JWK: document it, and use GOOPS

1 files changed, 172 insertions, 152 deletions

diff --git a/po/fr.po b/po/fr.po
index 7106ae3..42ef469 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-17 14:10+0200\n"
-"PO-Revision-Date: 2021-09-17 14:11+0200\n"
+"POT-Creation-Date: 2021-09-17 14:13+0200\n"
+"PO-Revision-Date: 2021-09-17 14:15+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
 "Language: fr\n"
@@ -135,12 +135,12 @@ msgstr "ce n’est pas un jeton d’accès, parce que ce n’est même pas un JW
 msgid "this is not an access token, because it is not even a JWS"
 msgstr "ce n’est pas un jeton d’accès, parce que ce n’est même pas un JWS"
 
-#: src/scm/webid-oidc/access-token.scm:77 src/scm/webid-oidc/dpop-proof.scm:96
+#: src/scm/webid-oidc/access-token.scm:77 src/scm/webid-oidc/dpop-proof.scm:101
 #, scheme-format
 msgid "this is not an access token: ~a"
 msgstr "ce n’est pas un jeton d’accès : ~a"
 
-#: src/scm/webid-oidc/access-token.scm:79 src/scm/webid-oidc/dpop-proof.scm:98
+#: src/scm/webid-oidc/access-token.scm:79 src/scm/webid-oidc/dpop-proof.scm:103
 msgid "this is not an access token"
 msgstr "ce n’est pas un jeton d’accès"
 
@@ -306,7 +306,7 @@ msgstr "impossible d’encoder le code d’autorisation"
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:139
+#: src/scm/webid-oidc/identity-provider.scm:143
 #: src/scm/webid-oidc/token-endpoint.scm:111
 #: src/scm/webid-oidc/token-endpoint.scm:137
 #: src/scm/webid-oidc/token-endpoint.scm:164
@@ -497,83 +497,83 @@ msgstr "impossible de télécharger le manifeste client ~s"
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr "le manifeste client est déréférencé depuis ~s, mais il prétend être ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:289
+#: src/scm/webid-oidc/client/accounts.scm:285
 msgid "The refresh token has expired."
 msgstr "le jeton de rafraîchissement a expiré."
 
-#: src/scm/webid-oidc/client/accounts.scm:296
+#: src/scm/webid-oidc/client/accounts.scm:292
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr "La requête de jeton a échoué avec un code ~s (~s)."
 
-#: src/scm/webid-oidc/client/accounts.scm:305
+#: src/scm/webid-oidc/client/accounts.scm:301
 msgid "The token response did not set the content type."
 msgstr "Le jeton de réponse n’a pas défini de type de contenu."
 
-#: src/scm/webid-oidc/client/accounts.scm:313
+#: src/scm/webid-oidc/client/accounts.scm:309
 msgid "The token endpoint did not respond in UTF-8."
 msgstr "Le terminal de jetonn n’a pas répondu en UTF-8."
 
-#: src/scm/webid-oidc/client/accounts.scm:325
+#: src/scm/webid-oidc/client/accounts.scm:321
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr "La réponse de jeton a un type de contenu ~s, pas application/json."
 
-#: src/scm/webid-oidc/client/accounts.scm:335
+#: src/scm/webid-oidc/client/accounts.scm:331
 msgid "The token response is not valid JSON."
 msgstr "La réponse de jeton n’est pas un JSON valide."
 
-#: src/scm/webid-oidc/client/accounts.scm:349
+#: src/scm/webid-oidc/client/accounts.scm:345
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’ID : ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:357
+#: src/scm/webid-oidc/client/accounts.scm:353
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’accès : ~s\n"
 
-#: src/scm/webid-oidc/client/accounts.scm:368
+#: src/scm/webid-oidc/client/accounts.scm:364
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr "la signature du jeton d’ID est invalide : ~a"
 
-#: src/scm/webid-oidc/client/accounts.scm:370
+#: src/scm/webid-oidc/client/accounts.scm:366
 msgid "the ID token signature is invalid"
 msgstr "la signature du jeton d’ID est invalide"
 
-#: src/scm/webid-oidc/client/accounts.scm:388
+#: src/scm/webid-oidc/client/accounts.scm:384
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 "le jeton d’ID délivré par le fournisseur d’identité pour ~s a ~s pour webid"
 
-#: src/scm/webid-oidc/client/accounts.scm:398
+#: src/scm/webid-oidc/client/accounts.scm:394
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 "Le jeton d’ID délivré par le fournisseur d’identité ~s est pour l’émetteur "
 "~s."
 
-#: src/scm/webid-oidc/client/accounts.scm:413
+#: src/scm/webid-oidc/client/accounts.scm:409
 msgid "The issuer is required."
 msgstr "L’émetteur est requis."
 
-#: src/scm/webid-oidc/client/accounts.scm:418
+#: src/scm/webid-oidc/client/accounts.scm:414
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 "Le sujet optionnel et émetteur doivent être des chaînes de caractère ou des "
 "URIs."
 
-#: src/scm/webid-oidc/client/accounts.scm:454
+#: src/scm/webid-oidc/client/accounts.scm:450
 msgid "Cannot check the username and/or password."
 msgstr "Impossible de vérifier le nom d’utilisateur et/ou le mot de passe."
 
-#: src/scm/webid-oidc/client/accounts.scm:464
+#: src/scm/webid-oidc/client/accounts.scm:460
 msgid "The subject should be a string or URI."
 msgstr "Le sujet doit être une chaîne de caractères ou une URI."
 
-#: src/scm/webid-oidc/client/accounts.scm:478
+#: src/scm/webid-oidc/client/accounts.scm:474
 msgid "The issuer should be a string or URI."
 msgstr "L’émetteur doit être une chaîne de caractères ou une URI."
 
@@ -595,7 +595,7 @@ msgstr ""
 msgid "You already have an account for ~a issued by ~a."
 msgstr "Vous avez déjà un compte pour ~a émis par ~a."
 
-#: src/scm/webid-oidc/client/client.scm:106
+#: src/scm/webid-oidc/client/client.scm:108
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
@@ -611,82 +611,86 @@ msgstr "Bonjour, le monde !\n"
 msgid "Hello, world!"
 msgstr "Bonjour, le monde !"
 
-#: src/scm/webid-oidc/dpop-proof.scm:91
+#: src/scm/webid-oidc/dpop-proof.scm:96
 #, scheme-format
 msgid "this is not a DPoP proof, because it is not even a JWS: ~a"
 msgstr "ce n’est pas une preuve DPoP, parce que ce n’est même pas un JWS : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:93
+#: src/scm/webid-oidc/dpop-proof.scm:98
 msgid "this is not a DPoP proof, because it is not even a JWS"
 msgstr "ce n’est pas une preuve DPoP, parce que ce n’est même pas un JWS"
 
-#: src/scm/webid-oidc/dpop-proof.scm:124
+#: src/scm/webid-oidc/dpop-proof.scm:129
 #, scheme-format
 msgid "the DPoP proof is missing ~s"
 msgstr "il manque ~s à la preuve DPoP"
 
-#: src/scm/webid-oidc/dpop-proof.scm:147
+#: src/scm/webid-oidc/dpop-proof.scm:152
 #, scheme-format
 msgid "the \"jti\" field should be a string, not ~s"
 msgstr "le champ « jti » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:154
+#: src/scm/webid-oidc/dpop-proof.scm:159
 #, scheme-format
 msgid "the \"htm\" field should be a string, not ~s"
 msgstr "le champ « htm » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:161
+#: src/scm/webid-oidc/dpop-proof.scm:166
 #, scheme-format
 msgid "the \"htu\" field should be an URI, not ~s"
 msgstr "le champ « htu » doit être une URI, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:168
+#: src/scm/webid-oidc/dpop-proof.scm:173
 #, scheme-format
 msgid "the \"iat\" field should be a timestamp, not ~s"
 msgstr "le champ « iat » doit être un horodatage, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:175
+#: src/scm/webid-oidc/dpop-proof.scm:180
 #, scheme-format
 msgid "the \"ath\" field should be an encoded JWT, not ~s"
 msgstr "le champ « ath » doit être un JWT encodé, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:184
+#: src/scm/webid-oidc/dpop-proof.scm:189
 #, scheme-format
 msgid "the \"alg\" field should be a string, not ~s"
 msgstr "le champ « alg » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:189
+#: src/scm/webid-oidc/dpop-proof.scm:194
 #, scheme-format
 msgid "the \"typ\" field should be \"dpop+jwt\", not ~s"
 msgstr "le champ « typ » doit être « dpop+jwt », pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:195
+#: src/scm/webid-oidc/dpop-proof.scm:200
+msgid "the \"jwk\" field should not contain the private key"
+msgstr "le champ « jwk » ne doit pas contenir la clé privée"
+
+#: src/scm/webid-oidc/dpop-proof.scm:202
 #, scheme-format
 msgid "the \"jwk\" field should be a valid public key, not ~s"
 msgstr "le champ « jwk » doit être unen clé publique valide, pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:274
+#: src/scm/webid-oidc/dpop-proof.scm:281
 #, scheme-format
 msgid "the DPoP proof is signed for ~s, but it is issued to ~s"
 msgstr "la preuve DPoP est signée pour ~s, mais elle est émise pour ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:305
+#: src/scm/webid-oidc/dpop-proof.scm:312
 #, scheme-format
 msgid "the DPoP proof cannot be decoded: ~a"
 msgstr "impossible de décoder la preuve DPoP : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:307
+#: src/scm/webid-oidc/dpop-proof.scm:314
 msgid "the DPoP proof cannot be decoded"
 msgstr "impossible de décoder la preuve DPoP"
 
-#: src/scm/webid-oidc/dpop-proof.scm:317
+#: src/scm/webid-oidc/dpop-proof.scm:324
 #, scheme-format
 msgid "the DPoP proof is signed for access through ~s, but it is used with ~s"
 msgstr ""
 "la preuve DPoP est signée pour un accès avec ~s, mais elle est utilisée avec "
 "~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:331
+#: src/scm/webid-oidc/dpop-proof.scm:338
 #, scheme-format
 msgid ""
 "the DPoP proof is signed in the future, ~a, relative to the current date, ~a"
@@ -694,14 +698,14 @@ msgstr ""
 "la preuve DPoP est signée dans le futur, le ~a, par rapport à la date "
 "courante, ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:340
+#: src/scm/webid-oidc/dpop-proof.scm:347
 #, scheme-format
 msgid "the DPoP proof is too old, it was signed ~a and now it is ~a"
 msgstr ""
 "la preuve DPoP est trop vieille, elle a été signée le ~a et nous sommes "
 "maintenant le ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:352
+#: src/scm/webid-oidc/dpop-proof.scm:359
 #, scheme-format
 msgid ""
 "the DPoP proof should go along with an access token hashed to ~s, not ~s"
@@ -709,123 +713,123 @@ msgstr ""
 "la preuve DPoP devrait être accompagnée d’un jeton d’accès de condensat ~s, "
 "pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:361 src/scm/webid-oidc/dpop-proof.scm:372
+#: src/scm/webid-oidc/dpop-proof.scm:368 src/scm/webid-oidc/dpop-proof.scm:379
 msgid "the DPoP proof is signed with the wrong key"
 msgstr "la preuve DPoP est signée avec la mauvaise clé"
 
-#: src/scm/webid-oidc/dpop-proof.scm:370
+#: src/scm/webid-oidc/dpop-proof.scm:377
 #, scheme-format
 msgid "the DPoP proof is signed with the wrong key: ~a"
 msgstr "la preuve DPoP est signée avec la mauvaise clé : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:381
+#: src/scm/webid-oidc/dpop-proof.scm:388
 msgid "the cnf/check function returned #f"
 msgstr "la fonction cnf/check a retourné #f"
 
-#: src/scm/webid-oidc/dpop-proof.scm:392
+#: src/scm/webid-oidc/dpop-proof.scm:399
 #, scheme-format
 msgid "cannot encode a DPoP proof: ~a"
 msgstr "impossible d’encoder la preuve DPoP : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:394
+#: src/scm/webid-oidc/dpop-proof.scm:401
 msgid "cannot encode a DPoP proof"
 msgstr "impossible d’encoder la preuve DPoP"
 
-#: src/scm/webid-oidc/example-app.scm:98
+#: src/scm/webid-oidc/example-app.scm:97
 #, scheme-format
 msgid "~a (issued by ~a): no interaction required"
 msgstr "~a (émis par ~a) : aucune interaction nécessaire"
 
-#: src/scm/webid-oidc/example-app.scm:101
+#: src/scm/webid-oidc/example-app.scm:100
 #, scheme-format
 msgid "~a (issued by ~a): offline but accessible"
 msgstr "~a (émis par ~a) : hors ligne mais accessible"
 
-#: src/scm/webid-oidc/example-app.scm:104
+#: src/scm/webid-oidc/example-app.scm:103
 #, scheme-format
 msgid "~a (issued by ~a): online"
 msgstr "~a (émis par ~a) : en ligne"
 
-#: src/scm/webid-oidc/example-app.scm:107
+#: src/scm/webid-oidc/example-app.scm:106
 #, scheme-format
 msgid "~a (issued by ~a): inaccessible"
 msgstr "~a (émis par ~a) : inaccessible"
 
-#: src/scm/webid-oidc/example-app.scm:120
+#: src/scm/webid-oidc/example-app.scm:119
 #, scheme-format
 msgid "Your choice ~a does not exist.\n"
 msgstr "Votre choix, ~a, n’existe pas.\n"
 
-#: src/scm/webid-oidc/example-app.scm:138
+#: src/scm/webid-oidc/example-app.scm:137
 msgid "Your choice is not a valid URI.\n"
 msgstr "Votre choix doit être une URI valide.\n"
 
-#: src/scm/webid-oidc/example-app.scm:147
+#: src/scm/webid-oidc/example-app.scm:146
 msgid "This is not a valid HTTP method.\n"
 msgstr "ce n’est pas une méthode HTTP valide.\n"
 
-#: src/scm/webid-oidc/example-app.scm:163
+#: src/scm/webid-oidc/example-app.scm:162
 msgid "This is not a valid value for this header.\n"
 msgstr "Ce n’est pas une valeur valide pour cet en-tête.\n"
 
-#: src/scm/webid-oidc/example-app.scm:201
+#: src/scm/webid-oidc/example-app.scm:200
 msgid "Nothing to undo.\n"
 msgstr "Rien à annuler.\n"
 
-#: src/scm/webid-oidc/example-app.scm:213
+#: src/scm/webid-oidc/example-app.scm:212
 msgid "Nothing to redo.\n"
 msgstr "Rien à refaire.\n"
 
-#: src/scm/webid-oidc/example-app.scm:273
+#: src/scm/webid-oidc/example-app.scm:272
 msgid "Example app command|add-account"
 msgstr "ajouter-compte"
 
-#: src/scm/webid-oidc/example-app.scm:275
+#: src/scm/webid-oidc/example-app.scm:274
 msgid "Example app command|choose-account"
 msgstr "choisir-compte"
 
-#: src/scm/webid-oidc/example-app.scm:277
+#: src/scm/webid-oidc/example-app.scm:276
 msgid "Example app command|set-uri"
 msgstr "définir-uri"
 
-#: src/scm/webid-oidc/example-app.scm:279
+#: src/scm/webid-oidc/example-app.scm:278
 msgid "Example app command|set-method"
 msgstr "définir-méthode"
 
-#: src/scm/webid-oidc/example-app.scm:281
+#: src/scm/webid-oidc/example-app.scm:280
 msgid "Example app command|view-headers"
 msgstr "voir-en-têtes"
 
-#: src/scm/webid-oidc/example-app.scm:283
+#: src/scm/webid-oidc/example-app.scm:282
 msgid "Example app command|clear-headers"
 msgstr "effacer-en-têtes"
 
-#: src/scm/webid-oidc/example-app.scm:285
+#: src/scm/webid-oidc/example-app.scm:284
 msgid "Example app command|add-header"
 msgstr "ajouter-en-tête"
 
-#: src/scm/webid-oidc/example-app.scm:287
+#: src/scm/webid-oidc/example-app.scm:286
 msgid "Example app command|ok"
 msgstr "ok"
 
-#: src/scm/webid-oidc/example-app.scm:289
+#: src/scm/webid-oidc/example-app.scm:288
 msgid "Example app command|undo"
 msgstr "annuler"
 
-#: src/scm/webid-oidc/example-app.scm:291
+#: src/scm/webid-oidc/example-app.scm:290
 msgid "Example app command|redo"
 msgstr "refaire"
 
-#: src/scm/webid-oidc/example-app.scm:301
+#: src/scm/webid-oidc/example-app.scm:300
 #, scheme-format
 msgid "To log in on ~a, please visit: ~a\n"
 msgstr "Pour vous connecte avec ~a, veuillez visiter : ~a\n"
 
-#: src/scm/webid-oidc/example-app.scm:304
+#: src/scm/webid-oidc/example-app.scm:303
 msgid "Then, paste the authorization code you get:\n"
 msgstr "Ensuite, veuillez coller votre code d’autorisation :\n"
 
-#: src/scm/webid-oidc/example-app.scm:322
+#: src/scm/webid-oidc/example-app.scm:321
 #, scheme-format
 msgid ""
 "Account: ~a\n"
@@ -860,50 +864,50 @@ msgstr ""
 "  - ~a : effectuer la requête.\n"
 "\n"
 
-#: src/scm/webid-oidc/example-app.scm:341
+#: src/scm/webid-oidc/example-app.scm:340
 msgid "Account:|unset"
 msgstr "non défini"
 
-#: src/scm/webid-oidc/example-app.scm:345
+#: src/scm/webid-oidc/example-app.scm:344
 msgid "URI:|unset"
 msgstr "non défini"
 
-#: src/scm/webid-oidc/example-app.scm:349
+#: src/scm/webid-oidc/example-app.scm:348
 msgid "Method:|unset"
 msgstr "non définie"
 
-#: src/scm/webid-oidc/example-app.scm:352
+#: src/scm/webid-oidc/example-app.scm:351
 msgid "Headers:|none"
 msgstr "aucun"
 
-#: src/scm/webid-oidc/example-app.scm:356
+#: src/scm/webid-oidc/example-app.scm:355
 msgid "list separator|, "
 msgstr ", "
 
-#: src/scm/webid-oidc/example-app.scm:366
+#: src/scm/webid-oidc/example-app.scm:365
 #, scheme-format
 msgid "You can undo your last command with \"~a\".\n"
 msgstr "Vous pouvez annuler votre dernière commande avec « ~a ».\n"
 
-#: src/scm/webid-oidc/example-app.scm:368
+#: src/scm/webid-oidc/example-app.scm:367
 #, scheme-format
 msgid "You can re-apply your last undone command with \"~a\".\n"
 msgstr "Vous pouvez refaire votre dernière commande annulée avec « ~a ».\n"
 
-#: src/scm/webid-oidc/example-app.scm:369
+#: src/scm/webid-oidc/example-app.scm:368
 msgid "Readline prompt|Command: "
 msgstr "Commande : "
 
-#: src/scm/webid-oidc/example-app.scm:376
+#: src/scm/webid-oidc/example-app.scm:375
 #, scheme-format
 msgid "An error happened: ~a.\n"
 msgstr "Une erreur est survenue : ~a.\n"
 
-#: src/scm/webid-oidc/example-app.scm:388
+#: src/scm/webid-oidc/example-app.scm:387
 msgid "Please enter your identity provider: "
 msgstr "Veuillez entrer votre fournisseur d’identité : "
 
-#: src/scm/webid-oidc/example-app.scm:394
+#: src/scm/webid-oidc/example-app.scm:393
 msgid ""
 "You don’t have other accounts available. Please add one with \"add-account"
 "\".\n"
@@ -911,38 +915,38 @@ msgstr ""
 "Vous n’avez pas d’autre compte disponible. Veuillez en ajouter un avec "
 "« ajouter-compte ».\n"
 
-#: src/scm/webid-oidc/example-app.scm:400
+#: src/scm/webid-oidc/example-app.scm:399
 #, scheme-format
 msgid "- ~a: ~a\n"
 msgstr "- ~a : ~a\n"
 
-#: src/scm/webid-oidc/example-app.scm:408
+#: src/scm/webid-oidc/example-app.scm:407
 #, scheme-format
 msgid "[1-~a] "
 msgstr "[1-~a] "
 
-#: src/scm/webid-oidc/example-app.scm:416
+#: src/scm/webid-oidc/example-app.scm:415
 msgid "Visit this URI: "
 msgstr "Naviguer cette URI : "
 
-#: src/scm/webid-oidc/example-app.scm:422
+#: src/scm/webid-oidc/example-app.scm:421
 msgid "Use this HTTP method [GET]: "
 msgstr "Utiliser cette méthode HTTP [GET] : "
 
-#: src/scm/webid-oidc/example-app.scm:438
+#: src/scm/webid-oidc/example-app.scm:437
 msgid "Which header? "
 msgstr "Quel en-tête ? "
 
-#: src/scm/webid-oidc/example-app.scm:441
+#: src/scm/webid-oidc/example-app.scm:440
 #, scheme-format
 msgid "Which header value for ~a? "
 msgstr "Quelle valeur pour l’en-tête ~a ? "
 
-#: src/scm/webid-oidc/example-app.scm:464
+#: src/scm/webid-oidc/example-app.scm:463
 msgid "Please define an account and the URI.\n"
 msgstr "Veuillez définir un compte et une URI.\n"
 
-#: src/scm/webid-oidc/example-app.scm:471
+#: src/scm/webid-oidc/example-app.scm:470
 msgid "I don’t know that command.\n"
 msgstr "Je ne connais pas cette commande.\n"
 
@@ -1106,11 +1110,11 @@ msgstr ""
 "<p>Vous pouvez uniquement utiliser la méthode <emph>GET</emph> pour cette "
 "ressource.</p>"
 
-#: src/scm/webid-oidc/identity-provider.scm:72
+#: src/scm/webid-oidc/identity-provider.scm:76
 msgid "Warning: generating a new key pair."
 msgstr "Attention : génération d'une nouvelle paire de clé."
 
-#: src/scm/webid-oidc/identity-provider.scm:132
+#: src/scm/webid-oidc/identity-provider.scm:136
 msgid "reason-phrase|Not Found"
 msgstr "Non Trouvé"
 
@@ -1119,114 +1123,102 @@ msgstr "Non Trouvé"
 msgid "a replay has been detected with JTI ~s"
 msgstr "une redite a été détectée avec le JTI ~s"
 
-#: src/scm/webid-oidc/jwk.scm:76
+#: src/scm/webid-oidc/jwk.scm:141
+msgid "the point and scalar are not on the same curve"
+msgstr "le point et le scalaire ne sont pas sur la même courbe elliptique"
+
+#: src/scm/webid-oidc/jwk.scm:236
 #, scheme-format
 msgid "the JWK is invalid: ~a"
 msgstr "le JWK est invalide : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:78
+#: src/scm/webid-oidc/jwk.scm:238
 msgid "the JWK is invalid"
 msgstr "le JWK est invalide"
 
-#: src/scm/webid-oidc/jwk.scm:87
-#, scheme-format
-msgid "unknown key type ~s"
-msgstr "type de clé inconnu ~s"
-
-#: src/scm/webid-oidc/jwk.scm:103
-#, scheme-format
-msgid "the public JWK is invalid: ~a"
-msgstr "la clé publique JWK est invalide : ~a"
-
-#: src/scm/webid-oidc/jwk.scm:105
-msgid "the public JWK is invalid"
-msgstr "la clé publique JWK est invalide"
-
-#: src/scm/webid-oidc/jwk.scm:136
-#, scheme-format
-msgid "cannot extract the public part of the key: ~a"
-msgstr "impossible d’extraire la partie publique de la clé : ~a"
-
-#: src/scm/webid-oidc/jwk.scm:138
-msgid "cannot extract the public part of the key"
-msgstr "impossible d’extraire la partie publique de la clé"
+#: src/scm/webid-oidc/jwk.scm:247
+msgid "cannot compute the key type"
+msgstr "impossible de calculer le type de clé"
 
-#: src/scm/webid-oidc/jwk.scm:188
-msgid "the JWKS is invalid, because it does not have keys"
-msgstr "le JWKS est invalide, parce qu’il n’a pas de clés"
+#: src/scm/webid-oidc/jwk.scm:284
+msgid "it is built as an RSA key or key pair, but it is not"
+msgstr ""
+"elle est construite comme une clé ou paire de clés RSA, mais ce n’en est pas "
+"une"
 
-#: src/scm/webid-oidc/jwk.scm:197
-#, scheme-format
-msgid "the JWKS is invalid: ~a"
-msgstr "le JWKS est invalide : ~a"
+#: src/scm/webid-oidc/jwk.scm:292
+msgid "it is built as an elliptic curve key or key pair, but it is not"
+msgstr ""
+"elle est construite comme une clé ou paire de clés sur une courbe "
+"elliptique, mais ce n’en est pas une"
 
-#: src/scm/webid-oidc/jwk.scm:199
-msgid "the JWKS is invalid"
-msgstr "le JWKS est invalide"
+#: src/scm/webid-oidc/jwk.scm:365
+msgid "this is neither a RSA key nor an elliptic curve key"
+msgstr "ce n’est ni une clé RSA ni une clé sur une courbe elliptique"
 
-#: src/scm/webid-oidc/jwk.scm:236
+#: src/scm/webid-oidc/jwk.scm:402
 #, scheme-format
 msgid "cannot fetch a JWKS: ~a"
 msgstr "impossible de télécharger un JWKS : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:238
+#: src/scm/webid-oidc/jwk.scm:404
 msgid "cannot fetch a JWKS"
 msgstr "impossible de télécharger un JWKS"
 
-#: src/scm/webid-oidc/jwk.scm:242
+#: src/scm/webid-oidc/jwk.scm:408
 #, scheme-format
 msgid "the request failed with ~s ~s"
 msgstr "la requête a échoué avec ~s ~s"
 
-#: src/scm/webid-oidc/jwk.scm:247
+#: src/scm/webid-oidc/jwk.scm:413
 msgid "missing content-type"
 msgstr "type de contenu manquant"
 
-#: src/scm/webid-oidc/jwk.scm:252
+#: src/scm/webid-oidc/jwk.scm:418
 #, scheme-format
 msgid "invalid content-type: ~s"
 msgstr "type de contenu invalide : ~s"
 
-#: src/scm/webid-oidc/jws.scm:72
+#: src/scm/webid-oidc/jws.scm:73
 #, scheme-format
 msgid "the JWS is invalid: ~a"
 msgstr "le JWS est invalide : ~a"
 
-#: src/scm/webid-oidc/jws.scm:74
+#: src/scm/webid-oidc/jws.scm:75
 msgid "the JWS is invalid"
 msgstr "le JWS est invalide"
 
-#: src/scm/webid-oidc/jws.scm:93
+#: src/scm/webid-oidc/jws.scm:94
 msgid "the JWS header does not have an \"alg\" field"
 msgstr "l’en-tête JWS n’a pas de champ « alg »"
 
-#: src/scm/webid-oidc/jws.scm:101
+#: src/scm/webid-oidc/jws.scm:102
 msgid "invalid JSON object as payload"
 msgstr "objet JSON invalide comme charge utile"
 
-#: src/scm/webid-oidc/jws.scm:110
+#: src/scm/webid-oidc/jws.scm:111
 #, scheme-format
 msgid "invalid signature algorithm: ~s"
 msgstr "algorithme de signature invalide : ~s"
 
-#: src/scm/webid-oidc/jws.scm:114
+#: src/scm/webid-oidc/jws.scm:115
 #, scheme-format
 msgid "invalid \"alg\" value: ~s"
 msgstr "valeur « alg » invalide : ~s"
 
-#: src/scm/webid-oidc/jws.scm:119
+#: src/scm/webid-oidc/jws.scm:120
 msgid "invalid JSON object as header"
 msgstr "objet JSON d’en-tête invalide"
 
-#: src/scm/webid-oidc/jws.scm:121
+#: src/scm/webid-oidc/jws.scm:122
 msgid "this is not a pair"
 msgstr "ce n’est pas une paire"
 
-#: src/scm/webid-oidc/jws.scm:138
+#: src/scm/webid-oidc/jws.scm:139
 msgid "the encoded JWS is not in 3 parts"
 msgstr "le JWS encodé n’est pas en 3 parties"
 
-#: src/scm/webid-oidc/jws.scm:149
+#: src/scm/webid-oidc/jws.scm:150
 #, scheme-format
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64: ~a"
@@ -1234,41 +1226,41 @@ msgstr ""
 "l’en-tête ou la charge utile du JWS encodé n’est pas un objet JSON encodé en "
 "base64 : ~a"
 
-#: src/scm/webid-oidc/jws.scm:151
+#: src/scm/webid-oidc/jws.scm:152
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64"
 msgstr ""
 "l’en-tête ou la charge utile du JWS encodé n’est pas un objet JSON encodé en "
 "base64"
 
-#: src/scm/webid-oidc/jws.scm:210
+#: src/scm/webid-oidc/jws.scm:211
 msgid "the JWS is not signed by any of the expected set of public keys"
 msgstr "le JWS n’est signé par aucune des clés attendues"
 
-#: src/scm/webid-oidc/jws.scm:221
+#: src/scm/webid-oidc/jws.scm:222
 #, scheme-format
 msgid "while verifying the JWS signature: ~a"
 msgstr "en vérifiant la signature du JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:223
+#: src/scm/webid-oidc/jws.scm:224
 msgid "an unexpected error happened while verifying a JWS"
 msgstr "une erreur inattendue est survenue pendant la vérification d’un JWS"
 
-#: src/scm/webid-oidc/jws.scm:240
+#: src/scm/webid-oidc/jws.scm:253
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr "impossible de décoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:242
+#: src/scm/webid-oidc/jws.scm:255
 msgid "cannot decode a JWS"
 msgstr "impossible de décoder un JWS"
 
-#: src/scm/webid-oidc/jws.scm:262
+#: src/scm/webid-oidc/jws.scm:272
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr "impossible d’encoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:264
+#: src/scm/webid-oidc/jws.scm:274
 msgid "cannot encode a JWS"
 msgstr "impossible d’encoder un JWS"
 
@@ -1310,25 +1302,25 @@ msgstr "« solid_oidc_supported » doit valoir ~s, pas ~s"
 msgid "invalid JSON object"
 msgstr "objet JSON invalide"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:174
+#: src/scm/webid-oidc/oidc-configuration.scm:178
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr "impossible de télécharger la configuration OIDC : ~a"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:176
+#: src/scm/webid-oidc/oidc-configuration.scm:180
 msgid "cannot fetch the OIDC configuration"
 msgstr "impossible de télécharger la configuration OIDC"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:184
+#: src/scm/webid-oidc/oidc-configuration.scm:188
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr "le serveur a répondu ~s ~s"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:189
+#: src/scm/webid-oidc/oidc-configuration.scm:193
 msgid "there is no content-type"
 msgstr "il n’y a pas de type de contenu"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:194
+#: src/scm/webid-oidc/oidc-configuration.scm:198
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr "type de contenu inattendu : ~s"
@@ -2563,6 +2555,34 @@ msgstr ""
 "supporté.</p>"
 
 #, scheme-format
+#~ msgid "unknown key type ~s"
+#~ msgstr "type de clé inconnu ~s"
+
+#, scheme-format
+#~ msgid "the public JWK is invalid: ~a"
+#~ msgstr "la clé publique JWK est invalide : ~a"
+
+#~ msgid "the public JWK is invalid"
+#~ msgstr "la clé publique JWK est invalide"
+
+#, scheme-format
+#~ msgid "cannot extract the public part of the key: ~a"
+#~ msgstr "impossible d’extraire la partie publique de la clé : ~a"
+
+#~ msgid "cannot extract the public part of the key"
+#~ msgstr "impossible d’extraire la partie publique de la clé"
+
+#~ msgid "the JWKS is invalid, because it does not have keys"
+#~ msgstr "le JWKS est invalide, parce qu’il n’a pas de clés"
+
+#, scheme-format
+#~ msgid "the JWKS is invalid: ~a"
+#~ msgstr "le JWKS est invalide : ~a"
+
+#~ msgid "the JWKS is invalid"
+#~ msgstr "le JWKS est invalide"
+
+#, scheme-format
 #~ msgid ""
 #~ "Usage: ~a COMMAND [OPTIONS]...\n"
 #~ "See --~a (-h).\n"