Use anonymous-http-request from (webid-oidc parameters) everywhere

1 files changed, 279 insertions, 284 deletions

diff --git a/po/disfluid.pot b/po/disfluid.pot
index 6c39980..2a4b334 100644
--- a/po/disfluid.pot
+++ b/po/disfluid.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: disfluid SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-21 22:31+0200\n"
+"POT-Creation-Date: 2021-09-22 14:08+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -122,34 +122,34 @@ msgid ""
 "webid_oidc_random_init first.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:72
+#: src/scm/webid-oidc/access-token.scm:71
 #, scheme-format
 msgid "invalid access token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:74
+#: src/scm/webid-oidc/access-token.scm:73
 msgid "invalid access token"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:116
+#: src/scm/webid-oidc/access-token.scm:115
 #: src/scm/webid-oidc/authorization-code.scm:93
-#: src/scm/webid-oidc/oidc-id-token.scm:99
+#: src/scm/webid-oidc/oidc-id-token.scm:98
 msgid "#:webid should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:121
+#: src/scm/webid-oidc/access-token.scm:120
 msgid "#:client-id should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:126
+#: src/scm/webid-oidc/access-token.scm:125
 msgid "#:cnf/jkt should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:131
+#: src/scm/webid-oidc/access-token.scm:130
 msgid "#:aud should be exactly \"solid\""
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:149
+#: src/scm/webid-oidc/access-token.scm:148
 msgid ""
 "when making an access token either its required fields (#:alg, #:webid, #:"
 "iss, #:aud, #:client-id, #:cnf/jkt, #:iat and #:exp) or (#:jwt-header and #:"
@@ -178,10 +178,10 @@ msgstr ""
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:140
-#: src/scm/webid-oidc/token-endpoint.scm:113
-#: src/scm/webid-oidc/token-endpoint.scm:139
-#: src/scm/webid-oidc/token-endpoint.scm:166
+#: src/scm/webid-oidc/identity-provider.scm:136
+#: src/scm/webid-oidc/token-endpoint.scm:112
+#: src/scm/webid-oidc/token-endpoint.scm:138
+#: src/scm/webid-oidc/token-endpoint.scm:165
 msgid "xml-lang|en"
 msgstr ""
 
@@ -215,8 +215,8 @@ msgid "Allow"
 msgstr ""
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:95
-#: src/scm/webid-oidc/token-endpoint.scm:131
-#: src/scm/webid-oidc/token-endpoint.scm:158
+#: src/scm/webid-oidc/token-endpoint.scm:130
+#: src/scm/webid-oidc/token-endpoint.scm:157
 msgid "reason-phrase|Bad Request"
 msgstr ""
 
@@ -241,7 +241,7 @@ msgid "The application you are trying to authorize behaved unexpectedly."
 msgstr ""
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:126
-#: src/scm/webid-oidc/resource-server.scm:310
+#: src/scm/webid-oidc/resource-server.scm:290
 msgid "reason-phrase|Found"
 msgstr ""
 
@@ -281,11 +281,11 @@ msgstr ""
 msgid "Cache entry for ~a varies.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/catalog.scm:167
+#: src/scm/webid-oidc/catalog.scm:166
 msgid "invalid relative URI"
 msgstr ""
 
-#: src/scm/webid-oidc/catalog.scm:246
+#: src/scm/webid-oidc/catalog.scm:245
 #, scheme-format
 msgid "Unsupported delegate catalog URI scheme: ~s\n"
 msgstr ""
@@ -345,123 +345,123 @@ msgstr ""
 msgid "cannot serve the public manifest"
 msgstr ""
 
-#: src/scm/webid-oidc/client-manifest.scm:242
+#: src/scm/webid-oidc/client-manifest.scm:240
 #, scheme-format
 msgid "cannot fetch the client manifest ~s: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client-manifest.scm:245
+#: src/scm/webid-oidc/client-manifest.scm:243
 #, scheme-format
 msgid "cannot fetch the client manifest ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client-manifest.scm:264
+#: src/scm/webid-oidc/client-manifest.scm:262
 #, scheme-format
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:285
+#: src/scm/webid-oidc/client/accounts.scm:273
 msgid "The refresh token has expired."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:292
+#: src/scm/webid-oidc/client/accounts.scm:280
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:301
+#: src/scm/webid-oidc/client/accounts.scm:289
 msgid "The token response did not set the content type."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:309
+#: src/scm/webid-oidc/client/accounts.scm:297
 msgid "The token endpoint did not respond in UTF-8."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:321
+#: src/scm/webid-oidc/client/accounts.scm:309
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:331
+#: src/scm/webid-oidc/client/accounts.scm:319
 msgid "The token response is not valid JSON."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:345
+#: src/scm/webid-oidc/client/accounts.scm:333
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:353
+#: src/scm/webid-oidc/client/accounts.scm:341
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:364
+#: src/scm/webid-oidc/client/accounts.scm:352
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:366
+#: src/scm/webid-oidc/client/accounts.scm:354
 msgid "the ID token signature is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:383
+#: src/scm/webid-oidc/client/accounts.scm:370
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:393
+#: src/scm/webid-oidc/client/accounts.scm:380
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:408
+#: src/scm/webid-oidc/client/accounts.scm:395
 msgid "The issuer is required."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:413
+#: src/scm/webid-oidc/client/accounts.scm:400
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:449
+#: src/scm/webid-oidc/client/accounts.scm:436
 msgid "Cannot check the username and/or password."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:459
+#: src/scm/webid-oidc/client/accounts.scm:446
 msgid "The subject should be a string or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:473
+#: src/scm/webid-oidc/client/accounts.scm:460
 msgid "The issuer should be a string or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:228
+#: src/scm/webid-oidc/client/application.scm:213
 #, scheme-format
 msgid "Add an account on ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:243
+#: src/scm/webid-oidc/client/application.scm:228
 #, scheme-format
 msgid ""
 "You already have an account for ~a issued by ~a and it is currently selected."
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:262
+#: src/scm/webid-oidc/client/application.scm:247
 #, scheme-format
 msgid "You already have an account for ~a issued by ~a."
 msgstr ""
 
-#: src/scm/webid-oidc/client/client.scm:107
+#: src/scm/webid-oidc/client/client.scm:106
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
 msgstr ""
 
-#: src/scm/webid-oidc/client/gui.scm:58
+#: src/scm/webid-oidc/client/gui.scm:57
 msgid "Hello, world!\n"
 msgstr ""
 
-#: src/scm/webid-oidc/client/gui.scm:63
+#: src/scm/webid-oidc/client/gui.scm:62
 msgid "Hello, world!"
 msgstr ""
 
@@ -479,147 +479,147 @@ msgstr ""
 msgid "invalid DPoP proof token"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:189
+#: src/scm/webid-oidc/dpop-proof.scm:195
 msgid "#:typ should be exactly \"dpop+jwt\""
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:194
+#: src/scm/webid-oidc/dpop-proof.scm:200
 msgid "#:jwk should be a public key"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:199
+#: src/scm/webid-oidc/dpop-proof.scm:205
 msgid "#:htm should be a symbol"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:205
+#: src/scm/webid-oidc/dpop-proof.scm:211
 msgid "when present, #:ath should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:226
+#: src/scm/webid-oidc/dpop-proof.scm:232
 msgid ""
 "when making a DPoP proof, either its required fields (#:typ, #:jwk, #:htm "
 "and #:htu) or (#:jwt-header and #:jwt-payload) should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:259
+#: src/scm/webid-oidc/dpop-proof.scm:265
 #, scheme-format
 msgid "the DPoP proof is signed for access through ~s, but it is used with ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:269
+#: src/scm/webid-oidc/dpop-proof.scm:275
 #, scheme-format
 msgid ""
 "the DPoP proof should go along with an access token hashed to ~s, not ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:277 src/scm/webid-oidc/dpop-proof.scm:284
+#: src/scm/webid-oidc/dpop-proof.scm:283 src/scm/webid-oidc/dpop-proof.scm:290
 msgid "the DPoP proof is signed with the wrong key"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:282
+#: src/scm/webid-oidc/dpop-proof.scm:288
 #, scheme-format
 msgid "the DPoP proof is signed with the wrong key: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:293
+#: src/scm/webid-oidc/dpop-proof.scm:299
 msgid "the cnf/check function returned #f"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:96
+#: src/scm/webid-oidc/example-app.scm:95
 #, scheme-format
 msgid "~a (issued by ~a): no interaction required"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:99
+#: src/scm/webid-oidc/example-app.scm:98
 #, scheme-format
 msgid "~a (issued by ~a): offline but accessible"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:102
+#: src/scm/webid-oidc/example-app.scm:101
 #, scheme-format
 msgid "~a (issued by ~a): online"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:105
+#: src/scm/webid-oidc/example-app.scm:104
 #, scheme-format
 msgid "~a (issued by ~a): inaccessible"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:118
+#: src/scm/webid-oidc/example-app.scm:117
 #, scheme-format
 msgid "Your choice ~a does not exist.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:136
+#: src/scm/webid-oidc/example-app.scm:135
 msgid "Your choice is not a valid URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:145
+#: src/scm/webid-oidc/example-app.scm:144
 msgid "This is not a valid HTTP method.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:161
+#: src/scm/webid-oidc/example-app.scm:160
 msgid "This is not a valid value for this header.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:199
+#: src/scm/webid-oidc/example-app.scm:198
 msgid "Nothing to undo.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:211
+#: src/scm/webid-oidc/example-app.scm:210
 msgid "Nothing to redo.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:271
+#: src/scm/webid-oidc/example-app.scm:270
 msgid "Example app command|add-account"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:273
+#: src/scm/webid-oidc/example-app.scm:272
 msgid "Example app command|choose-account"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:275
+#: src/scm/webid-oidc/example-app.scm:274
 msgid "Example app command|set-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:277
+#: src/scm/webid-oidc/example-app.scm:276
 msgid "Example app command|set-method"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:279
+#: src/scm/webid-oidc/example-app.scm:278
 msgid "Example app command|view-headers"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:281
+#: src/scm/webid-oidc/example-app.scm:280
 msgid "Example app command|clear-headers"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:283
+#: src/scm/webid-oidc/example-app.scm:282
 msgid "Example app command|add-header"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:285
+#: src/scm/webid-oidc/example-app.scm:284
 msgid "Example app command|ok"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:287
+#: src/scm/webid-oidc/example-app.scm:286
 msgid "Example app command|undo"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:289
+#: src/scm/webid-oidc/example-app.scm:288
 msgid "Example app command|redo"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:299
+#: src/scm/webid-oidc/example-app.scm:298
 #, scheme-format
 msgid "To log in on ~a, please visit: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:302
+#: src/scm/webid-oidc/example-app.scm:301
 msgid "Then, paste the authorization code you get:\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:320
+#: src/scm/webid-oidc/example-app.scm:307
 #, scheme-format
 msgid ""
 "Account: ~a\n"
@@ -639,87 +639,87 @@ msgid ""
 "\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:339
+#: src/scm/webid-oidc/example-app.scm:326
 msgid "Account:|unset"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:343
+#: src/scm/webid-oidc/example-app.scm:330
 msgid "URI:|unset"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:347
+#: src/scm/webid-oidc/example-app.scm:334
 msgid "Method:|unset"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:350
+#: src/scm/webid-oidc/example-app.scm:337
 msgid "Headers:|none"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:354
+#: src/scm/webid-oidc/example-app.scm:341
 msgid "list separator|, "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:364
+#: src/scm/webid-oidc/example-app.scm:351
 #, scheme-format
 msgid "You can undo your last command with \"~a\".\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:366
+#: src/scm/webid-oidc/example-app.scm:353
 #, scheme-format
 msgid "You can re-apply your last undone command with \"~a\".\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:367
+#: src/scm/webid-oidc/example-app.scm:354
 msgid "Readline prompt|Command: "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:374
+#: src/scm/webid-oidc/example-app.scm:361
 #, scheme-format
 msgid "An error happened: ~a.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:386
+#: src/scm/webid-oidc/example-app.scm:373
 msgid "Please enter your identity provider: "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:392
+#: src/scm/webid-oidc/example-app.scm:379
 msgid ""
 "You don’t have other accounts available. Please add one with \"add-account"
 "\".\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:398
+#: src/scm/webid-oidc/example-app.scm:385
 #, scheme-format
 msgid "- ~a: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:406
+#: src/scm/webid-oidc/example-app.scm:393
 #, scheme-format
 msgid "[1-~a] "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:414
+#: src/scm/webid-oidc/example-app.scm:401
 msgid "Visit this URI: "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:420
+#: src/scm/webid-oidc/example-app.scm:407
 msgid "Use this HTTP method [GET]: "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:436
+#: src/scm/webid-oidc/example-app.scm:423
 msgid "Which header? "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:439
+#: src/scm/webid-oidc/example-app.scm:426
 #, scheme-format
 msgid "Which header value for ~a? "
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:462
+#: src/scm/webid-oidc/example-app.scm:449
 msgid "Please define an account and the URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:469
+#: src/scm/webid-oidc/example-app.scm:456
 msgid "I don’t know that command.\n"
 msgstr ""
 
@@ -761,15 +761,15 @@ msgstr ""
 msgid "<p>The client is compatible with Solid.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:64 src/scm/webid-oidc/program.scm:226
+#: src/scm/webid-oidc/hello-world.scm:64 src/scm/webid-oidc/program.scm:230
 msgid "command-line|version"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:66 src/scm/webid-oidc/program.scm:230
+#: src/scm/webid-oidc/hello-world.scm:66 src/scm/webid-oidc/program.scm:234
 msgid "command-line|complete-corresponding-source"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:68 src/scm/webid-oidc/program.scm:232
+#: src/scm/webid-oidc/hello-world.scm:68 src/scm/webid-oidc/program.scm:236
 msgid "command-line|help"
 msgstr ""
 
@@ -777,11 +777,11 @@ msgstr ""
 msgid "command-line|port"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:72 src/scm/webid-oidc/program.scm:264
+#: src/scm/webid-oidc/hello-world.scm:72 src/scm/webid-oidc/program.scm:268
 msgid "command-line|log-file"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:74 src/scm/webid-oidc/program.scm:266
+#: src/scm/webid-oidc/hello-world.scm:74 src/scm/webid-oidc/program.scm:270
 msgid "command-line|error-file"
 msgstr ""
 
@@ -819,7 +819,7 @@ msgstr ""
 msgid "~a version ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:128 src/scm/webid-oidc/program.scm:628
+#: src/scm/webid-oidc/hello-world.scm:128 src/scm/webid-oidc/program.scm:632
 msgid ""
 "You are legally required to link to the complete corresponding source code.\n"
 msgstr ""
@@ -829,7 +829,7 @@ msgid "The port should be a number between 0 and 65535.\n"
 msgstr ""
 
 #: src/scm/webid-oidc/hello-world.scm:159
-#: src/scm/webid-oidc/resource-server.scm:331
+#: src/scm/webid-oidc/resource-server.scm:311
 msgid "reason-phrase|Unauthorized"
 msgstr ""
 
@@ -842,7 +842,7 @@ msgid "<p>This page requires authentication with Solid.</p>"
 msgstr ""
 
 #: src/scm/webid-oidc/hello-world.scm:179
-#: src/scm/webid-oidc/resource-server.scm:339
+#: src/scm/webid-oidc/resource-server.scm:319
 msgid "reason-phrase|Method Not Allowed"
 msgstr ""
 
@@ -854,11 +854,11 @@ msgstr ""
 msgid "<p>You can only use the <emph>GET</emph> method on this resource.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/identity-provider.scm:77
+#: src/scm/webid-oidc/identity-provider.scm:74
 msgid "Warning: generating a new key pair."
 msgstr ""
 
-#: src/scm/webid-oidc/identity-provider.scm:133
+#: src/scm/webid-oidc/identity-provider.scm:129
 msgid "reason-phrase|Not Found"
 msgstr ""
 
@@ -998,265 +998,260 @@ msgstr ""
 msgid "an unexpected error happened while verifying a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:482
+#: src/scm/webid-oidc/jws.scm:479
 #, scheme-format
 msgid "I cannot query the identity provider configuration: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:484
+#: src/scm/webid-oidc/jws.scm:481
 msgid "I cannot query the identity provider configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:501
+#: src/scm/webid-oidc/jws.scm:497
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:503
+#: src/scm/webid-oidc/jws.scm:499
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:528
+#: src/scm/webid-oidc/jws.scm:522
 #, scheme-format
 msgid "the token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:537
+#: src/scm/webid-oidc/jws.scm:531
 #, scheme-format
 msgid "the token expired ~a, which is in the past (from ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:560
+#: src/scm/webid-oidc/jws.scm:554
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:562
+#: src/scm/webid-oidc/jws.scm:556
 msgid "cannot decode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:580
+#: src/scm/webid-oidc/jws.scm:574
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:582
+#: src/scm/webid-oidc/jws.scm:576
 msgid "cannot encode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:629
+#: src/scm/webid-oidc/jws.scm:623
 msgid "cannot parse a token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:120
+#: src/scm/webid-oidc/oidc-configuration.scm:118
 msgid "#:jwks-uri should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:125
+#: src/scm/webid-oidc/oidc-configuration.scm:123
 msgid "#:token-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:130
+#: src/scm/webid-oidc/oidc-configuration.scm:128
 msgid "#:authorization-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:135
+#: src/scm/webid-oidc/oidc-configuration.scm:133
 msgid ""
 "#:solid-oidc-supported should be exactly 'https://solidproject.org/TR/solid-"
 "oidc'"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:144
+#: src/scm/webid-oidc/oidc-configuration.scm:142
 msgid "#:server should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:161
+#: src/scm/webid-oidc/oidc-configuration.scm:159
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:163
+#: src/scm/webid-oidc/oidc-configuration.scm:161
 msgid "cannot fetch the OIDC configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:167
+#: src/scm/webid-oidc/oidc-configuration.scm:165
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:172
+#: src/scm/webid-oidc/oidc-configuration.scm:170
 msgid "there is no content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:177
+#: src/scm/webid-oidc/oidc-configuration.scm:175
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:187
+#: src/scm/webid-oidc/oidc-configuration.scm:185
 msgid ""
 "when making an OIDC configuration, either its required #:jwks-uri, #:"
-"authorization-endpoint and #:token-endpoint fields or #:server (and "
-"optionally #:http-request) or #:json-data should be passed"
+"authorization-endpoint and #:token-endpoint fields or #:server or #:json-"
+"data should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:71
+#: src/scm/webid-oidc/oidc-id-token.scm:70
 #, scheme-format
 msgid "invalid OIDC ID token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:73
+#: src/scm/webid-oidc/oidc-id-token.scm:72
 msgid "invalid OIDC id token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:104
+#: src/scm/webid-oidc/oidc-id-token.scm:103
 msgid "#:sub should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:109
+#: src/scm/webid-oidc/oidc-id-token.scm:108
 msgid "#:aud should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:125
+#: src/scm/webid-oidc/oidc-id-token.scm:124
 msgid ""
 "when making an ID token either its required fields (#:alg, #:webid, #:iss, #:"
 "sub, #:aud, #:iat and #:exp) or (#:jwt-header and #:jwt-payload) should be "
 "passed"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:57
+#: src/scm/webid-oidc/program.scm:64
 #, scheme-format
 msgid "~a: Warning: XML_CATALOG_FILES is set to ~s.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:60
-#, scheme-format
-msgid "~a: GET ~a ~s...\n"
-msgstr ""
-
 #: src/scm/webid-oidc/program.scm:67
 #, scheme-format
-msgid "~a: Warning: loading XML catalog from the web, ~s.\n"
+msgid "~a: ~s ~a ~s...\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:75
+#: src/scm/webid-oidc/program.scm:73
 #, scheme-format
-msgid "~a: GET ~a ~s: ~s ~a bytes\n"
+msgid "~a: ~s ~a ~s: ~s ~a bytes\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:122
+#: src/scm/webid-oidc/program.scm:126
 msgid "really bad internal server error"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:129
+#: src/scm/webid-oidc/program.scm:133
 #, scheme-format
 msgid "~a: ~a: Internal server error: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:135
+#: src/scm/webid-oidc/program.scm:139
 msgid "Internal Server Error"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:138
+#: src/scm/webid-oidc/program.scm:142
 msgid "Sorry, there was an error."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:159
+#: src/scm/webid-oidc/program.scm:163
 #, scheme-format
 msgid "~a: ~s ~a ~s ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:161
+#: src/scm/webid-oidc/program.scm:165
 #, scheme-format
 msgid "~a: ~a (~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:165
+#: src/scm/webid-oidc/program.scm:169
 #, scheme-format
 msgid "~a: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:175
+#: src/scm/webid-oidc/program.scm:179
 #, scheme-format
 msgid "(there was an error: ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:228
+#: src/scm/webid-oidc/program.scm:232
 msgid "command-line|describe-project"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:234
+#: src/scm/webid-oidc/program.scm:238
 msgid "command-line|server|port"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:236
+#: src/scm/webid-oidc/program.scm:240
 msgid "command-line|server|server-name"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:238
+#: src/scm/webid-oidc/program.scm:242
 msgid "command-line|server|reverse-proxy|backend-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:240
+#: src/scm/webid-oidc/program.scm:244
 msgid "command-line|server|reverse-proxy|header"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:242
+#: src/scm/webid-oidc/program.scm:246
 msgid "command-line|server|issuer|key-file"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:244
+#: src/scm/webid-oidc/program.scm:248
 msgid "command-line|server|issuer|subject"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:246
+#: src/scm/webid-oidc/program.scm:250
 msgid "command-line|server|issuer|encrypted-password"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:248
+#: src/scm/webid-oidc/program.scm:252
 msgid "command-line|server|issuer|encrypted-password-from-file"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:250
+#: src/scm/webid-oidc/program.scm:254
 msgid "command-line|server|issuer|jwks-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:252
+#: src/scm/webid-oidc/program.scm:256
 msgid "command-line|server|issuer|authorization-endpoint-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:254
+#: src/scm/webid-oidc/program.scm:258
 msgid "command-line|server|issuer|token-endpoint-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:256
+#: src/scm/webid-oidc/program.scm:260
 msgid "command-line|server|client-id"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:258
+#: src/scm/webid-oidc/program.scm:262
 msgid "command-line|server|redirect-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:260
+#: src/scm/webid-oidc/program.scm:264
 msgid "command-line|server|client-name"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:262
+#: src/scm/webid-oidc/program.scm:266
 msgid "command-line|server|client-uri"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:296
+#: src/scm/webid-oidc/program.scm:300
 #, scheme-format
 msgid "Usage: ~a COMMAND [OPTIONS]...\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:300
+#: src/scm/webid-oidc/program.scm:304
 msgid ""
 "\n"
 "Run the disfluid COMMAND."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:303
+#: src/scm/webid-oidc/program.scm:307
 msgid ""
 "\n"
 "This program is covered by the GNU Affero GPL, version 3 or\n"
@@ -1266,13 +1261,13 @@ msgid ""
 "to all responses."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:310
+#: src/scm/webid-oidc/program.scm:314
 msgid ""
 "\n"
 "Available commands:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:312
+#: src/scm/webid-oidc/program.scm:316
 #, scheme-format
 msgid ""
 "\n"
@@ -1280,12 +1275,12 @@ msgid ""
 "      run an authenticating reverse proxy."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:315 src/scm/webid-oidc/program.scm:510
-#: src/scm/webid-oidc/program.scm:710
+#: src/scm/webid-oidc/program.scm:319 src/scm/webid-oidc/program.scm:514
+#: src/scm/webid-oidc/program.scm:714
 msgid "command-line|command|reverse-proxy"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:316
+#: src/scm/webid-oidc/program.scm:320
 #, scheme-format
 msgid ""
 "\n"
@@ -1293,12 +1288,12 @@ msgid ""
 "      run an identity provider."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:319 src/scm/webid-oidc/program.scm:535
-#: src/scm/webid-oidc/program.scm:732
+#: src/scm/webid-oidc/program.scm:323 src/scm/webid-oidc/program.scm:539
+#: src/scm/webid-oidc/program.scm:735
 msgid "command-line|command|identity-provider"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:320
+#: src/scm/webid-oidc/program.scm:324
 #, scheme-format
 msgid ""
 "\n"
@@ -1306,12 +1301,12 @@ msgid ""
 "      serve the pages for a public application."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:323 src/scm/webid-oidc/program.scm:556
-#: src/scm/webid-oidc/program.scm:774
+#: src/scm/webid-oidc/program.scm:327 src/scm/webid-oidc/program.scm:560
+#: src/scm/webid-oidc/program.scm:776
 msgid "command-line|command|client-service"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:324
+#: src/scm/webid-oidc/program.scm:328
 #, scheme-format
 msgid ""
 "\n"
@@ -1320,24 +1315,24 @@ msgid ""
 "      facility."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:328 src/scm/webid-oidc/program.scm:582
-#: src/scm/webid-oidc/program.scm:803
+#: src/scm/webid-oidc/program.scm:332 src/scm/webid-oidc/program.scm:586
+#: src/scm/webid-oidc/program.scm:805
 msgid "command-line|command|server"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:330
+#: src/scm/webid-oidc/program.scm:334
 msgid ""
 "\n"
 "If no command is specified, run the browser."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:333
+#: src/scm/webid-oidc/program.scm:337
 msgid ""
 "\n"
 "General options:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:335
+#: src/scm/webid-oidc/program.scm:339
 #, scheme-format
 msgid ""
 "\n"
@@ -1346,7 +1341,7 @@ msgid ""
 "      code. For instance, this would be an URI pointing to a tarball."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:340
+#: src/scm/webid-oidc/program.scm:344
 #, scheme-format
 msgid ""
 "\n"
@@ -1354,7 +1349,7 @@ msgid ""
 "      display a short help message and exit."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:344
+#: src/scm/webid-oidc/program.scm:348
 #, scheme-format
 msgid ""
 "\n"
@@ -1362,7 +1357,7 @@ msgid ""
 "      display the version information (~a, released ~a) and exit."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:350
+#: src/scm/webid-oidc/program.scm:354
 #, scheme-format
 msgid ""
 "\n"
@@ -1370,7 +1365,7 @@ msgid ""
 "      describe the project in the DOAP vocabulary and exit."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:354
+#: src/scm/webid-oidc/program.scm:358
 #, scheme-format
 msgid ""
 "\n"
@@ -1378,7 +1373,7 @@ msgid ""
 "      redirect the program standard output to FILE.log."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:358
+#: src/scm/webid-oidc/program.scm:362
 #, scheme-format
 msgid ""
 "\n"
@@ -1386,13 +1381,13 @@ msgid ""
 "      redirect the program errors to FILE.err."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:363
+#: src/scm/webid-oidc/program.scm:367
 msgid ""
 "\n"
 "General server-side options:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:365
+#: src/scm/webid-oidc/program.scm:369
 #, scheme-format
 msgid ""
 "\n"
@@ -1400,7 +1395,7 @@ msgid ""
 "      set the server port to bind, 8080 by default."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:369
+#: src/scm/webid-oidc/program.scm:373
 #, scheme-format
 msgid ""
 "\n"
@@ -1408,13 +1403,13 @@ msgid ""
 "      set the public server URI (scheme, userinfo, host, and port)."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:374
+#: src/scm/webid-oidc/program.scm:378
 msgid ""
 "\n"
 "Options for the resource server:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:376
+#: src/scm/webid-oidc/program.scm:380
 #, scheme-format
 msgid ""
 "\n"
@@ -1424,7 +1419,7 @@ msgid ""
 "      authentication."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:382
+#: src/scm/webid-oidc/program.scm:386
 #, scheme-format
 msgid ""
 "\n"
@@ -1433,13 +1428,13 @@ msgid ""
 "      reverse-proxy command."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:388
+#: src/scm/webid-oidc/program.scm:392
 msgid ""
 "\n"
 "Options for the identity provider:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:390
+#: src/scm/webid-oidc/program.scm:394
 #, scheme-format
 msgid ""
 "\n"
@@ -1448,7 +1443,7 @@ msgid ""
 "      key is generated. The server does not offer an HTTPS service."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:395
+#: src/scm/webid-oidc/program.scm:399
 #, scheme-format
 msgid ""
 "\n"
@@ -1456,7 +1451,7 @@ msgid ""
 "      set the identity of the subject."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:399
+#: src/scm/webid-oidc/program.scm:403
 #, scheme-format
 msgid ""
 "\n"
@@ -1464,7 +1459,7 @@ msgid ""
 "      set the encrypted password to recognize the user."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:403
+#: src/scm/webid-oidc/program.scm:407
 #, scheme-format
 msgid ""
 "\n"
@@ -1472,7 +1467,7 @@ msgid ""
 "      load the user’s encrypted password from ENCRYPTED_PASSWORD_FILE."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:407
+#: src/scm/webid-oidc/program.scm:411
 #, scheme-format
 msgid ""
 "\n"
@@ -1480,7 +1475,7 @@ msgid ""
 "      set the URI to query the key of the server."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:411
+#: src/scm/webid-oidc/program.scm:415
 #, scheme-format
 msgid ""
 "\n"
@@ -1488,7 +1483,7 @@ msgid ""
 "      set the authorization endpoint of the issuer."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:415
+#: src/scm/webid-oidc/program.scm:419
 #, scheme-format
 msgid ""
 "\n"
@@ -1496,13 +1491,13 @@ msgid ""
 "      set the token endpoint of the issuer."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:420
+#: src/scm/webid-oidc/program.scm:424
 msgid ""
 "\n"
 "Options for the client service:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:422
+#: src/scm/webid-oidc/program.scm:426
 #, scheme-format
 msgid ""
 "\n"
@@ -1511,7 +1506,7 @@ msgid ""
 "      dereferenced to a semantic resource."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:427
+#: src/scm/webid-oidc/program.scm:431
 #, scheme-format
 msgid ""
 "\n"
@@ -1520,7 +1515,7 @@ msgid ""
 "      page is presented with the code to paste in the application."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:432
+#: src/scm/webid-oidc/program.scm:436
 #, scheme-format
 msgid ""
 "\n"
@@ -1528,7 +1523,7 @@ msgid ""
 "      set the user-visible application name (may be misleading...)."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:436
+#: src/scm/webid-oidc/program.scm:440
 #, scheme-format
 msgid ""
 "\n"
@@ -1537,13 +1532,13 @@ msgid ""
 "      application (again, may be misleading)."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:442
+#: src/scm/webid-oidc/program.scm:446
 msgid ""
 "\n"
 "Environment variables:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:444
+#: src/scm/webid-oidc/program.scm:448
 msgid ""
 "\n"
 "  XML_CATALOG_FILES: the server will fetch resources on the web. By\n"
@@ -1554,23 +1549,23 @@ msgid ""
 "      content-type."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:452 src/scm/webid-oidc/program.scm:459
-#: src/scm/webid-oidc/program.scm:468 src/scm/webid-oidc/program.scm:476
-#: src/scm/webid-oidc/program.scm:484
+#: src/scm/webid-oidc/program.scm:456 src/scm/webid-oidc/program.scm:463
+#: src/scm/webid-oidc/program.scm:472 src/scm/webid-oidc/program.scm:480
+#: src/scm/webid-oidc/program.scm:488
 #, scheme-format
 msgid ""
 "the-environment-variable|\n"
 "      It is currently set to ~s."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:455
+#: src/scm/webid-oidc/program.scm:459
 msgid ""
 "\n"
 "  LANG: set the locale of the user interface (for the server commands,\n"
 "      the user is the system administrator)."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:462
+#: src/scm/webid-oidc/program.scm:466
 msgid ""
 "\n"
 "  XDG_DATA_HOME: where the program stores persistent data. The\n"
@@ -1579,7 +1574,7 @@ msgid ""
 "      recommended to set it to /var/lib."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:471
+#: src/scm/webid-oidc/program.scm:475
 msgid ""
 "\n"
 "  XDG_CACHE_HOME: where the program stores and updates the seed file,\n"
@@ -1587,7 +1582,7 @@ msgid ""
 "      time. The seed file will be initialized from /dev/random."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:479
+#: src/scm/webid-oidc/program.scm:483
 msgid ""
 "\n"
 "  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
@@ -1595,13 +1590,13 @@ msgid ""
 "      not used otherwise."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:488
+#: src/scm/webid-oidc/program.scm:492
 msgid ""
 "\n"
 "Running a reverse proxy"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:490
+#: src/scm/webid-oidc/program.scm:494
 msgid ""
 "\n"
 "Suppose that you operate data.provider.com. You want to run an\n"
@@ -1614,7 +1609,7 @@ msgid ""
 "from this reverse proxy."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:500
+#: src/scm/webid-oidc/program.scm:504
 #, scheme-format
 msgid ""
 "\n"
@@ -1628,20 +1623,20 @@ msgid ""
 "      --~a '/var/log/proxy.err'"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:515
+#: src/scm/webid-oidc/program.scm:519
 msgid ""
 "\n"
 "Running an identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:517
+#: src/scm/webid-oidc/program.scm:521
 msgid ""
 "\n"
 "The identity provider running at webid-oidc-demo.planete-kraus.eu is\n"
 "invoked with the following options:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:521
+#: src/scm/webid-oidc/program.scm:525
 #, scheme-format
 msgid ""
 "\n"
@@ -1660,20 +1655,20 @@ msgid ""
 "      --~a $PORT"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:541
+#: src/scm/webid-oidc/program.scm:545
 msgid ""
 "\n"
 "Running the public pages for an application"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:543
+#: src/scm/webid-oidc/program.scm:547
 msgid ""
 "\n"
 "The example client application pages for\n"
 "webid-oidc-demo.planete-kraus.eu are served this way:"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:547
+#: src/scm/webid-oidc/program.scm:551
 #, scheme-format
 msgid ""
 "\n"
@@ -1689,13 +1684,13 @@ msgid ""
 "      --~a $PORT"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:561
+#: src/scm/webid-oidc/program.scm:565
 msgid ""
 "\n"
 "Running a full server"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:564
+#: src/scm/webid-oidc/program.scm:568
 msgid ""
 "\n"
 "To run the server with identity provider and\n"
@@ -1703,7 +1698,7 @@ msgid ""
 "options for the parts."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:568
+#: src/scm/webid-oidc/program.scm:572
 #, scheme-format
 msgid ""
 "\n"
@@ -1722,14 +1717,14 @@ msgid ""
 "      --~a '...port...'"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:593
+#: src/scm/webid-oidc/program.scm:597
 #, scheme-format
 msgid ""
 "\n"
 "If you find a bug, then please send a report to ~a."
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:598
+#: src/scm/webid-oidc/program.scm:602
 #, scheme-format
 msgid ""
 "~a version ~a\n"
@@ -1737,101 +1732,101 @@ msgid ""
 "Rreleased ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:635
+#: src/scm/webid-oidc/program.scm:639
 #, scheme-format
 msgid "The --~a argument must be a number, not ~s.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:641
+#: src/scm/webid-oidc/program.scm:645
 #, scheme-format
 msgid "The --~a argument must be an integer, not ~s.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:647
+#: src/scm/webid-oidc/program.scm:651
 #, scheme-format
 msgid "The --~a argument must be positive, ~s is invalid.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:652
+#: src/scm/webid-oidc/program.scm:656
 #, scheme-format
 msgid "The --~a argument must be less than 65536, ~s is invalid.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:680
+#: src/scm/webid-oidc/program.scm:684
 msgid ""
 "You specified two different passwords: one directly, and one from a file. "
 "Please set only one password.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:713 src/scm/webid-oidc/program.scm:735
-#: src/scm/webid-oidc/program.scm:805
+#: src/scm/webid-oidc/program.scm:717 src/scm/webid-oidc/program.scm:738
+#: src/scm/webid-oidc/program.scm:807
 #, scheme-format
 msgid "You must pass --~a to set the server name.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:717
+#: src/scm/webid-oidc/program.scm:721
 #, scheme-format
 msgid "You must pass --~a to set the backend URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:739 src/scm/webid-oidc/program.scm:809
+#: src/scm/webid-oidc/program.scm:742 src/scm/webid-oidc/program.scm:811
 #, scheme-format
 msgid ""
 "You must pass --~a to set the file where to store the identity provider "
 "key.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:743 src/scm/webid-oidc/program.scm:813
+#: src/scm/webid-oidc/program.scm:746 src/scm/webid-oidc/program.scm:815
 #, scheme-format
 msgid "You must pass --~a to set the subject of the identity provider.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:747
+#: src/scm/webid-oidc/program.scm:750
 #, scheme-format
 msgid "You must pass --~a or --~a to set the subject’s encrypted password.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:751 src/scm/webid-oidc/program.scm:821
+#: src/scm/webid-oidc/program.scm:754 src/scm/webid-oidc/program.scm:823
 #, scheme-format
 msgid "You must pass --~a to set the JWKS URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:755 src/scm/webid-oidc/program.scm:825
+#: src/scm/webid-oidc/program.scm:758 src/scm/webid-oidc/program.scm:827
 #, scheme-format
 msgid "You must pass --~a to set the authorization endpoint URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:759 src/scm/webid-oidc/program.scm:829
+#: src/scm/webid-oidc/program.scm:762 src/scm/webid-oidc/program.scm:831
 #, scheme-format
 msgid "You must pass --~a to set the token endpoint URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:777
+#: src/scm/webid-oidc/program.scm:779
 #, scheme-format
 msgid "You must pass --~a to set the application web ID.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:781
+#: src/scm/webid-oidc/program.scm:783
 #, scheme-format
 msgid "You must pass --~a to set the redirection URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:785
+#: src/scm/webid-oidc/program.scm:787
 #, scheme-format
 msgid "You must pass --~a to set the informative client name.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:789
+#: src/scm/webid-oidc/program.scm:791
 #, scheme-format
 msgid "You must pass --~a to set the informative client URI.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:817
+#: src/scm/webid-oidc/program.scm:819
 #, scheme-format
 msgid "You must pass --~a to set the subject’s encrypted password.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/program.scm:872
+#: src/scm/webid-oidc/program.scm:871
 #, scheme-format
 msgid "Unknown command ~s\n"
 msgstr ""
@@ -1845,71 +1840,71 @@ msgstr ""
 msgid "the refresh token is bound to key ~s, which is not that one"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:61
+#: src/scm/webid-oidc/resource-server.scm:58
 msgid ""
 "You need to pass #:server-uri URI where URI is the public URI of the server, "
 "as a (web uri)."
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:88
+#: src/scm/webid-oidc/resource-server.scm:85
 #, scheme-format
 msgid "~a: authentication failure: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:92
+#: src/scm/webid-oidc/resource-server.scm:89
 #, scheme-format
 msgid "~a: authentication failure\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:171
-#: src/scm/webid-oidc/resource-server.scm:362
+#: src/scm/webid-oidc/resource-server.scm:157
+#: src/scm/webid-oidc/resource-server.scm:342
 msgid "reason-phrase|Precondition Failed"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:186
+#: src/scm/webid-oidc/resource-server.scm:172
 msgid "reason-phrase|Not Modified"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:202
+#: src/scm/webid-oidc/resource-server.scm:187
 msgid "The owner is not defined."
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:274
+#: src/scm/webid-oidc/resource-server.scm:256
 msgid "reason-phrase|Created"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:299
+#: src/scm/webid-oidc/resource-server.scm:279
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:303
+#: src/scm/webid-oidc/resource-server.scm:283
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:327
-#: src/scm/webid-oidc/token-endpoint.scm:105
+#: src/scm/webid-oidc/resource-server.scm:307
+#: src/scm/webid-oidc/token-endpoint.scm:104
 msgid "reason-phrase|Forbidden"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:348
+#: src/scm/webid-oidc/resource-server.scm:328
 msgid "reason-phrase|Conflict"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:355
+#: src/scm/webid-oidc/resource-server.scm:335
 msgid "reason-phrase|Unsupported Media Type"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:369
+#: src/scm/webid-oidc/resource-server.scm:349
 msgid "reason-phrase|Not Acceptable"
 msgstr ""
 
-#: src/scm/webid-oidc/reverse-proxy.scm:60
+#: src/scm/webid-oidc/reverse-proxy.scm:57
 msgid "#:endpoint argument is not present or not an URI."
 msgstr ""
 
-#: src/scm/webid-oidc/serve.scm:76
+#: src/scm/webid-oidc/serve.scm:77
 msgid "content negociation failed while serving a request"
 msgstr ""
 
@@ -1918,16 +1913,16 @@ msgstr ""
 msgid "only text/turtle is allowed for the target of a POST request, not ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/server/create.scm:105
+#: src/scm/webid-oidc/server/create.scm:106
 msgid "the created resource cannot have containment triples"
 msgstr ""
 
-#: src/scm/webid-oidc/server/create.scm:147
+#: src/scm/webid-oidc/server/create.scm:146
 #, scheme-format
 msgid "cannot POST to an auxiliary resource path, ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/server/read.scm:105
+#: src/scm/webid-oidc/server/read.scm:103
 #, scheme-format
 msgid "the auxiliary resource of type ~s at ~s is absent"
 msgstr ""
@@ -1980,46 +1975,46 @@ msgstr ""
 msgid "an error happened while updating file ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:93
+#: src/scm/webid-oidc/token-endpoint.scm:92
 #, scheme-format
 msgid "while handling web failure for the token endpoint: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:95
+#: src/scm/webid-oidc/token-endpoint.scm:94
 msgid "an error happened during the token endpoint failure handling"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:225
+#: src/scm/webid-oidc/token-endpoint.scm:224
 msgid "missing grant type"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:229
+#: src/scm/webid-oidc/token-endpoint.scm:228
 msgid "<p>You did not specify a grant_type for this request.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:243
+#: src/scm/webid-oidc/token-endpoint.scm:242
 msgid "missing authorization code"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:247
+#: src/scm/webid-oidc/token-endpoint.scm:246
 msgid ""
 "<p>You want to grant an authorization code, but you did not set one.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:268
+#: src/scm/webid-oidc/token-endpoint.scm:267
 msgid "missing refresh token"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:272
+#: src/scm/webid-oidc/token-endpoint.scm:271
 msgid "<p>You want to grant a refresh token, but you did not set one.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:285
+#: src/scm/webid-oidc/token-endpoint.scm:284
 #, scheme-format
 msgid "unsupported grant type: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/token-endpoint.scm:290
+#: src/scm/webid-oidc/token-endpoint.scm:289
 #, scheme-format
 msgid ""
 "<p>You want to use <pre>~s</pre> as a grant type, but this is not supported."