OIDC configuration: use GOOPS and document it

2 files changed, 187 insertions, 170 deletions

diff --git a/po/disfluid.pot b/po/disfluid.pot
index 7702c98..6c39980 100644
--- a/po/disfluid.pot
+++ b/po/disfluid.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: disfluid SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-21 22:30+0200\n"
+"POT-Creation-Date: 2021-09-21 22:31+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -122,34 +122,34 @@ msgid ""
 "webid_oidc_random_init first.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:73
+#: src/scm/webid-oidc/access-token.scm:72
 #, scheme-format
 msgid "invalid access token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:75
+#: src/scm/webid-oidc/access-token.scm:74
 msgid "invalid access token"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:117
+#: src/scm/webid-oidc/access-token.scm:116
 #: src/scm/webid-oidc/authorization-code.scm:93
-#: src/scm/webid-oidc/oidc-id-token.scm:100
+#: src/scm/webid-oidc/oidc-id-token.scm:99
 msgid "#:webid should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:122
+#: src/scm/webid-oidc/access-token.scm:121
 msgid "#:client-id should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:127
+#: src/scm/webid-oidc/access-token.scm:126
 msgid "#:cnf/jkt should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:132
+#: src/scm/webid-oidc/access-token.scm:131
 msgid "#:aud should be exactly \"solid\""
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:150
+#: src/scm/webid-oidc/access-token.scm:149
 msgid ""
 "when making an access token either its required fields (#:alg, #:webid, #:"
 "iss, #:aud, #:client-id, #:cnf/jkt, #:iat and #:exp) or (#:jwt-header and #:"
@@ -178,7 +178,7 @@ msgstr ""
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:139
+#: src/scm/webid-oidc/identity-provider.scm:140
 #: src/scm/webid-oidc/token-endpoint.scm:113
 #: src/scm/webid-oidc/token-endpoint.scm:139
 #: src/scm/webid-oidc/token-endpoint.scm:166
@@ -241,7 +241,7 @@ msgid "The application you are trying to authorize behaved unexpectedly."
 msgstr ""
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:126
-#: src/scm/webid-oidc/resource-server.scm:311
+#: src/scm/webid-oidc/resource-server.scm:310
 msgid "reason-phrase|Found"
 msgstr ""
 
@@ -435,33 +435,33 @@ msgstr ""
 msgid "The issuer should be a string or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:229
+#: src/scm/webid-oidc/client/application.scm:228
 #, scheme-format
 msgid "Add an account on ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:244
+#: src/scm/webid-oidc/client/application.scm:243
 #, scheme-format
 msgid ""
 "You already have an account for ~a issued by ~a and it is currently selected."
 msgstr ""
 
-#: src/scm/webid-oidc/client/application.scm:263
+#: src/scm/webid-oidc/client/application.scm:262
 #, scheme-format
 msgid "You already have an account for ~a issued by ~a."
 msgstr ""
 
-#: src/scm/webid-oidc/client/client.scm:108
+#: src/scm/webid-oidc/client/client.scm:107
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
 msgstr ""
 
-#: src/scm/webid-oidc/client/gui.scm:59
+#: src/scm/webid-oidc/client/gui.scm:58
 msgid "Hello, world!\n"
 msgstr ""
 
-#: src/scm/webid-oidc/client/gui.scm:64
+#: src/scm/webid-oidc/client/gui.scm:63
 msgid "Hello, world!"
 msgstr ""
 
@@ -829,7 +829,7 @@ msgid "The port should be a number between 0 and 65535.\n"
 msgstr ""
 
 #: src/scm/webid-oidc/hello-world.scm:159
-#: src/scm/webid-oidc/resource-server.scm:332
+#: src/scm/webid-oidc/resource-server.scm:331
 msgid "reason-phrase|Unauthorized"
 msgstr ""
 
@@ -842,7 +842,7 @@ msgid "<p>This page requires authentication with Solid.</p>"
 msgstr ""
 
 #: src/scm/webid-oidc/hello-world.scm:179
-#: src/scm/webid-oidc/resource-server.scm:340
+#: src/scm/webid-oidc/resource-server.scm:339
 msgid "reason-phrase|Method Not Allowed"
 msgstr ""
 
@@ -854,11 +854,11 @@ msgstr ""
 msgid "<p>You can only use the <emph>GET</emph> method on this resource.</p>"
 msgstr ""
 
-#: src/scm/webid-oidc/identity-provider.scm:76
+#: src/scm/webid-oidc/identity-provider.scm:77
 msgid "Warning: generating a new key pair."
 msgstr ""
 
-#: src/scm/webid-oidc/identity-provider.scm:132
+#: src/scm/webid-oidc/identity-provider.scm:133
 msgid "reason-phrase|Not Found"
 msgstr ""
 
@@ -1007,126 +1007,117 @@ msgstr ""
 msgid "I cannot query the identity provider configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:505
+#: src/scm/webid-oidc/jws.scm:501
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:507
+#: src/scm/webid-oidc/jws.scm:503
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:535
+#: src/scm/webid-oidc/jws.scm:528
 #, scheme-format
 msgid "the token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:544
+#: src/scm/webid-oidc/jws.scm:537
 #, scheme-format
 msgid "the token expired ~a, which is in the past (from ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:567
+#: src/scm/webid-oidc/jws.scm:560
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:569
+#: src/scm/webid-oidc/jws.scm:562
 msgid "cannot decode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:587
+#: src/scm/webid-oidc/jws.scm:580
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:589
+#: src/scm/webid-oidc/jws.scm:582
 msgid "cannot encode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:636
+#: src/scm/webid-oidc/jws.scm:629
 msgid "cannot parse a token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:59
-#, scheme-format
-msgid "the OIDC configuration is invalid: ~a"
-msgstr ""
-
-#: src/scm/webid-oidc/oidc-configuration.scm:61
-msgid "the OIDC configuration is invalid"
-msgstr ""
-
-#: src/scm/webid-oidc/oidc-configuration.scm:77
-#, scheme-format
-msgid "the OIDC configuration does not have: ~s"
-msgstr ""
-
-#: src/scm/webid-oidc/oidc-configuration.scm:92
-#, scheme-format
-msgid "invalid JWKS URI: ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:120
+msgid "#:jwks-uri should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:99
-#, scheme-format
-msgid "invalid token endpoint: ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:125
+msgid "#:token-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:108
-#, scheme-format
-msgid "invalid authorization endpoint: ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:130
+msgid "#:authorization-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:116
-#, scheme-format
-msgid "\"solid_oidc_supported\" should be set to ~s, not ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:135
+msgid ""
+"#:solid-oidc-supported should be exactly 'https://solidproject.org/TR/solid-"
+"oidc'"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:124
-msgid "invalid JSON object"
+#: src/scm/webid-oidc/oidc-configuration.scm:144
+msgid "#:server should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:178
+#: src/scm/webid-oidc/oidc-configuration.scm:161
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:180
+#: src/scm/webid-oidc/oidc-configuration.scm:163
 msgid "cannot fetch the OIDC configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:188
+#: src/scm/webid-oidc/oidc-configuration.scm:167
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:193
+#: src/scm/webid-oidc/oidc-configuration.scm:172
 msgid "there is no content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:198
+#: src/scm/webid-oidc/oidc-configuration.scm:177
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-configuration.scm:187
+msgid ""
+"when making an OIDC configuration, either its required #:jwks-uri, #:"
+"authorization-endpoint and #:token-endpoint fields or #:server (and "
+"optionally #:http-request) or #:json-data should be passed"
+msgstr ""
+
+#: src/scm/webid-oidc/oidc-id-token.scm:71
 #, scheme-format
 msgid "invalid OIDC ID token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:74
+#: src/scm/webid-oidc/oidc-id-token.scm:73
 msgid "invalid OIDC id token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:105
+#: src/scm/webid-oidc/oidc-id-token.scm:104
 msgid "#:sub should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:110
+#: src/scm/webid-oidc/oidc-id-token.scm:109
 msgid "#:aud should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:126
+#: src/scm/webid-oidc/oidc-id-token.scm:125
 msgid ""
 "when making an ID token either its required fields (#:alg, #:webid, #:iss, #:"
 "sub, #:aud, #:iat and #:exp) or (#:jwt-header and #:jwt-payload) should be "
@@ -1854,63 +1845,63 @@ msgstr ""
 msgid "the refresh token is bound to key ~s, which is not that one"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:62
+#: src/scm/webid-oidc/resource-server.scm:61
 msgid ""
 "You need to pass #:server-uri URI where URI is the public URI of the server, "
 "as a (web uri)."
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:89
+#: src/scm/webid-oidc/resource-server.scm:88
 #, scheme-format
 msgid "~a: authentication failure: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:93
+#: src/scm/webid-oidc/resource-server.scm:92
 #, scheme-format
 msgid "~a: authentication failure\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:172
-#: src/scm/webid-oidc/resource-server.scm:363
+#: src/scm/webid-oidc/resource-server.scm:171
+#: src/scm/webid-oidc/resource-server.scm:362
 msgid "reason-phrase|Precondition Failed"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:187
+#: src/scm/webid-oidc/resource-server.scm:186
 msgid "reason-phrase|Not Modified"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:203
+#: src/scm/webid-oidc/resource-server.scm:202
 msgid "The owner is not defined."
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:275
+#: src/scm/webid-oidc/resource-server.scm:274
 msgid "reason-phrase|Created"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:300
+#: src/scm/webid-oidc/resource-server.scm:299
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:304
+#: src/scm/webid-oidc/resource-server.scm:303
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:328
+#: src/scm/webid-oidc/resource-server.scm:327
 #: src/scm/webid-oidc/token-endpoint.scm:105
 msgid "reason-phrase|Forbidden"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:349
+#: src/scm/webid-oidc/resource-server.scm:348
 msgid "reason-phrase|Conflict"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:356
+#: src/scm/webid-oidc/resource-server.scm:355
 msgid "reason-phrase|Unsupported Media Type"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:370
+#: src/scm/webid-oidc/resource-server.scm:369
 msgid "reason-phrase|Not Acceptable"
 msgstr ""
 
diff --git a/po/fr.po b/po/fr.po
index a13197e..8d7727d 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-21 22:30+0200\n"
-"PO-Revision-Date: 2021-09-21 22:30+0200\n"
+"POT-Creation-Date: 2021-09-21 22:31+0200\n"
+"PO-Revision-Date: 2021-09-21 22:33+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
 "Language: fr\n"
@@ -126,34 +126,34 @@ msgstr ""
 "Le module aléatoire n'a pas été initialisé. Veuillez appeler "
 "webid_oidc_random_init d'abort.\n"
 
-#: src/scm/webid-oidc/access-token.scm:73
+#: src/scm/webid-oidc/access-token.scm:72
 #, scheme-format
 msgid "invalid access token: ~a"
 msgstr "jeton d’accès invalide : ~a"
 
-#: src/scm/webid-oidc/access-token.scm:75
+#: src/scm/webid-oidc/access-token.scm:74
 msgid "invalid access token"
 msgstr "jeton d’accès invalide"
 
-#: src/scm/webid-oidc/access-token.scm:117
+#: src/scm/webid-oidc/access-token.scm:116
 #: src/scm/webid-oidc/authorization-code.scm:93
-#: src/scm/webid-oidc/oidc-id-token.scm:100
+#: src/scm/webid-oidc/oidc-id-token.scm:99
 msgid "#:webid should be an URI"
 msgstr "#:webid doit être une URI"
 
-#: src/scm/webid-oidc/access-token.scm:122
+#: src/scm/webid-oidc/access-token.scm:121
 msgid "#:client-id should be an URI"
 msgstr "#:client-id doit être une URI"
 
-#: src/scm/webid-oidc/access-token.scm:127
+#: src/scm/webid-oidc/access-token.scm:126
 msgid "#:cnf/jkt should be a string"
 msgstr "#:cnf/jkt doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/access-token.scm:132
+#: src/scm/webid-oidc/access-token.scm:131
 msgid "#:aud should be exactly \"solid\""
 msgstr "#:aud doit être exactement « solid »"
 
-#: src/scm/webid-oidc/access-token.scm:150
+#: src/scm/webid-oidc/access-token.scm:149
 msgid ""
 "when making an access token either its required fields (#:alg, #:webid, #:"
 "iss, #:aud, #:client-id, #:cnf/jkt, #:iat and #:exp) or (#:jwt-header and #:"
@@ -187,7 +187,7 @@ msgstr ""
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:139
+#: src/scm/webid-oidc/identity-provider.scm:140
 #: src/scm/webid-oidc/token-endpoint.scm:113
 #: src/scm/webid-oidc/token-endpoint.scm:139
 #: src/scm/webid-oidc/token-endpoint.scm:166
@@ -251,7 +251,7 @@ msgstr ""
 "L’application que vous essayez d’autoriser se comporte de façon inattendue."
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:126
-#: src/scm/webid-oidc/resource-server.scm:311
+#: src/scm/webid-oidc/resource-server.scm:310
 msgid "reason-phrase|Found"
 msgstr "Trouvé"
 
@@ -458,12 +458,12 @@ msgstr "Le sujet doit être une chaîne de caractères ou une URI."
 msgid "The issuer should be a string or URI."
 msgstr "L’émetteur doit être une chaîne de caractères ou une URI."
 
-#: src/scm/webid-oidc/client/application.scm:229
+#: src/scm/webid-oidc/client/application.scm:228
 #, scheme-format
 msgid "Add an account on ~a"
 msgstr "Ajouter un compte sur ~a"
 
-#: src/scm/webid-oidc/client/application.scm:244
+#: src/scm/webid-oidc/client/application.scm:243
 #, scheme-format
 msgid ""
 "You already have an account for ~a issued by ~a and it is currently selected."
@@ -471,12 +471,12 @@ msgstr ""
 "Vous avez déjà un compte pour ~a émis par ~a et il est actuellement "
 "sélectionné."
 
-#: src/scm/webid-oidc/client/application.scm:263
+#: src/scm/webid-oidc/client/application.scm:262
 #, scheme-format
 msgid "You already have an account for ~a issued by ~a."
 msgstr "Vous avez déjà un compte pour ~a émis par ~a."
 
-#: src/scm/webid-oidc/client/client.scm:108
+#: src/scm/webid-oidc/client/client.scm:107
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
@@ -484,11 +484,11 @@ msgstr ""
 "L’ID de client et l’URI de redirection doivent être des URIs, et la paire de "
 "clés doit être une paire de clés."
 
-#: src/scm/webid-oidc/client/gui.scm:59
+#: src/scm/webid-oidc/client/gui.scm:58
 msgid "Hello, world!\n"
 msgstr "Bonjour, le monde !\n"
 
-#: src/scm/webid-oidc/client/gui.scm:64
+#: src/scm/webid-oidc/client/gui.scm:63
 msgid "Hello, world!"
 msgstr "Bonjour, le monde !"
 
@@ -906,7 +906,7 @@ msgid "The port should be a number between 0 and 65535.\n"
 msgstr "Le port doit être un nombre entre 0 et 65535.\n"
 
 #: src/scm/webid-oidc/hello-world.scm:159
-#: src/scm/webid-oidc/resource-server.scm:332
+#: src/scm/webid-oidc/resource-server.scm:331
 msgid "reason-phrase|Unauthorized"
 msgstr "Non Autorisé"
 
@@ -919,7 +919,7 @@ msgid "<p>This page requires authentication with Solid.</p>"
 msgstr "<p>Cette page requiert une authentification avec Solid.</p>"
 
 #: src/scm/webid-oidc/hello-world.scm:179
-#: src/scm/webid-oidc/resource-server.scm:340
+#: src/scm/webid-oidc/resource-server.scm:339
 msgid "reason-phrase|Method Not Allowed"
 msgstr "Méthode Non Autorisée"
 
@@ -933,11 +933,11 @@ msgstr ""
 "<p>Vous pouvez uniquement utiliser la méthode <emph>GET</emph> pour cette "
 "ressource.</p>"
 
-#: src/scm/webid-oidc/identity-provider.scm:76
+#: src/scm/webid-oidc/identity-provider.scm:77
 msgid "Warning: generating a new key pair."
 msgstr "Attention : génération d'une nouvelle paire de clé."
 
-#: src/scm/webid-oidc/identity-provider.scm:132
+#: src/scm/webid-oidc/identity-provider.scm:133
 msgid "reason-phrase|Not Found"
 msgstr "Non Trouvé"
 
@@ -1104,127 +1104,123 @@ msgstr ""
 msgid "I cannot query the identity provider configuration"
 msgstr "je ne peux pas requêter la configuration du fournisseur d’identité"
 
-#: src/scm/webid-oidc/jws.scm:505
+#: src/scm/webid-oidc/jws.scm:501
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr "je ne peux pas requêter l’URI de JWKS du fournisseur d’identité : ~a"
 
-#: src/scm/webid-oidc/jws.scm:507
+#: src/scm/webid-oidc/jws.scm:503
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr "impossible de requêter l’URI de JWKS du fournisseur d’identité"
 
-#: src/scm/webid-oidc/jws.scm:535
+#: src/scm/webid-oidc/jws.scm:528
 #, scheme-format
 msgid "the token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 "le jeton est signé dans le futur, ~a, par rapport à la date courante, ~a"
 
-#: src/scm/webid-oidc/jws.scm:544
+#: src/scm/webid-oidc/jws.scm:537
 #, scheme-format
 msgid "the token expired ~a, which is in the past (from ~a)"
 msgstr "le jeton a expiré le ~a, qui est dans le passé (depuis ~a)"
 
-#: src/scm/webid-oidc/jws.scm:567
+#: src/scm/webid-oidc/jws.scm:560
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr "impossible de décoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:569
+#: src/scm/webid-oidc/jws.scm:562
 msgid "cannot decode a JWS"
 msgstr "impossible de décoder un JWS"
 
-#: src/scm/webid-oidc/jws.scm:587
+#: src/scm/webid-oidc/jws.scm:580
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr "impossible d’encoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:589
+#: src/scm/webid-oidc/jws.scm:582
 msgid "cannot encode a JWS"
 msgstr "impossible d’encoder un JWS"
 
-#: src/scm/webid-oidc/jws.scm:636
+#: src/scm/webid-oidc/jws.scm:629
 msgid "cannot parse a token"
 msgstr "impossible d’analyser le jeton"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:59
-#, scheme-format
-msgid "the OIDC configuration is invalid: ~a"
-msgstr "la configuration OIDC est invalide : ~a"
-
-#: src/scm/webid-oidc/oidc-configuration.scm:61
-msgid "the OIDC configuration is invalid"
-msgstr "la configuration OIDC est invalide"
-
-#: src/scm/webid-oidc/oidc-configuration.scm:77
-#, scheme-format
-msgid "the OIDC configuration does not have: ~s"
-msgstr "il manque ~s à la configuration OIDC"
+#: src/scm/webid-oidc/oidc-configuration.scm:120
+msgid "#:jwks-uri should be an URI"
+msgstr "#:jwks-uri doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:92
-#, scheme-format
-msgid "invalid JWKS URI: ~s"
-msgstr "URI de JWKS invalide : ~s"
-
-#: src/scm/webid-oidc/oidc-configuration.scm:99
-#, scheme-format
-msgid "invalid token endpoint: ~s"
-msgstr "terminal de jeton invalide : ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:125
+msgid "#:token-endpoint should be an URI"
+msgstr "#:token-endpoint doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:108
-#, scheme-format
-msgid "invalid authorization endpoint: ~s"
-msgstr "terminal d’autorisation invalide : ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:130
+msgid "#:authorization-endpoint should be an URI"
+msgstr "#:authorization-endpoint doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:116
-#, scheme-format
-msgid "\"solid_oidc_supported\" should be set to ~s, not ~s"
-msgstr "« solid_oidc_supported » doit valoir ~s, pas ~s"
+#: src/scm/webid-oidc/oidc-configuration.scm:135
+msgid ""
+"#:solid-oidc-supported should be exactly 'https://solidproject.org/TR/solid-"
+"oidc'"
+msgstr ""
+"#:solid-oidc-supported doit être exactement « https://solidproject.org/TR/"
+"solid-oidc »"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:124
-msgid "invalid JSON object"
-msgstr "objet JSON invalide"
+#: src/scm/webid-oidc/oidc-configuration.scm:144
+msgid "#:server should be an URI"
+msgstr "#:server doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:178
+#: src/scm/webid-oidc/oidc-configuration.scm:161
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr "impossible de télécharger la configuration OIDC : ~a"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:180
+#: src/scm/webid-oidc/oidc-configuration.scm:163
 msgid "cannot fetch the OIDC configuration"
 msgstr "impossible de télécharger la configuration OIDC"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:188
+#: src/scm/webid-oidc/oidc-configuration.scm:167
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr "le serveur a répondu ~s ~s"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:193
+#: src/scm/webid-oidc/oidc-configuration.scm:172
 msgid "there is no content-type"
 msgstr "il n’y a pas de type de contenu"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:198
+#: src/scm/webid-oidc/oidc-configuration.scm:177
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr "type de contenu inattendu : ~s"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-configuration.scm:187
+msgid ""
+"when making an OIDC configuration, either its required #:jwks-uri, #:"
+"authorization-endpoint and #:token-endpoint fields or #:server (and "
+"optionally #:http-request) or #:json-data should be passed"
+msgstr ""
+"pour construire une configuration OIDC, il faut soit définir les paramètres "
+"requis #:jwks-uri, #:authorization-endpoint et #:token-endpoint, soit #:"
+"server (et potentiellement #:http-request), soit #:json-data"
+
+#: src/scm/webid-oidc/oidc-id-token.scm:71
 #, scheme-format
 msgid "invalid OIDC ID token: ~a"
 msgstr "jeton d’identité OIDC invalide : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:74
+#: src/scm/webid-oidc/oidc-id-token.scm:73
 msgid "invalid OIDC id token"
 msgstr "jeton d’identité OIDC invalide"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:105
+#: src/scm/webid-oidc/oidc-id-token.scm:104
 msgid "#:sub should be a string"
 msgstr "#:sub doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:110
+#: src/scm/webid-oidc/oidc-id-token.scm:109
 msgid "#:aud should be a string"
 msgstr "#:aud doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:126
+#: src/scm/webid-oidc/oidc-id-token.scm:125
 msgid ""
 "when making an ID token either its required fields (#:alg, #:webid, #:iss, #:"
 "sub, #:aud, #:iat and #:exp) or (#:jwt-header and #:jwt-payload) should be "
@@ -2198,7 +2194,7 @@ msgid "the refresh token is bound to key ~s, which is not that one"
 msgstr ""
 "le jeton de rafraîchissement est lié à la clé ~s, ce n’est pas celle utilisée"
 
-#: src/scm/webid-oidc/resource-server.scm:62
+#: src/scm/webid-oidc/resource-server.scm:61
 msgid ""
 "You need to pass #:server-uri URI where URI is the public URI of the server, "
 "as a (web uri)."
@@ -2206,57 +2202,57 @@ msgstr ""
 "Vous devez passer #:server-uri URI où URI est l’URI publique du serveur, "
 "comme dans (web uri)."
 
-#: src/scm/webid-oidc/resource-server.scm:89
+#: src/scm/webid-oidc/resource-server.scm:88
 #, scheme-format
 msgid "~a: authentication failure: ~a\n"
 msgstr "~a : échec d’authentificationn : ~a\n"
 
-#: src/scm/webid-oidc/resource-server.scm:93
+#: src/scm/webid-oidc/resource-server.scm:92
 #, scheme-format
 msgid "~a: authentication failure\n"
 msgstr "~a : échec d’authentification\n"
 
-#: src/scm/webid-oidc/resource-server.scm:172
-#: src/scm/webid-oidc/resource-server.scm:363
+#: src/scm/webid-oidc/resource-server.scm:171
+#: src/scm/webid-oidc/resource-server.scm:362
 msgid "reason-phrase|Precondition Failed"
 msgstr "Échec de Précondition"
 
-#: src/scm/webid-oidc/resource-server.scm:187
+#: src/scm/webid-oidc/resource-server.scm:186
 msgid "reason-phrase|Not Modified"
 msgstr "Non Modifié"
 
-#: src/scm/webid-oidc/resource-server.scm:203
+#: src/scm/webid-oidc/resource-server.scm:202
 msgid "The owner is not defined."
 msgstr "Le propriétaire n’est pas défini."
 
-#: src/scm/webid-oidc/resource-server.scm:275
+#: src/scm/webid-oidc/resource-server.scm:274
 msgid "reason-phrase|Created"
 msgstr "Créé"
 
-#: src/scm/webid-oidc/resource-server.scm:300
+#: src/scm/webid-oidc/resource-server.scm:299
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched: ~a\n"
 msgstr "~a : j’ignore un groupe qui n’a pas pu être téléchargé : ~a\n"
 
-#: src/scm/webid-oidc/resource-server.scm:304
+#: src/scm/webid-oidc/resource-server.scm:303
 #, scheme-format
 msgid "~a: ignoring a group that cannot be fetched\n"
 msgstr "~a : j’ignore un groupe qui ne peut pas être téléchargé\n"
 
-#: src/scm/webid-oidc/resource-server.scm:328
+#: src/scm/webid-oidc/resource-server.scm:327
 #: src/scm/webid-oidc/token-endpoint.scm:105
 msgid "reason-phrase|Forbidden"
 msgstr "Interdit"
 
-#: src/scm/webid-oidc/resource-server.scm:349
+#: src/scm/webid-oidc/resource-server.scm:348
 msgid "reason-phrase|Conflict"
 msgstr "Conflit"
 
-#: src/scm/webid-oidc/resource-server.scm:356
+#: src/scm/webid-oidc/resource-server.scm:355
 msgid "reason-phrase|Unsupported Media Type"
 msgstr "Type de Média Non Supporté"
 
-#: src/scm/webid-oidc/resource-server.scm:370
+#: src/scm/webid-oidc/resource-server.scm:369
 msgid "reason-phrase|Not Acceptable"
 msgstr "Inacceptable"
 
@@ -2389,6 +2385,36 @@ msgstr ""
 "supporté.</p>"
 
 #, scheme-format
+#~ msgid "the OIDC configuration is invalid: ~a"
+#~ msgstr "la configuration OIDC est invalide : ~a"
+
+#~ msgid "the OIDC configuration is invalid"
+#~ msgstr "la configuration OIDC est invalide"
+
+#, scheme-format
+#~ msgid "the OIDC configuration does not have: ~s"
+#~ msgstr "il manque ~s à la configuration OIDC"
+
+#, scheme-format
+#~ msgid "invalid JWKS URI: ~s"
+#~ msgstr "URI de JWKS invalide : ~s"
+
+#, scheme-format
+#~ msgid "invalid token endpoint: ~s"
+#~ msgstr "terminal de jeton invalide : ~s"
+
+#, scheme-format
+#~ msgid "invalid authorization endpoint: ~s"
+#~ msgstr "terminal d’autorisation invalide : ~s"
+
+#, scheme-format
+#~ msgid "\"solid_oidc_supported\" should be set to ~s, not ~s"
+#~ msgstr "« solid_oidc_supported » doit valoir ~s, pas ~s"
+
+#~ msgid "invalid JSON object"
+#~ msgstr "objet JSON invalide"
+
+#, scheme-format
 #~ msgid "this is not an access token, because it is not even a JWS: ~a"
 #~ msgstr ""
 #~ "ce n’est pas un jeton d’accès, parce que ce n’est même pas un JWS : ~a"