JWK: the default signature algorithm "alg" is now a key parameter

2 files changed, 140 insertions, 140 deletions

diff --git a/po/disfluid.pot b/po/disfluid.pot
index e933d84..cd8eb7d 100644
--- a/po/disfluid.pot
+++ b/po/disfluid.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: disfluid SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-17 18:38+0200\n"
+"POT-Creation-Date: 2021-09-17 18:39+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -141,21 +141,21 @@ msgid "this is not an access token"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:101
-#: src/scm/webid-oidc/authorization-code.scm:88
-#: src/scm/webid-oidc/oidc-id-token.scm:96
+#: src/scm/webid-oidc/authorization-code.scm:89
+#: src/scm/webid-oidc/oidc-id-token.scm:97
 #, scheme-format
 msgid "the payload is missing ~s"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:123
-#: src/scm/webid-oidc/authorization-code.scm:104
-#: src/scm/webid-oidc/oidc-id-token.scm:117
+#: src/scm/webid-oidc/authorization-code.scm:105
+#: src/scm/webid-oidc/oidc-id-token.scm:118
 #, scheme-format
 msgid "the \"webid\" field should be an URI, ~s is given"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:130
-#: src/scm/webid-oidc/oidc-id-token.scm:124
+#: src/scm/webid-oidc/oidc-id-token.scm:125
 #, scheme-format
 msgid "the \"iss\" field should be an URI, ~s is given"
 msgstr ""
@@ -166,14 +166,14 @@ msgid "the \"aud\" field should be set to \"solid\", ~s is given"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:142
-#: src/scm/webid-oidc/oidc-id-token.scm:152
+#: src/scm/webid-oidc/oidc-id-token.scm:153
 #, scheme-format
 msgid "the \"iat\" field should be a timestamp, ~s is given"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:149
-#: src/scm/webid-oidc/authorization-code.scm:125
-#: src/scm/webid-oidc/oidc-id-token.scm:159
+#: src/scm/webid-oidc/authorization-code.scm:126
+#: src/scm/webid-oidc/oidc-id-token.scm:160
 #, scheme-format
 msgid "the \"exp\" field should be a timestamp, ~s is given"
 msgstr ""
@@ -193,7 +193,7 @@ msgid "the \"cnf\" field should be an object, ~s is given"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:178
-#: src/scm/webid-oidc/authorization-code.scm:111
+#: src/scm/webid-oidc/authorization-code.scm:112
 #, scheme-format
 msgid "the \"client_id\" field should be an URI, ~s is given"
 msgstr ""
@@ -208,13 +208,13 @@ msgid "the access token is invalid"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:257
-#: src/scm/webid-oidc/oidc-id-token.scm:236
+#: src/scm/webid-oidc/oidc-id-token.scm:237
 #, scheme-format
 msgid "I cannot query the identity provider configuration: ~a"
 msgstr ""
 
 #: src/scm/webid-oidc/access-token.scm:259
-#: src/scm/webid-oidc/oidc-id-token.scm:238
+#: src/scm/webid-oidc/oidc-id-token.scm:239
 msgid "I cannot query the identity provider configuratioon"
 msgstr ""
 
@@ -246,56 +246,56 @@ msgstr ""
 msgid "cannot encode the access token"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:63
+#: src/scm/webid-oidc/authorization-code.scm:64
 #, scheme-format
 msgid "this is not an authorization code, because it is not even a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:65
+#: src/scm/webid-oidc/authorization-code.scm:66
 msgid "this is not an authorization code, because it is not even a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:68
+#: src/scm/webid-oidc/authorization-code.scm:69
 #, scheme-format
 msgid "this is not an authorization code: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:70
+#: src/scm/webid-oidc/authorization-code.scm:71
 msgid "this is not an authorization code"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:118
+#: src/scm/webid-oidc/authorization-code.scm:119
 #, scheme-format
 msgid "the \"jti\" field should be a string, ~s is given"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:170
+#: src/scm/webid-oidc/authorization-code.scm:171
 #, scheme-format
 msgid "the authorization code is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:172
+#: src/scm/webid-oidc/authorization-code.scm:173
 msgid "the authorization code is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:186
+#: src/scm/webid-oidc/authorization-code.scm:187
 #, scheme-format
 msgid "the authorization expired ~a, which is in the past (from ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:202
+#: src/scm/webid-oidc/authorization-code.scm:203
 #, scheme-format
 msgid "cannot encode the authorization code: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:204
+#: src/scm/webid-oidc/authorization-code.scm:205
 msgid "cannot encode the authorization code"
 msgstr ""
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:143
+#: src/scm/webid-oidc/identity-provider.scm:139
 #: src/scm/webid-oidc/token-endpoint.scm:111
 #: src/scm/webid-oidc/token-endpoint.scm:137
 #: src/scm/webid-oidc/token-endpoint.scm:164
@@ -477,78 +477,78 @@ msgstr ""
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:285
+#: src/scm/webid-oidc/client/accounts.scm:282
 msgid "The refresh token has expired."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:292
+#: src/scm/webid-oidc/client/accounts.scm:289
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:301
+#: src/scm/webid-oidc/client/accounts.scm:298
 msgid "The token response did not set the content type."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:309
+#: src/scm/webid-oidc/client/accounts.scm:306
 msgid "The token endpoint did not respond in UTF-8."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:321
+#: src/scm/webid-oidc/client/accounts.scm:318
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:331
+#: src/scm/webid-oidc/client/accounts.scm:328
 msgid "The token response is not valid JSON."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:345
+#: src/scm/webid-oidc/client/accounts.scm:342
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:353
+#: src/scm/webid-oidc/client/accounts.scm:350
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:364
+#: src/scm/webid-oidc/client/accounts.scm:361
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:366
+#: src/scm/webid-oidc/client/accounts.scm:363
 msgid "the ID token signature is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:384
+#: src/scm/webid-oidc/client/accounts.scm:381
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:394
+#: src/scm/webid-oidc/client/accounts.scm:391
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:409
+#: src/scm/webid-oidc/client/accounts.scm:406
 msgid "The issuer is required."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:414
+#: src/scm/webid-oidc/client/accounts.scm:411
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:450
+#: src/scm/webid-oidc/client/accounts.scm:447
 msgid "Cannot check the username and/or password."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:460
+#: src/scm/webid-oidc/client/accounts.scm:457
 msgid "The subject should be a string or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:474
+#: src/scm/webid-oidc/client/accounts.scm:471
 msgid "The issuer should be a string or URI."
 msgstr ""
 
@@ -1031,7 +1031,7 @@ msgstr ""
 msgid "Warning: generating a new key pair."
 msgstr ""
 
-#: src/scm/webid-oidc/identity-provider.scm:136
+#: src/scm/webid-oidc/identity-provider.scm:132
 msgid "reason-phrase|Not Found"
 msgstr ""
 
@@ -1040,59 +1040,59 @@ msgstr ""
 msgid "a replay has been detected with JTI ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:143
+#: src/scm/webid-oidc/jwk.scm:144
 msgid "the point and scalar are not on the same curve"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:238
+#: src/scm/webid-oidc/jwk.scm:256
 #, scheme-format
 msgid "the JWK is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:240
+#: src/scm/webid-oidc/jwk.scm:258
 msgid "the JWK is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:249
+#: src/scm/webid-oidc/jwk.scm:267
 msgid "cannot compute the key type"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:308
+#: src/scm/webid-oidc/jwk.scm:328
 msgid "it is built as an RSA key or key pair, but it is not"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:316
+#: src/scm/webid-oidc/jwk.scm:336
 msgid "it is built as an elliptic curve key or key pair, but it is not"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:357
+#: src/scm/webid-oidc/jwk.scm:378
 #, scheme-format
 msgid "the key advertises a key type of ~s, but actually it is ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:396
+#: src/scm/webid-oidc/jwk.scm:427
 msgid "this is neither a RSA key nor an elliptic curve key"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:433
+#: src/scm/webid-oidc/jwk.scm:464
 #, scheme-format
 msgid "cannot fetch a JWKS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:435
+#: src/scm/webid-oidc/jwk.scm:466
 msgid "cannot fetch a JWKS"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:439
+#: src/scm/webid-oidc/jwk.scm:470
 #, scheme-format
 msgid "the request failed with ~s ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:444
+#: src/scm/webid-oidc/jwk.scm:475
 msgid "missing content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:449
+#: src/scm/webid-oidc/jwk.scm:480
 #, scheme-format
 msgid "invalid content-type: ~s"
 msgstr ""
@@ -1239,77 +1239,77 @@ msgstr ""
 msgid "unexpected content-type: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:67
+#: src/scm/webid-oidc/oidc-id-token.scm:68
 #, scheme-format
 msgid "this is not an ID token, because it is not even a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:70
+#: src/scm/webid-oidc/oidc-id-token.scm:71
 msgid "this is not an ID token, because it is not even a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-id-token.scm:73
 #, scheme-format
 msgid "this is not an ID token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:75
+#: src/scm/webid-oidc/oidc-id-token.scm:76
 msgid "this is not an ID token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:131
+#: src/scm/webid-oidc/oidc-id-token.scm:132
 #, scheme-format
 msgid "the \"sub\" field should be a string, ~s is given"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:138
+#: src/scm/webid-oidc/oidc-id-token.scm:139
 #, scheme-format
 msgid "the \"aud\" field should be an URI, ~s is given"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:145
+#: src/scm/webid-oidc/oidc-id-token.scm:146
 #, scheme-format
 msgid "the \"nonce\" field should be a string, ~s is given"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:165
+#: src/scm/webid-oidc/oidc-id-token.scm:166
 msgid "the payload should be a JSON object"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:218
+#: src/scm/webid-oidc/oidc-id-token.scm:219
 #, scheme-format
 msgid "the ID token is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:220
+#: src/scm/webid-oidc/oidc-id-token.scm:221
 msgid "the ID token is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:258
+#: src/scm/webid-oidc/oidc-id-token.scm:259
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:260
+#: src/scm/webid-oidc/oidc-id-token.scm:261
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:271
+#: src/scm/webid-oidc/oidc-id-token.scm:272
 #, scheme-format
 msgid "the ID token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:280
+#: src/scm/webid-oidc/oidc-id-token.scm:281
 #, scheme-format
 msgid "the ID token expired ~a, which is in the past (from ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:294
+#: src/scm/webid-oidc/oidc-id-token.scm:295
 #, scheme-format
 msgid "cannot encode the ID token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:296
+#: src/scm/webid-oidc/oidc-id-token.scm:297
 msgid "cannot encode the ID token"
 msgstr ""
 
diff --git a/po/fr.po b/po/fr.po
index 0b7b882..15b615d 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,7 +2,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-17 18:38+0200\n"
+"POT-Creation-Date: 2021-09-17 18:39+0200\n"
 "PO-Revision-Date: 2021-09-17 18:38+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
@@ -145,21 +145,21 @@ msgid "this is not an access token"
 msgstr "ce n’est pas un jeton d’accès"
 
 #: src/scm/webid-oidc/access-token.scm:101
-#: src/scm/webid-oidc/authorization-code.scm:88
-#: src/scm/webid-oidc/oidc-id-token.scm:96
+#: src/scm/webid-oidc/authorization-code.scm:89
+#: src/scm/webid-oidc/oidc-id-token.scm:97
 #, scheme-format
 msgid "the payload is missing ~s"
 msgstr "il manque ~s à la charge utile"
 
 #: src/scm/webid-oidc/access-token.scm:123
-#: src/scm/webid-oidc/authorization-code.scm:104
-#: src/scm/webid-oidc/oidc-id-token.scm:117
+#: src/scm/webid-oidc/authorization-code.scm:105
+#: src/scm/webid-oidc/oidc-id-token.scm:118
 #, scheme-format
 msgid "the \"webid\" field should be an URI, ~s is given"
 msgstr "le champ « webid » doit être une URI, pas ~s"
 
 #: src/scm/webid-oidc/access-token.scm:130
-#: src/scm/webid-oidc/oidc-id-token.scm:124
+#: src/scm/webid-oidc/oidc-id-token.scm:125
 #, scheme-format
 msgid "the \"iss\" field should be an URI, ~s is given"
 msgstr "le champ « iss » doit être une URI, pas ~s"
@@ -170,14 +170,14 @@ msgid "the \"aud\" field should be set to \"solid\", ~s is given"
 msgstr "le champ « aud » doit être « solid », pas ~s"
 
 #: src/scm/webid-oidc/access-token.scm:142
-#: src/scm/webid-oidc/oidc-id-token.scm:152
+#: src/scm/webid-oidc/oidc-id-token.scm:153
 #, scheme-format
 msgid "the \"iat\" field should be a timestamp, ~s is given"
 msgstr "le champ « iat » doit être un horodatage, pas ~s"
 
 #: src/scm/webid-oidc/access-token.scm:149
-#: src/scm/webid-oidc/authorization-code.scm:125
-#: src/scm/webid-oidc/oidc-id-token.scm:159
+#: src/scm/webid-oidc/authorization-code.scm:126
+#: src/scm/webid-oidc/oidc-id-token.scm:160
 #, scheme-format
 msgid "the \"exp\" field should be a timestamp, ~s is given"
 msgstr "le champ « exp » doit être un horodatage, pas ~s"
@@ -197,7 +197,7 @@ msgid "the \"cnf\" field should be an object, ~s is given"
 msgstr "le champ « cnf » doit être un objet JSON, pas ~s"
 
 #: src/scm/webid-oidc/access-token.scm:178
-#: src/scm/webid-oidc/authorization-code.scm:111
+#: src/scm/webid-oidc/authorization-code.scm:112
 #, scheme-format
 msgid "the \"client_id\" field should be an URI, ~s is given"
 msgstr "le champ « client_id » doit être une URI, pas ~s"
@@ -212,14 +212,14 @@ msgid "the access token is invalid"
 msgstr "le jeton d’accès est invalide"
 
 #: src/scm/webid-oidc/access-token.scm:257
-#: src/scm/webid-oidc/oidc-id-token.scm:236
+#: src/scm/webid-oidc/oidc-id-token.scm:237
 #, scheme-format
 msgid "I cannot query the identity provider configuration: ~a"
 msgstr ""
 "je ne peux pas requêter la configuration du fournisseur d’identité : ~a"
 
 #: src/scm/webid-oidc/access-token.scm:259
-#: src/scm/webid-oidc/oidc-id-token.scm:238
+#: src/scm/webid-oidc/oidc-id-token.scm:239
 msgid "I cannot query the identity provider configuratioon"
 msgstr "je ne peux pas requêter la configurration du fournisseur d’identité"
 
@@ -254,59 +254,59 @@ msgstr "impossible d’encoder le jeton d’accès : ~a"
 msgid "cannot encode the access token"
 msgstr "impossible d’encoder le jeton d’accès"
 
-#: src/scm/webid-oidc/authorization-code.scm:63
+#: src/scm/webid-oidc/authorization-code.scm:64
 #, scheme-format
 msgid "this is not an authorization code, because it is not even a JWS: ~a"
 msgstr ""
 "ce n’est pas un code d’autorisation, parce que ce n’est même pas un JWS : ~a"
 
-#: src/scm/webid-oidc/authorization-code.scm:65
+#: src/scm/webid-oidc/authorization-code.scm:66
 msgid "this is not an authorization code, because it is not even a JWS"
 msgstr ""
 "ce n’est pas un code d’autorisation, parce que ce n’est même pas un JWS"
 
-#: src/scm/webid-oidc/authorization-code.scm:68
+#: src/scm/webid-oidc/authorization-code.scm:69
 #, scheme-format
 msgid "this is not an authorization code: ~a"
 msgstr "ce n’est pas un code d’autorisation : ~a"
 
-#: src/scm/webid-oidc/authorization-code.scm:70
+#: src/scm/webid-oidc/authorization-code.scm:71
 msgid "this is not an authorization code"
 msgstr "ce n’est pas un code d’autorisation"
 
-#: src/scm/webid-oidc/authorization-code.scm:118
+#: src/scm/webid-oidc/authorization-code.scm:119
 #, scheme-format
 msgid "the \"jti\" field should be a string, ~s is given"
 msgstr "le champ « jti » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/authorization-code.scm:170
+#: src/scm/webid-oidc/authorization-code.scm:171
 #, scheme-format
 msgid "the authorization code is invalid: ~a"
 msgstr "le code d’autorisation est invalide : ~a"
 
-#: src/scm/webid-oidc/authorization-code.scm:172
+#: src/scm/webid-oidc/authorization-code.scm:173
 msgid "the authorization code is invalid"
 msgstr "le code d’autorisation est invalide"
 
-#: src/scm/webid-oidc/authorization-code.scm:186
+#: src/scm/webid-oidc/authorization-code.scm:187
 #, scheme-format
 msgid "the authorization expired ~a, which is in the past (from ~a)"
 msgstr ""
 "le code d’autorisation a expiré le ~a, qui est dans le passé (depuis ~a)"
 
-#: src/scm/webid-oidc/authorization-code.scm:202
+#: src/scm/webid-oidc/authorization-code.scm:203
 #, scheme-format
 msgid "cannot encode the authorization code: ~a"
 msgstr "impossible d’encoder le code d’autorisation : ~a"
 
-#: src/scm/webid-oidc/authorization-code.scm:204
+#: src/scm/webid-oidc/authorization-code.scm:205
 msgid "cannot encode the authorization code"
 msgstr "impossible d’encoder le code d’autorisation"
 
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:52
 #: src/scm/webid-oidc/hello-world.scm:40 src/scm/webid-oidc/hello-world.scm:167
 #: src/scm/webid-oidc/hello-world.scm:187
-#: src/scm/webid-oidc/identity-provider.scm:143
+#: src/scm/webid-oidc/identity-provider.scm:139
 #: src/scm/webid-oidc/token-endpoint.scm:111
 #: src/scm/webid-oidc/token-endpoint.scm:137
 #: src/scm/webid-oidc/token-endpoint.scm:164
@@ -497,83 +497,83 @@ msgstr "impossible de télécharger le manifeste client ~s"
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr "le manifeste client est déréférencé depuis ~s, mais il prétend être ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:285
+#: src/scm/webid-oidc/client/accounts.scm:282
 msgid "The refresh token has expired."
 msgstr "le jeton de rafraîchissement a expiré."
 
-#: src/scm/webid-oidc/client/accounts.scm:292
+#: src/scm/webid-oidc/client/accounts.scm:289
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr "La requête de jeton a échoué avec un code ~s (~s)."
 
-#: src/scm/webid-oidc/client/accounts.scm:301
+#: src/scm/webid-oidc/client/accounts.scm:298
 msgid "The token response did not set the content type."
 msgstr "Le jeton de réponse n’a pas défini de type de contenu."
 
-#: src/scm/webid-oidc/client/accounts.scm:309
+#: src/scm/webid-oidc/client/accounts.scm:306
 msgid "The token endpoint did not respond in UTF-8."
 msgstr "Le terminal de jetonn n’a pas répondu en UTF-8."
 
-#: src/scm/webid-oidc/client/accounts.scm:321
+#: src/scm/webid-oidc/client/accounts.scm:318
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr "La réponse de jeton a un type de contenu ~s, pas application/json."
 
-#: src/scm/webid-oidc/client/accounts.scm:331
+#: src/scm/webid-oidc/client/accounts.scm:328
 msgid "The token response is not valid JSON."
 msgstr "La réponse de jeton n’est pas un JSON valide."
 
-#: src/scm/webid-oidc/client/accounts.scm:345
+#: src/scm/webid-oidc/client/accounts.scm:342
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’ID : ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:353
+#: src/scm/webid-oidc/client/accounts.scm:350
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’accès : ~s\n"
 
-#: src/scm/webid-oidc/client/accounts.scm:364
+#: src/scm/webid-oidc/client/accounts.scm:361
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr "la signature du jeton d’ID est invalide : ~a"
 
-#: src/scm/webid-oidc/client/accounts.scm:366
+#: src/scm/webid-oidc/client/accounts.scm:363
 msgid "the ID token signature is invalid"
 msgstr "la signature du jeton d’ID est invalide"
 
-#: src/scm/webid-oidc/client/accounts.scm:384
+#: src/scm/webid-oidc/client/accounts.scm:381
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 "le jeton d’ID délivré par le fournisseur d’identité pour ~s a ~s pour webid"
 
-#: src/scm/webid-oidc/client/accounts.scm:394
+#: src/scm/webid-oidc/client/accounts.scm:391
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 "Le jeton d’ID délivré par le fournisseur d’identité ~s est pour l’émetteur "
 "~s."
 
-#: src/scm/webid-oidc/client/accounts.scm:409
+#: src/scm/webid-oidc/client/accounts.scm:406
 msgid "The issuer is required."
 msgstr "L’émetteur est requis."
 
-#: src/scm/webid-oidc/client/accounts.scm:414
+#: src/scm/webid-oidc/client/accounts.scm:411
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 "Le sujet optionnel et émetteur doivent être des chaînes de caractère ou des "
 "URIs."
 
-#: src/scm/webid-oidc/client/accounts.scm:450
+#: src/scm/webid-oidc/client/accounts.scm:447
 msgid "Cannot check the username and/or password."
 msgstr "Impossible de vérifier le nom d’utilisateur et/ou le mot de passe."
 
-#: src/scm/webid-oidc/client/accounts.scm:460
+#: src/scm/webid-oidc/client/accounts.scm:457
 msgid "The subject should be a string or URI."
 msgstr "Le sujet doit être une chaîne de caractères ou une URI."
 
-#: src/scm/webid-oidc/client/accounts.scm:474
+#: src/scm/webid-oidc/client/accounts.scm:471
 msgid "The issuer should be a string or URI."
 msgstr "L’émetteur doit être une chaîne de caractères ou une URI."
 
@@ -1114,7 +1114,7 @@ msgstr ""
 msgid "Warning: generating a new key pair."
 msgstr "Attention : génération d'une nouvelle paire de clé."
 
-#: src/scm/webid-oidc/identity-provider.scm:136
+#: src/scm/webid-oidc/identity-provider.scm:132
 msgid "reason-phrase|Not Found"
 msgstr "Non Trouvé"
 
@@ -1123,63 +1123,63 @@ msgstr "Non Trouvé"
 msgid "a replay has been detected with JTI ~s"
 msgstr "une redite a été détectée avec le JTI ~s"
 
-#: src/scm/webid-oidc/jwk.scm:143
+#: src/scm/webid-oidc/jwk.scm:144
 msgid "the point and scalar are not on the same curve"
 msgstr "le point et le scalaire ne sont pas sur la même courbe elliptique"
 
-#: src/scm/webid-oidc/jwk.scm:238
+#: src/scm/webid-oidc/jwk.scm:256
 #, scheme-format
 msgid "the JWK is invalid: ~a"
 msgstr "le JWK est invalide : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:240
+#: src/scm/webid-oidc/jwk.scm:258
 msgid "the JWK is invalid"
 msgstr "le JWK est invalide"
 
-#: src/scm/webid-oidc/jwk.scm:249
+#: src/scm/webid-oidc/jwk.scm:267
 msgid "cannot compute the key type"
 msgstr "impossible de calculer le type de clé"
 
-#: src/scm/webid-oidc/jwk.scm:308
+#: src/scm/webid-oidc/jwk.scm:328
 msgid "it is built as an RSA key or key pair, but it is not"
 msgstr ""
 "elle est construite comme une clé ou paire de clés RSA, mais ce n’en est pas "
 "une"
 
-#: src/scm/webid-oidc/jwk.scm:316
+#: src/scm/webid-oidc/jwk.scm:336
 msgid "it is built as an elliptic curve key or key pair, but it is not"
 msgstr ""
 "elle est construite comme une clé ou paire de clés sur une courbe "
 "elliptique, mais ce n’en est pas une"
 
-#: src/scm/webid-oidc/jwk.scm:357
+#: src/scm/webid-oidc/jwk.scm:378
 #, scheme-format
 msgid "the key advertises a key type of ~s, but actually it is ~s"
 msgstr "la clé publie un type de clé ~s, mais c’est en fait ~s"
 
-#: src/scm/webid-oidc/jwk.scm:396
+#: src/scm/webid-oidc/jwk.scm:427
 msgid "this is neither a RSA key nor an elliptic curve key"
 msgstr "ce n’est ni une clé RSA ni une clé sur une courbe elliptique"
 
-#: src/scm/webid-oidc/jwk.scm:433
+#: src/scm/webid-oidc/jwk.scm:464
 #, scheme-format
 msgid "cannot fetch a JWKS: ~a"
 msgstr "impossible de télécharger un JWKS : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:435
+#: src/scm/webid-oidc/jwk.scm:466
 msgid "cannot fetch a JWKS"
 msgstr "impossible de télécharger un JWKS"
 
-#: src/scm/webid-oidc/jwk.scm:439
+#: src/scm/webid-oidc/jwk.scm:470
 #, scheme-format
 msgid "the request failed with ~s ~s"
 msgstr "la requête a échoué avec ~s ~s"
 
-#: src/scm/webid-oidc/jwk.scm:444
+#: src/scm/webid-oidc/jwk.scm:475
 msgid "missing content-type"
 msgstr "type de contenu manquant"
 
-#: src/scm/webid-oidc/jwk.scm:449
+#: src/scm/webid-oidc/jwk.scm:480
 #, scheme-format
 msgid "invalid content-type: ~s"
 msgstr "type de contenu invalide : ~s"
@@ -1330,78 +1330,78 @@ msgstr "il n’y a pas de type de contenu"
 msgid "unexpected content-type: ~s"
 msgstr "type de contenu inattendu : ~s"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:67
+#: src/scm/webid-oidc/oidc-id-token.scm:68
 #, scheme-format
 msgid "this is not an ID token, because it is not even a JWS: ~a"
 msgstr "ce n’est pas un jeton d’ID, parce que ce n’est même pas un JWS : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:70
+#: src/scm/webid-oidc/oidc-id-token.scm:71
 msgid "this is not an ID token, because it is not even a JWS"
 msgstr "ce n’est pas un jeton d’ID, parce que ce n’est même pas un JWS"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-id-token.scm:73
 #, scheme-format
 msgid "this is not an ID token: ~a"
 msgstr "ce n’est pas un jeton d’ID : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:75
+#: src/scm/webid-oidc/oidc-id-token.scm:76
 msgid "this is not an ID token"
 msgstr "ce n’est pas un jeton d’ID"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:131
+#: src/scm/webid-oidc/oidc-id-token.scm:132
 #, scheme-format
 msgid "the \"sub\" field should be a string, ~s is given"
 msgstr "le champ « sub » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:138
+#: src/scm/webid-oidc/oidc-id-token.scm:139
 #, scheme-format
 msgid "the \"aud\" field should be an URI, ~s is given"
 msgstr "le champ « aud » doit être une URI, pas ~s"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:145
+#: src/scm/webid-oidc/oidc-id-token.scm:146
 #, scheme-format
 msgid "the \"nonce\" field should be a string, ~s is given"
 msgstr "le champ « nonce » doit être une chaîne de caractères, pas ~s"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:165
+#: src/scm/webid-oidc/oidc-id-token.scm:166
 msgid "the payload should be a JSON object"
 msgstr "la charge utile doit être un objet JSON"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:218
+#: src/scm/webid-oidc/oidc-id-token.scm:219
 #, scheme-format
 msgid "the ID token is invalid: ~a"
 msgstr "le jeton d’ID est invalide : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:220
+#: src/scm/webid-oidc/oidc-id-token.scm:221
 msgid "the ID token is invalid"
 msgstr "le jeton d’ID est invalide"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:258
+#: src/scm/webid-oidc/oidc-id-token.scm:259
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr "je ne peux pas requêter l’URI de JWKS du fournisseur d’identité : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:260
+#: src/scm/webid-oidc/oidc-id-token.scm:261
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr "impossible de requêter l’URI de JWKS du fournisseur d’identité"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:271
+#: src/scm/webid-oidc/oidc-id-token.scm:272
 #, scheme-format
 msgid "the ID token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 "le jeton d’ID est signé dans le futur, ~a, par rapport à la date courante, ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:280
+#: src/scm/webid-oidc/oidc-id-token.scm:281
 #, scheme-format
 msgid "the ID token expired ~a, which is in the past (from ~a)"
 msgstr "le jeton d’ID a expiré le ~a, qui est dans le passé (depuis ~a)"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:294
+#: src/scm/webid-oidc/oidc-id-token.scm:295
 #, scheme-format
 msgid "cannot encode the ID token: ~a"
 msgstr "impossible d’encoder le jeton d’ID : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:296
+#: src/scm/webid-oidc/oidc-id-token.scm:297
 msgid "cannot encode the ID token"
 msgstr "impossible d’encoder le jeton d’ID"