so if
+	some characters are encoded they are equal to their decoded
+	counterparts.
+
+2021-03-13  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* resource.scm (default-root-acl): The root authorization
+	statements need not be inherited, they are by default.
+
+2021-02-27  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* hello-world.scm (main): Use an explicit caching and loggin
+	http-get.
+	(main): Add a content-type to the “unauthorized” response.
+
+	* resource-server.scm (make-authenticator): http-get and
+	current-time are now authenticator parameters, not request
+	parameters.
+
+	* provider-confirmation.scm (get-provider-confirmations): Don't
+	try to cache.
+
+	* identity-provider.scm (make-identity-provider): The identity
+	provider only uses the cache through the http-get argument.
+	(main): Use a caching http-get.
+
+	* token-endpoint.scm (make-token-endpoint): make the current-time
+	argument an endpoint parameter, not a handler parameter.
+
+	* authorization-endpoint.scm (make-authorization-endpoint): No
+	need for an explicit cache, since we have http-get.
+	(make-authorization-endpoint): Pass current-time as an endpoint
+	parameter, not a handler parameter, because it should be
+	synchronized with that of the internal http-get with cache.
+	(make-authorization-endpoint): get-client-manifest is simpler.
+
+	* client-manifest.scm (get-client-manifest): Same simplification
+	as for get-jwks.
+
+	* oidc-configuration.scm (get-oidc-configuration): Same
+	siplifications as for get-jwks.
+
+	* jwk.scm (get-jwks): Simplification, the cache is managed through
+	the http-get argument.
+
+	* Makefile.am (dist_webidoidcmod_DATA): Use the new guile web-client with cache
+
+2021-02-17  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* authorization-page.scm (with-locale): Avoid deadlock when
+	setlocale throws.
+
+2021-02-07  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* authorization-endpoint.scm (make-authorization-endpoint): use
+	the new modules.
+
+	* Makefile.am (webidoidcgo_DATA): compile the new modules to
+	generate the authorization pages.
+
+	* Makefile.am (dist_webidoidcmod_DATA): distribute the new modules
+	to generate the authorization pages.
+
+	* authorization-page.scm: wrapper of the unsafe module in a
+	thread-safe fashion.
+
+	* authorization-page-unsafe.scm: new module.
+
+	* dpop-proof.scm (uris-compatible): Also check userinfo for
+	equality.
+
+2020-12-05  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* dpop-proof.scm (dpop-proof-decode): Accept a predicate to decode
+	a dpop proof, so that we can use it for the token endpoint.
+
+2020-12-02  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* jws.scm (jws-decode): In order to verify OIDC ID tokens, the key
+	lookup function now takes a full JWS and not only the header.
+
+2020-11-29  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* jws.scm (jws-decode): The JWS can be verified using a JWKS or multiple keys.
+
diff --git a/tests/ChangeLog b/tests/ChangeLog
new file mode 100644
index 0000000..cda34c2
--- /dev/null
+++ b/tests/ChangeLog
@@ -0,0 +1,33 @@
+2021-02-27  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* resource-server.scm ("resource-server"): Fix this test.
+
+	* provider-confirmation.scm ("provider-confirmation"): Fix test.
+
+	* token-endpoint-issue.scm ("token-endpoint-issue"): Fix test.
+
+	* token-endpoint-refresh.scm ("token-endpoint-refresh"): Fix test.
+
+	* authorization-endpoint-submit-form.scm
+	("authorization-endpoint-submit-form"): Fix test.
+
+	* authorization-endpoint-no-args.scm
+	("authorization-endpoint-get-form"): Fix test.
+
+	* authorization-endpoint-get-form.scm: fix test.
+
+	* client-manifest-public.scm ("client-manifest-public"): Use (web
+	client with-cache).
+
+	* client-manifest-fraudulent.scm (webid-oidc): Use (web client with-cache).
+
+	* jwks-get.scm ("jwks-get"): Key sets are not stripped from unused
+	fields anymore, so remove last test case.
+
+	* Makefile.am (TESTS): Remove the "cache" test, because the cache
+	is a separate package.
+
+2021-02-07  Vivien Kraus  <vivien@planete-kraus.eu>
+
+	* authorization-endpoint-get-form.scm ("authorization-endpoint-get-form"): fix formatting
+
diff --git a/update-channel.scm b/update-channel.scm
new file mode 100644
index 0000000..bc19332
--- /dev/null
+++ b/update-channel.scm
@@ -0,0 +1,83 @@
+(use-modules (gnu packages bash))
+(use-modules (gnu packages base))
+(use-modules (gnu packages tex))
+(use-modules (gnu packages code))
+(use-modules (gnu packages version-control))
+(use-modules (guix build-system gnu))
+(use-modules (guix packages))
+(use-modules (guix gexp))
+(use-modules (guix modules))
+(use-modules (guix build utils))
+(use-modules (guix store))
+(use-modules (ice-9 textual-ports))
+(use-modules (ice-9 rdelim))
+
+(unsetenv "GIT_DIR")
+
+(let ((tmp-dirname (tmpnam))
+      (git
+       (run-with-store
+        (open-connection)
+        (package-file git "bin/git")))
+      (bash
+       (run-with-store
+        (open-connection)
+        (package-file bash "bin/bash")))
+      (tar
+       (run-with-store
+        (open-connection)
+        (package-file tar "bin/tar"))))
+  (format (current-error-port) "Found the required programs:
+- git:  ~a
+- bash: ~a
+- tar:  ~a
+"
+          git bash tar)
+  (format (current-error-port) "Using temporary directory ~a\n" tmp-dirname)
+  (mkdir tmp-dirname)
+  (mkdir (string-append tmp-dirname "/source"))
+  (invoke git "archive" "master" "-o" (string-append tmp-dirname "/source/source.tar.gz"))
+  (with-directory-excursion
+   (string-append tmp-dirname "/source")
+   (invoke tar "xf" (string-append tmp-dirname "/source/source.tar.gz"))
+   (delete-file (string-append tmp-dirname "/source/source.tar.gz")))
+  (with-directory-excursion
+   tmp-dirname
+   (invoke bash "-c" (format #f "guix hash -r source > hash")))
+  (invoke bash "-c" (format #f "~a describe --tags --always > ~a/version" git tmp-dirname))
+  (invoke bash "-c" (format #f "~a rev-parse master > ~a/commit" git tmp-dirname))
+  (let ((hash (call-with-input-file (string-append tmp-dirname "/hash") read-line))
+        (version (call-with-input-file (string-append tmp-dirname "/version") read-line))
+        (commit (call-with-input-file (string-append tmp-dirname "/commit") read-line))
+        (interned-modules
+         (run-with-store
+          (open-connection)
+          (interned-file (string-append tmp-dirname "/source/guix") "ci-checkout" #:recursive? #t)))
+        (base-repository (getcwd)))
+    (delete-file-recursively tmp-dirname)
+    (invoke git "clone" (format #f "~a/../webid-oidc-channel" base-repository) tmp-dirname)
+    (with-directory-excursion
+     tmp-dirname
+     (invoke git "rm" "-f" "-r" "--ignore-unmatch" ".")
+     (copy-recursively interned-modules "." #:follow-symlinks? #t)
+     (chmod "vkraus/packages/webid-oidc.scm" #o644)
+     (let ((port (open-file "vkraus/packages/webid-oidc.scm" "a")))
+       (write `(define-public webid-oidc
+                 (webid-oidc-release ,version ,commit ,hash))
+              port)
+       (display "\n" port)
+       (write `(define-public webid-oidc-html
+                 (webid-oidc-htmlize webid-oidc))
+              port)
+       (display "\n" port)
+       (write `(define-public webid-oidc:website
+                 (make-website webid-oidc))
+              port)
+       (display "\n" port)
+       (close-port port))
+     (invoke git "add" "-A")
+     (invoke bash "-c" (format #f "~a diff-index --quiet HEAD || ~a commit -m 'Update package'"
+                               git git))
+     (invoke git "push" "origin" "master"))))
+
+#~(system* #$(file-append hello "/bin/hello"))