Implement an identity provider

3 files changed, 479 insertions, 222 deletions

diff --git a/po/POTFILES.in b/po/POTFILES.in
index 6ffff1e..ed66784 100644
--- a/po/POTFILES.in
+++ b/po/POTFILES.in
@@ -7,4 +7,5 @@ src/jwk/libwebidoidc-jwk.c
 src/jwk/generate-key.c
 src/hash/libwebidoidc-hash.c
 src/scm/webid-oidc/errors.scm
+src/scm/webid-oidc/identity-provider.scm
 src/scm/webid-oidc/authorization-page-unsafe.scm
diff --git a/po/fr.po b/po/fr.po
index ed6fea5..4713516 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,7 +2,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-06-05 16:16+0200\n"
+"POT-Creation-Date: 2021-06-05 16:17+0200\n"
 "PO-Revision-Date: 2021-06-05 11:07+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
@@ -697,6 +697,316 @@ msgstr "il y a une erreur"
 msgid "Unhandled exception type ~a."
 msgstr "Type d’exception non pris en charge ~a."
 
+#: src/scm/webid-oidc/identity-provider.scm:54
+msgid "Warning: generating a new key pair."
+msgstr "Attention : génération d'une nouvelle paire de clé."
+
+#: src/scm/webid-oidc/identity-provider.scm:148
+msgid "command-line|version"
+msgstr "version"
+
+#: src/scm/webid-oidc/identity-provider.scm:150
+msgid "comand-line|help"
+msgstr "aide"
+
+#: src/scm/webid-oidc/identity-provider.scm:152
+msgid "comand-line|issuer"
+msgstr "émetteur"
+
+#: src/scm/webid-oidc/identity-provider.scm:154
+msgid "comand-line|key-file"
+msgstr "fichier-clé"
+
+#: src/scm/webid-oidc/identity-provider.scm:156
+msgid "comand-line|subject"
+msgstr "sujet"
+
+#: src/scm/webid-oidc/identity-provider.scm:158
+msgid "comand-line|password"
+msgstr "mot-de-passe"
+
+#: src/scm/webid-oidc/identity-provider.scm:160
+msgid "comand-line|jwks-uri"
+msgstr "uri-jwks"
+
+#: src/scm/webid-oidc/identity-provider.scm:162
+msgid "comand-line|authorization-endpoint-uri"
+msgstr "uri-terminal-autorisation"
+
+#: src/scm/webid-oidc/identity-provider.scm:164
+msgid "comand-line|token-endpoint-uri"
+msgstr "uri-terminal-jeton"
+
+#: src/scm/webid-oidc/identity-provider.scm:166
+msgid "comand-line|port"
+msgstr "port"
+
+#: src/scm/webid-oidc/identity-provider.scm:168
+msgid "comand-line|log-file"
+msgstr "fichier-journal"
+
+#: src/scm/webid-oidc/identity-provider.scm:170
+msgid "comand-line|error-file"
+msgstr "fichier-erreur"
+
+#: src/scm/webid-oidc/identity-provider.scm:188
+#, fuzzy, scheme-format
+#| msgid ""
+#| "Usage: ~a [OPTIONS]...\n"
+#| "\n"
+#| "Run the Solid identity provider for a specific user.\n"
+#| "\n"
+#| "Options:\n"
+#| "  -h, --~a:\n"
+#| "      display this help message and exit.\n"
+#| "  -v, --~a:\n"
+#| "      display the version information (~a) and exit.\n"
+#| "  -i URI, --~a=URI:\n"
+#| "      set the public server host name.\n"
+#| "  -k FILE, --~a=FILE.jwk:\n"
+#| "      set the file name of the key file. If it does not exist, a new\n"
+#| "      key is generated.\n"
+#| "  -s WEBID, --~a=WEBID:\n"
+#| "      set the identity of the subject.\n"
+#| "  -w PASSWORD, --~a=PASSWORD:\n"
+#| "      set the password to recognize the user.\n"
+#| "  -j URI, --~a=URI:\n"
+#| "      set the URI to query the key of the server.\n"
+#| "  -a URI, --~a=URI:\n"
+#| "      set the authorization endpoint of the issuer.\n"
+#| "  -t URI, --~a=URI:\n"
+#| "      set the token endpoint of the issuer.\n"
+#| "  -p PORT, --~a=PORT:\n"
+#| "      set the port to bind (instead of 8080).\n"
+#| "  -l FILE.log, --~a=FILE.log:\n"
+#| "      dump the standard output to that file.\n"
+#| "  -e FILE.err, --~a=FILE.err:\n"
+#| "      dump the standard error to that file.\n"
+#| "\n"
+#| "Environment variables:\n"
+#| "\n"
+#| "  LANG: set the locale of the sysadmin-facing interface (the user\n"
+#| "pages are translated according to the user agent’s Accept-language\n"
+#| "header), for log files and command-line interface. It is currently ~a.\n"
+#| "\n"
+#| "  XDG_DATA_HOME: where to store the refresh tokens (under the\n"
+#| "webid-oidc directory). For a system service, it is recommended to set\n"
+#| "it to /var/lib. Currently set to ~a.\n"
+#| "\n"
+#| "  XDG_CACHE_HOME: where to store and update the seed file for the\n"
+#| "random number generator. If you remove it, you need to restart the\n"
+#| "program to use a different seed. Currently set to ~a.\n"
+#| "\n"
+#| "  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
+#| "computed from the value of the HOME environment variable. It is not\n"
+#| "used otherwise. Currently set to ~a.\n"
+#| "\n"
+#| "Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
+#| "by shepherd in reality):\n"
+#| "\n"
+#| "    export LANG=C\n"
+#| "    export XDG_DATA_HOME=/var/lib\n"
+#| "    export XDG_CACHE_HOME=/var/cache\n"
+#| "    webid-oidc-issuer \\\n"
+#| "      --issuer https://webid-oidc-demo.planete-kraus.eu \\\n"
+#| "      --key-file /var/lib/webid-oidc/issuer/key.jwk \\\n"
+#| "      --subject https://webid-oidc-demo.planete-kraus.eu/profile/card#me "
+#| "\\\n"
+#| "      --password \"$PASSWORD\" \\\n"
+#| "      --jwks-uri https://webid-oidc-demo.planete-kraus.eu/keys \\\n"
+#| "      --authorization-endpoint-uri https://webid-oidc-demo.planete-kraus."
+#| "eu/authorize \\\n"
+#| "      --token-endpoint-uri https://webid-oidc-demo.planete-kraus.eu/token "
+#| "\\\n"
+#| "      --port $PORT\n"
+#| "\n"
+#| "If you find a bug, send a report to ~a.\n"
+msgid ""
+"Usage: ~a [OPTIONS]...\n"
+"\n"
+"Run the Solid identity provider for a specific user.\n"
+"\n"
+"Options:\n"
+"  -h, --~a:\n"
+"      display this help message and exit.\n"
+"  -v, --~a:\n"
+"      display the version information (~a) and exit.\n"
+"  -i URI, --~a=URI:\n"
+"      set the public server host name.\n"
+"  -k FILE, --~a=FILE.jwk:\n"
+"      set the file name of the key file. If it does not exist, a new\n"
+"      key is generated.\n"
+"  -s WEBID, --~a=WEBID:\n"
+"      set the identity of the subject.\n"
+"  -w PASSWORD, --~a=PASSWORD:\n"
+"      set the password to recognize the user.\n"
+"  -j URI, --~a=URI:\n"
+"      set the URI to query the key of the server.\n"
+"  -a URI, --~a=URI:\n"
+"      set the authorization endpoint of the issuer.\n"
+"  -t URI, --~a=URI:\n"
+"      set the token endpoint of the issuer.\n"
+"  -p PORT, --~a=PORT:\n"
+"      set the port to bind (instead of 8080).\n"
+"  -l FILE.log, --~a=FILE.log:\n"
+"      dump the standard output to that file.\n"
+"  -e FILE.err, --~a=FILE.err:\n"
+"      dump the standard error to that file.\n"
+"\n"
+"Environment variables:\n"
+"\n"
+"  LANG: set the locale of the sysadmin-facing interface (the user\n"
+"pages are translated according to the user agent’s Accept-language\n"
+"header), for log files and command-line interface. It is currently ~a.\n"
+"\n"
+"  XDG_DATA_HOME: where to store the refresh tokens (under the\n"
+"webid-oidc directory). For a system service, it is recommended to set\n"
+"it to /var/lib. Currently set to ~a.\n"
+"\n"
+"  XDG_CACHE_HOME: where to store and update the seed file for the\n"
+"random number generator. If you remove it, you need to restart the\n"
+"program to use a different seed. Currently set to ~a.\n"
+"\n"
+"  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
+"computed from the value of the HOME environment variable. It is not\n"
+"used otherwise. Currently set to ~a.\n"
+"\n"
+"Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
+"by shepherd in reality):\n"
+"\n"
+"    export LANG=C\n"
+"    export XDG_DATA_HOME=/var/lib\n"
+"    export XDG_CACHE_HOME=/var/cache\n"
+"    webid-oidc-issuer \\\n"
+"      --issuer https://webid-oidc-demo.planete-kraus.eu \\\n"
+"      --key-file /var/lib/webid-oidc/issuer/key.jwk \\\n"
+"      --subject https://webid-oidc-demo.planete-kraus.eu/profile/card#me \\\n"
+"      --password \"$PASSWORD\" \\\n"
+"      --jwks-uri https://webid-oidc-demo.planete-kraus.eu/keys \\\n"
+"      --authorization-endpoint https://webid-oidc-demo.planete-kraus.eu/"
+"authorize \\\n"
+"      --token-endpoint https://webid-oidc-demo.planete-kraus.eu/token \\\n"
+"      --port $PORT\n"
+"\n"
+"If you find a bug, send a report to ~a.\n"
+msgstr ""
+"Utilisation : ~a [OPTIONS]...\n"
+"\n"
+"Exécute le fournisseur d’identité Solid pour un utilisateur spécifique.\n"
+"\n"
+"Options :\n"
+"  -h, --~a :\n"
+"      affiche ce message d’aide et quitte.\n"
+"  -v, --~a :\n"
+"      affiche le numéro de version (~a) et quitte.\n"
+"  -i URI, --~a=URI :\n"
+"      définit le nom public du serveur.\n"
+"  -k FICHIER, --~a=FICHIER.jwk :\n"
+"      définit le nom du fichier de clé. S’il n’existe pas, une\n"
+"      nouvelle clé sera générée.\n"
+"  -s WEBID, --~a=WEBID :\n"
+"      définit l’identité du sujet.\n"
+"  -w MOTDEPASSE, --~a=MOTDEPASSE :\n"
+"      définit le mot de passe pour reconnaître l’utilisateur.\n"
+"  -j URI, --~a=URI :\n"
+"      définit l’URI pour obtenir la clé publique du serveur.\n"
+"  -a URI, --~a=URI :\n"
+"      définit le terminal d’autorisation de l’émetteur (authorization\n"
+"      endpoint).\n"
+"  -t URI, --~a=URI :\n"
+"      définit le terminal de jeton de l’émetteur (token endpoint).\n"
+"  -p PORT, --~a=PORT :\n"
+"      définit le port à lier (au lieu de 8080).\n"
+"  -l FICHIER.log, --~a=FICHIER.log :\n"
+"      déverser la sortie standard vers ce fichier.\n"
+"  -e FICHIER.err, --~a=FICHIER.err :\n"
+"      déverser la sortie d’erreur vers ce fichier.\n"
+"\n"
+"Variables d’environnement :\n"
+"\n"
+"  LANG : définit la locale de l’interface de l’administrateur système\n"
+"(les pages utilisateur sont traduites selon l’en-tête Accept-Language\n"
+"de l’agent), pour les fichiers de journaux et l’interface en ligne de\n"
+"commande. Elle vaut actuellement ~a.\n"
+"\n"
+"  XDG_DATA_HOME : où stocker les jetons de rafraîchissement (refresh\n"
+"tokens, dans un sous-dossier webid-oidc). Pour un service système, il\n"
+"est recommandé d’affecter /var/lib. Actuellement définie à ~a.\n"
+"\n"
+"  XDG_CACHE_HOME : où stocker et modifier le fichier de graine pour le\n"
+"générateur de nombres aléatoires. Si vous le supprimez, vous devez\n"
+"redémarrer le programme pour utiliser une graine\n"
+"différente. Actuellement définie à ~a.\n"
+"\n"
+"  HOME : si XDG_DATA_HOME ou XDG_CACHE_HOME ne sont pas définies,\n"
+"elles sont calculées à partir de la valeur de la variable\n"
+"d’environnement HOME. Elle n’est pas utilisée dans les autres\n"
+"cas. Actuellement définie à ~a.\n"
+"\n"
+"Exemple utilisé pour webid-oidc-demo.planete-kraus.eu (sauf que le\n"
+"service est géré par shepherd en réalité, et les URI sont en\n"
+"anglais) :\n"
+"\n"
+"    export LANG=fr_FR.UTF-8\n"
+"    export XDG_DATA_HOME=/var/lib\n"
+"    export XDG_CACHE_HOME=/var/cache\n"
+"    webid-oidc-issuer \\\n"
+"      --émetteur https://webid-oidc-demo.planete-kraus.eu \\\n"
+"      --fichier-clé /var/lib/webid-oidc/émetteur/clé.jwk \\\n"
+"      --sujet https://webid-oidc-demo.planete-kraus.eu/profil/carte#moi \\\n"
+"      --mot-de-passe \"$MOTDEPASSE\" \\\n"
+"      --uri-jwks https://webid-oidc-demo.planete-kraus.eu/clés \\\n"
+"      --uri-terminal-autorisation https://webid-oidc-demo.planete-kraus.eu/"
+"autoriser \\\n"
+"      --uri-terminal-jeton https://webid-oidc-demo.planete-kraus.eu/jeton "
+"\\\n"
+"      --port $PORT\n"
+"\n"
+"Si vous trouvez une erreur dans le programme, envoyez-en un rapport à ~a.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:267
+#, scheme-format
+msgid "~a version ~a\n"
+msgstr "~a version ~a\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:294
+msgid "You need to set the issuer.\n"
+msgstr "Vous devez définir l'émetteur.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:298
+msgid "You need to set the file name of the key file.\n"
+msgstr "Vous devez définir le nom de ficher du fichier de clé.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:302
+msgid "You need to set the identity of the subject.\n"
+msgstr "Vous devez définir l'identité du sujet.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:306
+msgid "You need to set the password to verify the identity of the subject.\n"
+msgstr "Vous devez définir le mot de passe pour identifier le sujet.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:310
+msgid "You need to set the JWKS URI.\n"
+msgstr "Vous devez définir l'URI du JWKS.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:315
+msgid "You need to set the authorization endpoint URI.\n"
+msgstr "Vous devez définir l'URI du terminal d'autorisation.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:320
+msgid "You need to set the token endpoint URI.\n"
+msgstr "Vous devez définir l'URI du terminal de jeton.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:327
+msgid "The port should be a number between 0 and 65535.\n"
+msgstr "Le port doit être un nombre entre 0 et 65535.\n"
+
+#: src/scm/webid-oidc/identity-provider.scm:346
+#, fuzzy, scheme-format
+#| msgid "~a: Internal server error: ~a\n"
+msgid "Internal server error: ~a\n"
+msgstr "~a : Erreur interne du serveur : ~a\n"
+
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:29
 msgid "xml-lang|en"
 msgstr "fr"
@@ -922,226 +1232,6 @@ msgstr ""
 #~ msgid "there is an external error"
 #~ msgstr "il y a une erreur externe"
 
-#~ msgid "Warning: generating a new key pair."
-#~ msgstr "Attention : génération d'une nouvelle paire de clé."
-
-#~ msgid "command-line|version"
-#~ msgstr "version"
-
-#~ msgid "comand-line|help"
-#~ msgstr "aide"
-
-#~ msgid "comand-line|issuer"
-#~ msgstr "émetteur"
-
-#~ msgid "comand-line|key-file"
-#~ msgstr "fichier-clé"
-
-#~ msgid "comand-line|subject"
-#~ msgstr "sujet"
-
-#~ msgid "comand-line|password"
-#~ msgstr "mot-de-passe"
-
-#~ msgid "comand-line|jwks-uri"
-#~ msgstr "uri-jwks"
-
-#~ msgid "comand-line|authorization-endpoint-uri"
-#~ msgstr "uri-terminal-autorisation"
-
-#~ msgid "comand-line|token-endpoint-uri"
-#~ msgstr "uri-terminal-jeton"
-
-#~ msgid "comand-line|port"
-#~ msgstr "port"
-
-#~ msgid "comand-line|log-file"
-#~ msgstr "fichier-journal"
-
-#~ msgid "comand-line|error-file"
-#~ msgstr "fichier-erreur"
-
-#, scheme-format
-#~ msgid ""
-#~ "Usage: ~a [OPTIONS]...\n"
-#~ "\n"
-#~ "Run the Solid identity provider for a specific user.\n"
-#~ "\n"
-#~ "Options:\n"
-#~ "  -h, --~a:\n"
-#~ "      display this help message and exit.\n"
-#~ "  -v, --~a:\n"
-#~ "      display the version information (~a) and exit.\n"
-#~ "  -i URI, --~a=URI:\n"
-#~ "      set the public server host name.\n"
-#~ "  -k FILE, --~a=FILE.jwk:\n"
-#~ "      set the file name of the key file. If it does not exist, a new\n"
-#~ "      key is generated.\n"
-#~ "  -s WEBID, --~a=WEBID:\n"
-#~ "      set the identity of the subject.\n"
-#~ "  -w PASSWORD, --~a=PASSWORD:\n"
-#~ "      set the password to recognize the user.\n"
-#~ "  -j URI, --~a=URI:\n"
-#~ "      set the URI to query the key of the server.\n"
-#~ "  -a URI, --~a=URI:\n"
-#~ "      set the authorization endpoint of the issuer.\n"
-#~ "  -t URI, --~a=URI:\n"
-#~ "      set the token endpoint of the issuer.\n"
-#~ "  -p PORT, --~a=PORT:\n"
-#~ "      set the port to bind (instead of 8080).\n"
-#~ "  -l FILE.log, --~a=FILE.log:\n"
-#~ "      dump the standard output to that file.\n"
-#~ "  -e FILE.err, --~a=FILE.err:\n"
-#~ "      dump the standard error to that file.\n"
-#~ "\n"
-#~ "Environment variables:\n"
-#~ "\n"
-#~ "  LANG: set the locale of the sysadmin-facing interface (the user\n"
-#~ "pages are translated according to the user agent’s Accept-language\n"
-#~ "header), for log files and command-line interface. It is currently ~a.\n"
-#~ "\n"
-#~ "  XDG_DATA_HOME: where to store the refresh tokens (under the\n"
-#~ "webid-oidc directory). For a system service, it is recommended to set\n"
-#~ "it to /var/lib. Currently set to ~a.\n"
-#~ "\n"
-#~ "  XDG_CACHE_HOME: where to store and update the seed file for the\n"
-#~ "random number generator. If you remove it, you need to restart the\n"
-#~ "program to use a different seed. Currently set to ~a.\n"
-#~ "\n"
-#~ "  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
-#~ "computed from the value of the HOME environment variable. It is not\n"
-#~ "used otherwise. Currently set to ~a.\n"
-#~ "\n"
-#~ "Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
-#~ "by shepherd in reality):\n"
-#~ "\n"
-#~ "    export LANG=C\n"
-#~ "    export XDG_DATA_HOME=/var/lib\n"
-#~ "    export XDG_CACHE_HOME=/var/cache\n"
-#~ "    webid-oidc-issuer \\\n"
-#~ "      --issuer https://webid-oidc-demo.planete-kraus.eu \\\n"
-#~ "      --key-file /var/lib/webid-oidc/issuer/key.jwk \\\n"
-#~ "      --subject https://webid-oidc-demo.planete-kraus.eu/profile/card#me "
-#~ "\\\n"
-#~ "      --password \"$PASSWORD\" \\\n"
-#~ "      --jwks-uri https://webid-oidc-demo.planete-kraus.eu/keys \\\n"
-#~ "      --authorization-endpoint-uri https://webid-oidc-demo.planete-kraus."
-#~ "eu/authorize \\\n"
-#~ "      --token-endpoint-uri https://webid-oidc-demo.planete-kraus.eu/token "
-#~ "\\\n"
-#~ "      --port $PORT\n"
-#~ "\n"
-#~ "If you find a bug, send a report to ~a.\n"
-#~ msgstr ""
-#~ "Utilisation : ~a [OPTIONS]...\n"
-#~ "\n"
-#~ "Exécute le fournisseur d’identité Solid pour un utilisateur spécifique.\n"
-#~ "\n"
-#~ "Options :\n"
-#~ "  -h, --~a :\n"
-#~ "      affiche ce message d’aide et quitte.\n"
-#~ "  -v, --~a :\n"
-#~ "      affiche le numéro de version (~a) et quitte.\n"
-#~ "  -i URI, --~a=URI :\n"
-#~ "      définit le nom public du serveur.\n"
-#~ "  -k FICHIER, --~a=FICHIER.jwk :\n"
-#~ "      définit le nom du fichier de clé. S’il n’existe pas, une\n"
-#~ "      nouvelle clé sera générée.\n"
-#~ "  -s WEBID, --~a=WEBID :\n"
-#~ "      définit l’identité du sujet.\n"
-#~ "  -w MOTDEPASSE, --~a=MOTDEPASSE :\n"
-#~ "      définit le mot de passe pour reconnaître l’utilisateur.\n"
-#~ "  -j URI, --~a=URI :\n"
-#~ "      définit l’URI pour obtenir la clé publique du serveur.\n"
-#~ "  -a URI, --~a=URI :\n"
-#~ "      définit le terminal d’autorisation de l’émetteur (authorization\n"
-#~ "      endpoint).\n"
-#~ "  -t URI, --~a=URI :\n"
-#~ "      définit le terminal de jeton de l’émetteur (token endpoint).\n"
-#~ "  -p PORT, --~a=PORT :\n"
-#~ "      définit le port à lier (au lieu de 8080).\n"
-#~ "  -l FICHIER.log, --~a=FICHIER.log :\n"
-#~ "      déverser la sortie standard vers ce fichier.\n"
-#~ "  -e FICHIER.err, --~a=FICHIER.err :\n"
-#~ "      déverser la sortie d’erreur vers ce fichier.\n"
-#~ "\n"
-#~ "Variables d’environnement :\n"
-#~ "\n"
-#~ "  LANG : définit la locale de l’interface de l’administrateur système\n"
-#~ "(les pages utilisateur sont traduites selon l’en-tête Accept-Language\n"
-#~ "de l’agent), pour les fichiers de journaux et l’interface en ligne de\n"
-#~ "commande. Elle vaut actuellement ~a.\n"
-#~ "\n"
-#~ "  XDG_DATA_HOME : où stocker les jetons de rafraîchissement (refresh\n"
-#~ "tokens, dans un sous-dossier webid-oidc). Pour un service système, il\n"
-#~ "est recommandé d’affecter /var/lib. Actuellement définie à ~a.\n"
-#~ "\n"
-#~ "  XDG_CACHE_HOME : où stocker et modifier le fichier de graine pour le\n"
-#~ "générateur de nombres aléatoires. Si vous le supprimez, vous devez\n"
-#~ "redémarrer le programme pour utiliser une graine\n"
-#~ "différente. Actuellement définie à ~a.\n"
-#~ "\n"
-#~ "  HOME : si XDG_DATA_HOME ou XDG_CACHE_HOME ne sont pas définies,\n"
-#~ "elles sont calculées à partir de la valeur de la variable\n"
-#~ "d’environnement HOME. Elle n’est pas utilisée dans les autres\n"
-#~ "cas. Actuellement définie à ~a.\n"
-#~ "\n"
-#~ "Exemple utilisé pour webid-oidc-demo.planete-kraus.eu (sauf que le\n"
-#~ "service est géré par shepherd en réalité, et les URI sont en\n"
-#~ "anglais) :\n"
-#~ "\n"
-#~ "    export LANG=fr_FR.UTF-8\n"
-#~ "    export XDG_DATA_HOME=/var/lib\n"
-#~ "    export XDG_CACHE_HOME=/var/cache\n"
-#~ "    webid-oidc-issuer \\\n"
-#~ "      --émetteur https://webid-oidc-demo.planete-kraus.eu \\\n"
-#~ "      --fichier-clé /var/lib/webid-oidc/émetteur/clé.jwk \\\n"
-#~ "      --sujet https://webid-oidc-demo.planete-kraus.eu/profil/carte#moi "
-#~ "\\\n"
-#~ "      --mot-de-passe \"$MOTDEPASSE\" \\\n"
-#~ "      --uri-jwks https://webid-oidc-demo.planete-kraus.eu/clés \\\n"
-#~ "      --uri-terminal-autorisation https://webid-oidc-demo.planete-kraus."
-#~ "eu/autoriser \\\n"
-#~ "      --uri-terminal-jeton https://webid-oidc-demo.planete-kraus.eu/jeton "
-#~ "\\\n"
-#~ "      --port $PORT\n"
-#~ "\n"
-#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à "
-#~ "~a.\n"
-
-#, scheme-format
-#~ msgid "~a version ~a\n"
-#~ msgstr "~a version ~a\n"
-
-#~ msgid "You need to set the issuer.\n"
-#~ msgstr "Vous devez définir l'émetteur.\n"
-
-#~ msgid "You need to set the file name of the key file.\n"
-#~ msgstr "Vous devez définir le nom de ficher du fichier de clé.\n"
-
-#~ msgid "You need to set the identity of the subject.\n"
-#~ msgstr "Vous devez définir l'identité du sujet.\n"
-
-#~ msgid ""
-#~ "You need to set the password to verify the identity of the subject.\n"
-#~ msgstr "Vous devez définir le mot de passe pour identifier le sujet.\n"
-
-#~ msgid "You need to set the JWKS URI.\n"
-#~ msgstr "Vous devez définir l'URI du JWKS.\n"
-
-#~ msgid "You need to set the authorization endpoint URI.\n"
-#~ msgstr "Vous devez définir l'URI du terminal d'autorisation.\n"
-
-#~ msgid "You need to set the token endpoint URI.\n"
-#~ msgstr "Vous devez définir l'URI du terminal de jeton.\n"
-
-#~ msgid "The port should be a number between 0 and 65535.\n"
-#~ msgstr "Le port doit être un nombre entre 0 et 65535.\n"
-
-#, scheme-format
-#~ msgid "~a: Internal server error: ~a\n"
-#~ msgstr "~a : Erreur interne du serveur : ~a\n"
-
 #, scheme-format
 #~ msgid ""
 #~ "The client locale ~s can’t be approximated by system locale ~s (because "
diff --git a/po/webid-oidc.pot b/po/webid-oidc.pot
index cf36502..1516073 100644
--- a/po/webid-oidc.pot
+++ b/po/webid-oidc.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-06-05 16:16+0200\n"
+"POT-Creation-Date: 2021-06-05 16:17+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -680,6 +680,172 @@ msgstr ""
 msgid "Unhandled exception type ~a."
 msgstr ""
 
+#: src/scm/webid-oidc/identity-provider.scm:54
+msgid "Warning: generating a new key pair."
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:148
+msgid "command-line|version"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:150
+msgid "comand-line|help"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:152
+msgid "comand-line|issuer"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:154
+msgid "comand-line|key-file"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:156
+msgid "comand-line|subject"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:158
+msgid "comand-line|password"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:160
+msgid "comand-line|jwks-uri"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:162
+msgid "comand-line|authorization-endpoint-uri"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:164
+msgid "comand-line|token-endpoint-uri"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:166
+msgid "comand-line|port"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:168
+msgid "comand-line|log-file"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:170
+msgid "comand-line|error-file"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:188
+#, scheme-format
+msgid ""
+"Usage: ~a [OPTIONS]...\n"
+"\n"
+"Run the Solid identity provider for a specific user.\n"
+"\n"
+"Options:\n"
+"  -h, --~a:\n"
+"      display this help message and exit.\n"
+"  -v, --~a:\n"
+"      display the version information (~a) and exit.\n"
+"  -i URI, --~a=URI:\n"
+"      set the public server host name.\n"
+"  -k FILE, --~a=FILE.jwk:\n"
+"      set the file name of the key file. If it does not exist, a new\n"
+"      key is generated.\n"
+"  -s WEBID, --~a=WEBID:\n"
+"      set the identity of the subject.\n"
+"  -w PASSWORD, --~a=PASSWORD:\n"
+"      set the password to recognize the user.\n"
+"  -j URI, --~a=URI:\n"
+"      set the URI to query the key of the server.\n"
+"  -a URI, --~a=URI:\n"
+"      set the authorization endpoint of the issuer.\n"
+"  -t URI, --~a=URI:\n"
+"      set the token endpoint of the issuer.\n"
+"  -p PORT, --~a=PORT:\n"
+"      set the port to bind (instead of 8080).\n"
+"  -l FILE.log, --~a=FILE.log:\n"
+"      dump the standard output to that file.\n"
+"  -e FILE.err, --~a=FILE.err:\n"
+"      dump the standard error to that file.\n"
+"\n"
+"Environment variables:\n"
+"\n"
+"  LANG: set the locale of the sysadmin-facing interface (the user\n"
+"pages are translated according to the user agent’s Accept-language\n"
+"header), for log files and command-line interface. It is currently ~a.\n"
+"\n"
+"  XDG_DATA_HOME: where to store the refresh tokens (under the\n"
+"webid-oidc directory). For a system service, it is recommended to set\n"
+"it to /var/lib. Currently set to ~a.\n"
+"\n"
+"  XDG_CACHE_HOME: where to store and update the seed file for the\n"
+"random number generator. If you remove it, you need to restart the\n"
+"program to use a different seed. Currently set to ~a.\n"
+"\n"
+"  HOME: if XDG_DATA_HOME or XDG_CACHE_HOME is not set, they are\n"
+"computed from the value of the HOME environment variable. It is not\n"
+"used otherwise. Currently set to ~a.\n"
+"\n"
+"Example used in webid-oidc-demo.planete-kraus.eu (except it’s managed\n"
+"by shepherd in reality):\n"
+"\n"
+"    export LANG=C\n"
+"    export XDG_DATA_HOME=/var/lib\n"
+"    export XDG_CACHE_HOME=/var/cache\n"
+"    webid-oidc-issuer \\\n"
+"      --issuer https://webid-oidc-demo.planete-kraus.eu \\\n"
+"      --key-file /var/lib/webid-oidc/issuer/key.jwk \\\n"
+"      --subject https://webid-oidc-demo.planete-kraus.eu/profile/card#me \\\n"
+"      --password \"$PASSWORD\" \\\n"
+"      --jwks-uri https://webid-oidc-demo.planete-kraus.eu/keys \\\n"
+"      --authorization-endpoint https://webid-oidc-demo.planete-kraus.eu/"
+"authorize \\\n"
+"      --token-endpoint https://webid-oidc-demo.planete-kraus.eu/token \\\n"
+"      --port $PORT\n"
+"\n"
+"If you find a bug, send a report to ~a.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:267
+#, scheme-format
+msgid "~a version ~a\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:294
+msgid "You need to set the issuer.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:298
+msgid "You need to set the file name of the key file.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:302
+msgid "You need to set the identity of the subject.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:306
+msgid "You need to set the password to verify the identity of the subject.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:310
+msgid "You need to set the JWKS URI.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:315
+msgid "You need to set the authorization endpoint URI.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:320
+msgid "You need to set the token endpoint URI.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:327
+msgid "The port should be a number between 0 and 65535.\n"
+msgstr ""
+
+#: src/scm/webid-oidc/identity-provider.scm:346
+#, scheme-format
+msgid "Internal server error: ~a\n"
+msgstr ""
+
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:29
 msgid "xml-lang|en"
 msgstr ""