Define the access token API

2 files changed, 275 insertions, 156 deletions

diff --git a/po/fr.po b/po/fr.po
index a72ae43..4444391 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -126,96 +126,96 @@ msgstr "Utilisation : generate-random [NOMBRE D'OCTETS]\n"
 msgid "Usage: generate-key [NUMBER OF BITS | CURVE]\n"
 msgstr "Utilisation : generate-key [NOMBRE DE BITS | COURBE]\n"
 
-#: src/scm/webid-oidc/errors.scm:238
+#: src/scm/webid-oidc/errors.scm:378
 msgid "that’s how it is"
 msgstr "c’est comme ça"
 
-#: src/scm/webid-oidc/errors.scm:243
+#: src/scm/webid-oidc/errors.scm:383
 #, scheme-format
 msgid "the value ~s is not a base64 string (because ~a)"
 msgstr "la valeur ~s n’est pas une chaîne base64 (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:246
+#: src/scm/webid-oidc/errors.scm:386
 #, scheme-format
 msgid "the value ~s is not JSON (because ~a)"
 msgstr "la valeur ~s n’est pas du JSON (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:249
+#: src/scm/webid-oidc/errors.scm:389
 #, scheme-format
 msgid "the value ~s does not identify an elleptic curve"
 msgstr "la valeur ~s n’identifie pas une courbe elliptique"
 
-#: src/scm/webid-oidc/errors.scm:254
+#: src/scm/webid-oidc/errors.scm:394
 #, scheme-format
 msgid "the value ~s does not identify a JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:256
+#: src/scm/webid-oidc/errors.scm:396
 #, scheme-format
 msgid "the value ~s does not identify a JWK"
 msgstr "la valeur ~s n’identifie pas une JWK"
 
-#: src/scm/webid-oidc/errors.scm:261
+#: src/scm/webid-oidc/errors.scm:401
 #, scheme-format
 msgid "the value ~s does not identify a public JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK publique (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:263
+#: src/scm/webid-oidc/errors.scm:403
 #, scheme-format
 msgid "the value ~s does not identify a public JWK"
 msgstr "la valeur ~s n’identifie pas une JWK publique"
 
-#: src/scm/webid-oidc/errors.scm:268
+#: src/scm/webid-oidc/errors.scm:408
 #, scheme-format
 msgid "the value ~s does not identify a private JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK privée (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:270
+#: src/scm/webid-oidc/errors.scm:410
 #, scheme-format
 msgid "the value ~s does not identify a private JWK"
 msgstr "la valeur ~s n’identifie pas une JWK privée"
 
-#: src/scm/webid-oidc/errors.scm:275
+#: src/scm/webid-oidc/errors.scm:415
 #, scheme-format
 msgid "the value ~s does not identify a JWKS (because ~a)"
 msgstr "la valeur ~s n’identifie pas un JWKS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:277
+#: src/scm/webid-oidc/errors.scm:417
 #, scheme-format
 msgid "the value ~s does not identify a JWKS"
 msgstr "la valeur ~s n’identifie pas un JWKS"
 
-#: src/scm/webid-oidc/errors.scm:280
+#: src/scm/webid-oidc/errors.scm:420
 #, scheme-format
 msgid "the value ~s does not identify a hash algorithm"
 msgstr "la valeur ~s n’identifie pas un algorithme de hachage"
 
-#: src/scm/webid-oidc/errors.scm:283
+#: src/scm/webid-oidc/errors.scm:423
 #, scheme-format
 msgid "the value ~s is not an alist or misses key ~s"
 msgstr "la valeur ~s n’est pas une alist ou il manque la clé ~s"
 
-#: src/scm/webid-oidc/errors.scm:286
+#: src/scm/webid-oidc/errors.scm:426
 #, scheme-format
 msgid "the value ~s is not a JWS header (because ~a)"
 msgstr "la valeur ~s n’est pas un header JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:289
+#: src/scm/webid-oidc/errors.scm:429
 #, scheme-format
 msgid "the value ~s is not a JWS payload (because ~a)"
 msgstr "la valeur ~s n’est pas un contenu JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:292
+#: src/scm/webid-oidc/errors.scm:432
 #, scheme-format
 msgid "the value ~s is not a JWS (because ~a)"
 msgstr "la valeur ~s n’est pas un JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:295
+#: src/scm/webid-oidc/errors.scm:435
 #, scheme-format
 msgid "the string ~s cannot be split in 3 parts with ~s"
 msgstr "la chaîne ~s ne peut pas être découpée en 3 parties avec ~s"
 
-#: src/scm/webid-oidc/errors.scm:298
+#: src/scm/webid-oidc/errors.scm:438
 #, scheme-format
 msgid ""
 "all key candidates failed to verify signature ~s with algorithm ~s and "
@@ -224,17 +224,17 @@ msgstr ""
 "aucune clé candidate n’a pu vérifier la signature ~s avec l’algorithme ~s et "
 "le contenu ~a (il y en avait ~a : ~s)"
 
-#: src/scm/webid-oidc/errors.scm:301
+#: src/scm/webid-oidc/errors.scm:441
 #, scheme-format
 msgid "I cannot decode JWS ~a (because ~a)"
 msgstr "je n’ai pas pu décoder le JWS encodé par ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:304
+#: src/scm/webid-oidc/errors.scm:444
 #, scheme-format
 msgid "I cannot encode JWS ~a (because ~a)"
 msgstr "je n’ai pas pu encoder le JWS ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:307
+#: src/scm/webid-oidc/errors.scm:447
 #, scheme-format
 msgid ""
 "the server request unexpectedly failed with code ~a and reason phrase ~s"
@@ -242,78 +242,179 @@ msgstr ""
 "la requête au serveur a échoué de façon inattendue avec un code ~a et une "
 "raison ~s"
 
-#: src/scm/webid-oidc/errors.scm:312
+#: src/scm/webid-oidc/errors.scm:452
 #, scheme-format
 msgid "the header ~a should not have the value ~s"
 msgstr "l’en-tête ~a ne devrait pas avoir la valeur ~s"
 
-#: src/scm/webid-oidc/errors.scm:314
+#: src/scm/webid-oidc/errors.scm:454
 #, scheme-format
 msgid "the header ~a should be present"
 msgstr "l’en-tête ~a devrait être présent"
 
-#: src/scm/webid-oidc/errors.scm:317
+#: src/scm/webid-oidc/errors.scm:457
 #, scheme-format
 msgid "the server response wasn't expected: ~s (because ~a)"
 msgstr "la réponse du serveur est inattendue : ~s (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:323
+#: src/scm/webid-oidc/errors.scm:463
 #, scheme-format
 msgid "the value ~s is not an OIDC configuration (because ~a)"
 msgstr "la valeur ~s n’est pas une configuration OIDC (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:328
+#: src/scm/webid-oidc/errors.scm:468
+#, scheme-format
+msgid "the webid field is incorrect: ~s"
+msgstr "le champ webid est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:469
+msgid "the webid field is missing"
+msgstr "le champ webid est manquant"
+
+#: src/scm/webid-oidc/errors.scm:473
+#, scheme-format
+msgid "the iss field is incorrect: ~s"
+msgstr "le champ iss est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:474
+msgid "the iss field is missing"
+msgstr "le champ iss est manquant"
+
+#: src/scm/webid-oidc/errors.scm:478
+#, scheme-format
+msgid "the aud field is incorrect: ~s"
+msgstr "le champ aud est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:479
+msgid "the aud field is missing"
+msgstr "le champ aud est manquant"
+
+#: src/scm/webid-oidc/errors.scm:483
+#, scheme-format
+msgid "the iat field is incorrect: ~s"
+msgstr "le champ iat est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:484
+msgid "the iat field is missing"
+msgstr "le champ iat est manquant"
+
+#: src/scm/webid-oidc/errors.scm:488
+#, scheme-format
+msgid "the exp field is incorrect: ~s"
+msgstr "le champ exp est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:489
+msgid "the exp field is missing"
+msgstr "le champ exp est manquant"
+
+#: src/scm/webid-oidc/errors.scm:493
+#, scheme-format
+msgid "the cnf/jkt field is incorrect: ~s"
+msgstr "le champ cnf/jkt est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:494
+msgid "the cnf/jkt field is missing"
+msgstr "le champ cnf/jkt est manquant"
+
+#: src/scm/webid-oidc/errors.scm:498
+#, scheme-format
+msgid "the client-id field is incorrect: ~s"
+msgstr "le champ client-id est incorrect : ~s"
+
+#: src/scm/webid-oidc/errors.scm:499
+msgid "the client-id field is missing"
+msgstr "le champ client-id est manquant"
+
+#: src/scm/webid-oidc/errors.scm:501
+#, scheme-format
+msgid "~s is not an access token (because ~a)"
+msgstr "~s n’est pas un jeton d’accès (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:504
+#, scheme-format
+msgid "~s is not an access token header (because ~a)"
+msgstr "~s n’est pas un en-tête de jeton d’accès (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:507
+#, scheme-format
+msgid "~s is not an access token payload (because ~a)"
+msgstr "~s n’est pas un contenu de jeton d’accès (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:510
+#, scheme-format
+msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
+msgstr ""
+"je n’ai pas pu récupérer la configuration de l’émetteur ~a (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:517
+#, scheme-format
+msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
+msgstr "je n’ai pas pu récupérer le JWKS de ~a à ~a (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:528
+#, scheme-format
+msgid "I cannot decode ~s as an access token (because ~a)"
+msgstr "je n’ai pas pu décoder ~s comme jeton d’accès (parce que ~a)"
+
+#: src/scm/webid-oidc/errors.scm:531
+#, scheme-format
+msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
+msgstr ""
+"je n’ai pas pu encoder ~s comme un jeton d’accès avec la clé ~s (parce que "
+"~a)"
+
+#: src/scm/webid-oidc/errors.scm:536
 msgid "that’s it"
 msgstr "c’est tout"
 
-#: src/scm/webid-oidc/errors.scm:332
+#: src/scm/webid-oidc/errors.scm:540
 #, scheme-format
 msgid "~a and ~a"
 msgstr "~a et ~a"
 
-#: src/scm/webid-oidc/errors.scm:335
+#: src/scm/webid-oidc/errors.scm:543
 #, scheme-format
 msgid "~a, ~a"
 msgstr "~a, ~a"
 
-#: src/scm/webid-oidc/errors.scm:339
+#: src/scm/webid-oidc/errors.scm:547
 #, scheme-format
 msgid "the signature ~a does not match key ~s with payload ~a"
 msgstr "la signature ~a ne correspond pas à la clé ~s avec le contenu ~a"
 
-#: src/scm/webid-oidc/errors.scm:342
+#: src/scm/webid-oidc/errors.scm:550
 msgid "there is an undefined variable"
 msgstr "il y a une variable non définie"
 
-#: src/scm/webid-oidc/errors.scm:344
+#: src/scm/webid-oidc/errors.scm:552
 #, scheme-format
 msgid "the origin is ~a"
 msgstr "l’origine est ~a"
 
-#: src/scm/webid-oidc/errors.scm:347
+#: src/scm/webid-oidc/errors.scm:555
 #, scheme-format
 msgid "a message is attached: ~a"
 msgstr "un message est attaché : ~a"
 
-#: src/scm/webid-oidc/errors.scm:350
+#: src/scm/webid-oidc/errors.scm:558
 #, scheme-format
 msgid "the values ~s are problematic"
 msgstr "les valeurs ~s sont problématiques"
 
-#: src/scm/webid-oidc/errors.scm:353
+#: src/scm/webid-oidc/errors.scm:561
 msgid "there is a kind and args"
 msgstr "il y a un type et des arguments"
 
-#: src/scm/webid-oidc/errors.scm:355
+#: src/scm/webid-oidc/errors.scm:563
 msgid "there is an assertion failure"
 msgstr "il y a un échec d’assertion"
 
-#: src/scm/webid-oidc/errors.scm:357
+#: src/scm/webid-oidc/errors.scm:565
 #, scheme-format
 msgid "the program quits with code ~a"
 msgstr "le programme quitte avec le code ~a"
 
-#: src/scm/webid-oidc/errors.scm:360
+#: src/scm/webid-oidc/errors.scm:568
 #, scheme-format
 msgid "Unhandled exception type ~a."
 msgstr "Type d’exception non pris en charge ~a."
@@ -323,13 +424,6 @@ msgstr "Type d’exception non pris en charge ~a."
 #~ msgstr "la valeur ~s n’est pas du Turtle (parce que ~a)"
 
 #, scheme-format
-#~ msgid "the webid field is incorrect: ~s"
-#~ msgstr "le champ webid est incorrect : ~s"
-
-#~ msgid "the webid field is missing"
-#~ msgstr "le champ webid est manquant"
-
-#, scheme-format
 #~ msgid "the sub field is incorrect: ~s"
 #~ msgstr "le champ sub est incorrect : ~s"
 
@@ -337,48 +431,6 @@ msgstr "Type d’exception non pris en charge ~a."
 #~ msgstr "le champ sub est manquant"
 
 #, scheme-format
-#~ msgid "the iss field is incorrect: ~s"
-#~ msgstr "le champ iss est incorrect : ~s"
-
-#~ msgid "the iss field is missing"
-#~ msgstr "le champ iss est manquant"
-
-#, scheme-format
-#~ msgid "the aud field is incorrect: ~s"
-#~ msgstr "le champ aud est incorrect : ~s"
-
-#~ msgid "the aud field is missing"
-#~ msgstr "le champ aud est manquant"
-
-#, scheme-format
-#~ msgid "the iat field is incorrect: ~s"
-#~ msgstr "le champ iat est incorrect : ~s"
-
-#~ msgid "the iat field is missing"
-#~ msgstr "le champ iat est manquant"
-
-#, scheme-format
-#~ msgid "the exp field is incorrect: ~s"
-#~ msgstr "le champ exp est incorrect : ~s"
-
-#~ msgid "the exp field is missing"
-#~ msgstr "le champ exp est manquant"
-
-#, scheme-format
-#~ msgid "the cnf/jkt field is incorrect: ~s"
-#~ msgstr "le champ cnf/jkt est incorrect : ~s"
-
-#~ msgid "the cnf/jkt field is missing"
-#~ msgstr "le champ cnf/jkt est manquant"
-
-#, scheme-format
-#~ msgid "the client-id field is incorrect: ~s"
-#~ msgstr "le champ client-id est incorrect : ~s"
-
-#~ msgid "the client-id field is missing"
-#~ msgstr "le champ client-id est manquant"
-
-#, scheme-format
 #~ msgid "the redirect_uris field is incorrect: ~s"
 #~ msgstr "le champ redirect_uris est incorrect : ~s"
 
@@ -428,18 +480,6 @@ msgstr "Type d’exception non pris en charge ~a."
 #~ msgstr "le champ htu est manquant"
 
 #, scheme-format
-#~ msgid "~s is not an access token (because ~a)"
-#~ msgstr "~s n’est pas un jeton d’accès (parce que ~a)"
-
-#, scheme-format
-#~ msgid "~s is not an access token header (because ~a)"
-#~ msgstr "~s n’est pas un en-tête de jeton d’accès (parce que ~a)"
-
-#, scheme-format
-#~ msgid "~s is not an access token payload (because ~a)"
-#~ msgstr "~s n’est pas un contenu de jeton d’accès (parce que ~a)"
-
-#, scheme-format
 #~ msgid "~s is not a DPoP proof (because ~a)"
 #~ msgstr "~s n’est pas une preuve DPoP (parce que ~a)"
 
@@ -452,15 +492,6 @@ msgstr "Type d’exception non pris en charge ~a."
 #~ msgstr "~s n’est pas un contenu de preuve DPoP (parce que ~a)"
 
 #, scheme-format
-#~ msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
-#~ msgstr ""
-#~ "je n’ai pas pu récupérer la configuration de l’émetteur ~a (parce que ~a)"
-
-#, scheme-format
-#~ msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
-#~ msgstr "je n’ai pas pu récupérer le JWKS de ~a à ~a (parce que ~a)"
-
-#, scheme-format
 #~ msgid "the HTTP method is signed for ~s, but ~s was requested"
 #~ msgstr "la méthode HTTP a été signée pour ~s, mais ~s a été demandé"
 
@@ -495,16 +526,6 @@ msgstr "Type d’exception non pris en charge ~a."
 #~ msgstr "le jti ~s a déjà été trouvé (parce que ~a)"
 
 #, scheme-format
-#~ msgid "I cannot decode ~s as an access token (because ~a)"
-#~ msgstr "je n’ai pas pu décoder ~s comme jeton d’accès (parce que ~a)"
-
-#, scheme-format
-#~ msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
-#~ msgstr ""
-#~ "je n’ai pas pu encoder ~s comme un jeton d’accès avec la clé ~s (parce "
-#~ "que ~a)"
-
-#, scheme-format
 #~ msgid "I cannot decode ~s as a DPoP proof (because ~a)"
 #~ msgstr "je n’ai pas pu décoder ~s comme preuve DPoP (parce que ~a)"
 
diff --git a/po/webid-oidc.pot b/po/webid-oidc.pot
index f442518..e008e38 100644
--- a/po/webid-oidc.pot
+++ b/po/webid-oidc.pot
@@ -122,190 +122,288 @@ msgstr ""
 msgid "Usage: generate-key [NUMBER OF BITS | CURVE]\n"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:238
+#: src/scm/webid-oidc/errors.scm:378
 msgid "that’s how it is"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:243
+#: src/scm/webid-oidc/errors.scm:383
 #, scheme-format
 msgid "the value ~s is not a base64 string (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:246
+#: src/scm/webid-oidc/errors.scm:386
 #, scheme-format
 msgid "the value ~s is not JSON (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:249
+#: src/scm/webid-oidc/errors.scm:389
 #, scheme-format
 msgid "the value ~s does not identify an elleptic curve"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:254
+#: src/scm/webid-oidc/errors.scm:394
 #, scheme-format
 msgid "the value ~s does not identify a JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:256
+#: src/scm/webid-oidc/errors.scm:396
 #, scheme-format
 msgid "the value ~s does not identify a JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:261
+#: src/scm/webid-oidc/errors.scm:401
 #, scheme-format
 msgid "the value ~s does not identify a public JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:263
+#: src/scm/webid-oidc/errors.scm:403
 #, scheme-format
 msgid "the value ~s does not identify a public JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:268
+#: src/scm/webid-oidc/errors.scm:408
 #, scheme-format
 msgid "the value ~s does not identify a private JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:270
+#: src/scm/webid-oidc/errors.scm:410
 #, scheme-format
 msgid "the value ~s does not identify a private JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:275
+#: src/scm/webid-oidc/errors.scm:415
 #, scheme-format
 msgid "the value ~s does not identify a JWKS (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:277
+#: src/scm/webid-oidc/errors.scm:417
 #, scheme-format
 msgid "the value ~s does not identify a JWKS"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:280
+#: src/scm/webid-oidc/errors.scm:420
 #, scheme-format
 msgid "the value ~s does not identify a hash algorithm"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:283
+#: src/scm/webid-oidc/errors.scm:423
 #, scheme-format
 msgid "the value ~s is not an alist or misses key ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:286
+#: src/scm/webid-oidc/errors.scm:426
 #, scheme-format
 msgid "the value ~s is not a JWS header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:289
+#: src/scm/webid-oidc/errors.scm:429
 #, scheme-format
 msgid "the value ~s is not a JWS payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:292
+#: src/scm/webid-oidc/errors.scm:432
 #, scheme-format
 msgid "the value ~s is not a JWS (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:295
+#: src/scm/webid-oidc/errors.scm:435
 #, scheme-format
 msgid "the string ~s cannot be split in 3 parts with ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:298
+#: src/scm/webid-oidc/errors.scm:438
 #, scheme-format
 msgid ""
 "all key candidates failed to verify signature ~s with algorithm ~s and "
 "payload ~a (there were ~a: ~s)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:301
+#: src/scm/webid-oidc/errors.scm:441
 #, scheme-format
 msgid "I cannot decode JWS ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:304
+#: src/scm/webid-oidc/errors.scm:444
 #, scheme-format
 msgid "I cannot encode JWS ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:307
+#: src/scm/webid-oidc/errors.scm:447
 #, scheme-format
 msgid ""
 "the server request unexpectedly failed with code ~a and reason phrase ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:312
+#: src/scm/webid-oidc/errors.scm:452
 #, scheme-format
 msgid "the header ~a should not have the value ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:314
+#: src/scm/webid-oidc/errors.scm:454
 #, scheme-format
 msgid "the header ~a should be present"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:317
+#: src/scm/webid-oidc/errors.scm:457
 #, scheme-format
 msgid "the server response wasn't expected: ~s (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:323
+#: src/scm/webid-oidc/errors.scm:463
 #, scheme-format
 msgid "the value ~s is not an OIDC configuration (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:328
+#: src/scm/webid-oidc/errors.scm:468
+#, scheme-format
+msgid "the webid field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:469
+msgid "the webid field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:473
+#, scheme-format
+msgid "the iss field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:474
+msgid "the iss field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:478
+#, scheme-format
+msgid "the aud field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:479
+msgid "the aud field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:483
+#, scheme-format
+msgid "the iat field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:484
+msgid "the iat field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:488
+#, scheme-format
+msgid "the exp field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:489
+msgid "the exp field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:493
+#, scheme-format
+msgid "the cnf/jkt field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:494
+msgid "the cnf/jkt field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:498
+#, scheme-format
+msgid "the client-id field is incorrect: ~s"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:499
+msgid "the client-id field is missing"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:501
+#, scheme-format
+msgid "~s is not an access token (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:504
+#, scheme-format
+msgid "~s is not an access token header (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:507
+#, scheme-format
+msgid "~s is not an access token payload (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:510
+#, scheme-format
+msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:517
+#, scheme-format
+msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:528
+#, scheme-format
+msgid "I cannot decode ~s as an access token (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:531
+#, scheme-format
+msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
+msgstr ""
+
+#: src/scm/webid-oidc/errors.scm:536
 msgid "that’s it"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:332
+#: src/scm/webid-oidc/errors.scm:540
 #, scheme-format
 msgid "~a and ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:335
+#: src/scm/webid-oidc/errors.scm:543
 #, scheme-format
 msgid "~a, ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:339
+#: src/scm/webid-oidc/errors.scm:547
 #, scheme-format
 msgid "the signature ~a does not match key ~s with payload ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:342
+#: src/scm/webid-oidc/errors.scm:550
 msgid "there is an undefined variable"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:344
+#: src/scm/webid-oidc/errors.scm:552
 #, scheme-format
 msgid "the origin is ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:347
+#: src/scm/webid-oidc/errors.scm:555
 #, scheme-format
 msgid "a message is attached: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:350
+#: src/scm/webid-oidc/errors.scm:558
 #, scheme-format
 msgid "the values ~s are problematic"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:353
+#: src/scm/webid-oidc/errors.scm:561
 msgid "there is a kind and args"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:355
+#: src/scm/webid-oidc/errors.scm:563
 msgid "there is an assertion failure"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:357
+#: src/scm/webid-oidc/errors.scm:565
 #, scheme-format
 msgid "the program quits with code ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:360
+#: src/scm/webid-oidc/errors.scm:568
 #, scheme-format
 msgid "Unhandled exception type ~a."
 msgstr ""