Define an XML-loadable meta-class

3 files changed, 235 insertions, 205 deletions

diff --git a/po/POTFILES.in b/po/POTFILES.in
index fd3266b..ae71785 100644
--- a/po/POTFILES.in
+++ b/po/POTFILES.in
@@ -57,6 +57,7 @@ src/scm/webid-oidc/rdf-index.scm
 src/scm/webid-oidc/refresh-token.scm
 src/scm/webid-oidc/resource-server.scm
 src/scm/webid-oidc/reverse-proxy.scm
+src/scm/webid-oidc/serializable.scm
 src/scm/webid-oidc/serve.scm
 src/scm/webid-oidc/server/create.scm
 src/scm/webid-oidc/server/delete.scm
diff --git a/po/disfluid.pot b/po/disfluid.pot
index 2a4b334..c624063 100644
--- a/po/disfluid.pot
+++ b/po/disfluid.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: disfluid SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-22 14:08+0200\n"
+"POT-Creation-Date: 2021-09-23 17:43+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -122,54 +122,54 @@ msgid ""
 "webid_oidc_random_init first.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:71
+#: src/scm/webid-oidc/access-token.scm:73
 #, scheme-format
 msgid "invalid access token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:73
+#: src/scm/webid-oidc/access-token.scm:75
 msgid "invalid access token"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:115
-#: src/scm/webid-oidc/authorization-code.scm:93
-#: src/scm/webid-oidc/oidc-id-token.scm:98
+#: src/scm/webid-oidc/access-token.scm:117
+#: src/scm/webid-oidc/authorization-code.scm:95
+#: src/scm/webid-oidc/oidc-id-token.scm:108
 msgid "#:webid should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:120
+#: src/scm/webid-oidc/access-token.scm:122
 msgid "#:client-id should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:125
+#: src/scm/webid-oidc/access-token.scm:127
 msgid "#:cnf/jkt should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:130
+#: src/scm/webid-oidc/access-token.scm:132
 msgid "#:aud should be exactly \"solid\""
 msgstr ""
 
-#: src/scm/webid-oidc/access-token.scm:148
+#: src/scm/webid-oidc/access-token.scm:150
 msgid ""
 "when making an access token either its required fields (#:alg, #:webid, #:"
 "iss, #:aud, #:client-id, #:cnf/jkt, #:iat and #:exp) or (#:jwt-header and #:"
 "jwt-payload) should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:69
+#: src/scm/webid-oidc/authorization-code.scm:71
 #, scheme-format
 msgid "invalid authorization code: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:71
+#: src/scm/webid-oidc/authorization-code.scm:73
 msgid "invalid authorization code"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:98
+#: src/scm/webid-oidc/authorization-code.scm:100
 msgid "#:client-id should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/authorization-code.scm:112
+#: src/scm/webid-oidc/authorization-code.scm:114
 msgid ""
 "when making an authorization code either its required fields (#:webid and #:"
 "client-id) or (#:jwt-header and #:jwt-payload) should be passed"
@@ -360,78 +360,78 @@ msgstr ""
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:273
+#: src/scm/webid-oidc/client/accounts.scm:239
 msgid "The refresh token has expired."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:280
+#: src/scm/webid-oidc/client/accounts.scm:246
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:289
+#: src/scm/webid-oidc/client/accounts.scm:255
 msgid "The token response did not set the content type."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:297
+#: src/scm/webid-oidc/client/accounts.scm:263
 msgid "The token endpoint did not respond in UTF-8."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:309
+#: src/scm/webid-oidc/client/accounts.scm:275
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:319
+#: src/scm/webid-oidc/client/accounts.scm:285
 msgid "The token response is not valid JSON."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:333
+#: src/scm/webid-oidc/client/accounts.scm:299
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:341
+#: src/scm/webid-oidc/client/accounts.scm:307
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:352
+#: src/scm/webid-oidc/client/accounts.scm:318
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:354
+#: src/scm/webid-oidc/client/accounts.scm:320
 msgid "the ID token signature is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:370
+#: src/scm/webid-oidc/client/accounts.scm:336
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:380
+#: src/scm/webid-oidc/client/accounts.scm:346
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:395
+#: src/scm/webid-oidc/client/accounts.scm:361
 msgid "The issuer is required."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:400
+#: src/scm/webid-oidc/client/accounts.scm:366
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:436
+#: src/scm/webid-oidc/client/accounts.scm:382
 msgid "Cannot check the username and/or password."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:446
+#: src/scm/webid-oidc/client/accounts.scm:392
 msgid "The subject should be a string or URI."
 msgstr ""
 
-#: src/scm/webid-oidc/client/accounts.scm:460
+#: src/scm/webid-oidc/client/accounts.scm:406
 msgid "The issuer should be a string or URI."
 msgstr ""
 
@@ -451,7 +451,7 @@ msgstr ""
 msgid "You already have an account for ~a issued by ~a."
 msgstr ""
 
-#: src/scm/webid-oidc/client/client.scm:106
+#: src/scm/webid-oidc/client/client.scm:91
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
@@ -465,63 +465,63 @@ msgstr ""
 msgid "Hello, world!"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:110
+#: src/scm/webid-oidc/dpop-proof.scm:111
 #, scheme-format
 msgid "the DPoP proof is signed for ~s, but it is issued to ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:155
+#: src/scm/webid-oidc/dpop-proof.scm:157
 #, scheme-format
 msgid "invalid DPoP proof: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:157
+#: src/scm/webid-oidc/dpop-proof.scm:159
 msgid "invalid DPoP proof token"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:195
+#: src/scm/webid-oidc/dpop-proof.scm:197
 msgid "#:typ should be exactly \"dpop+jwt\""
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:200
+#: src/scm/webid-oidc/dpop-proof.scm:202
 msgid "#:jwk should be a public key"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:205
+#: src/scm/webid-oidc/dpop-proof.scm:207
 msgid "#:htm should be a symbol"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:211
+#: src/scm/webid-oidc/dpop-proof.scm:213
 msgid "when present, #:ath should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:232
+#: src/scm/webid-oidc/dpop-proof.scm:234
 msgid ""
 "when making a DPoP proof, either its required fields (#:typ, #:jwk, #:htm "
 "and #:htu) or (#:jwt-header and #:jwt-payload) should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:265
+#: src/scm/webid-oidc/dpop-proof.scm:267
 #, scheme-format
 msgid "the DPoP proof is signed for access through ~s, but it is used with ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:275
+#: src/scm/webid-oidc/dpop-proof.scm:277
 #, scheme-format
 msgid ""
 "the DPoP proof should go along with an access token hashed to ~s, not ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:283 src/scm/webid-oidc/dpop-proof.scm:290
+#: src/scm/webid-oidc/dpop-proof.scm:285 src/scm/webid-oidc/dpop-proof.scm:292
 msgid "the DPoP proof is signed with the wrong key"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:288
+#: src/scm/webid-oidc/dpop-proof.scm:290
 #, scheme-format
 msgid "the DPoP proof is signed with the wrong key: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/dpop-proof.scm:299
+#: src/scm/webid-oidc/dpop-proof.scm:301
 msgid "the cnf/check function returned #f"
 msgstr ""
 
@@ -867,59 +867,59 @@ msgstr ""
 msgid "a replay has been detected with JTI ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:147
+#: src/scm/webid-oidc/jwk.scm:158
 msgid "the point and scalar are not on the same curve"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:259
+#: src/scm/webid-oidc/jwk.scm:274
 #, scheme-format
 msgid "the JWK is invalid: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:261
+#: src/scm/webid-oidc/jwk.scm:276
 msgid "the JWK is invalid"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:270
+#: src/scm/webid-oidc/jwk.scm:285
 msgid "cannot compute the key type"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:331
+#: src/scm/webid-oidc/jwk.scm:346
 msgid "it is built as an RSA key or key pair, but it is not"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:339
+#: src/scm/webid-oidc/jwk.scm:354
 msgid "it is built as an elliptic curve key or key pair, but it is not"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:381
+#: src/scm/webid-oidc/jwk.scm:396
 #, scheme-format
 msgid "the key advertises a key type of ~s, but actually it is ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:430
+#: src/scm/webid-oidc/jwk.scm:445
 msgid "this is neither a RSA key nor an elliptic curve key"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:507
+#: src/scm/webid-oidc/jwk.scm:482
 #, scheme-format
 msgid "cannot fetch a JWKS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:509
+#: src/scm/webid-oidc/jwk.scm:484
 msgid "cannot fetch a JWKS"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:513
+#: src/scm/webid-oidc/jwk.scm:488
 #, scheme-format
 msgid "the request failed with ~s ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:518
+#: src/scm/webid-oidc/jwk.scm:493
 msgid "missing content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/jwk.scm:523
+#: src/scm/webid-oidc/jwk.scm:498
 #, scheme-format
 msgid "invalid content-type: ~s"
 msgstr ""
@@ -935,189 +935,185 @@ msgid ""
 "be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:206
+#: src/scm/webid-oidc/jws.scm:214
 msgid "#:iat should be a date"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:211
+#: src/scm/webid-oidc/jws.scm:219
 msgid "#:exp should be a date"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:221
+#: src/scm/webid-oidc/jws.scm:229
 msgid ""
 "when making a time-bound token, either its required fields (#:iat, and "
 "either #:exp or #:validity) or (#:jwt-header and #:jwt-payload) should be "
 "passed"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:249
+#: src/scm/webid-oidc/jws.scm:258
 msgid "#:iss should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:260
+#: src/scm/webid-oidc/jws.scm:269
 msgid ""
 "when making an OIDC token, either its required #:iss field or (#:jwt-header "
 "and #:jwt-payload) should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:304
+#: src/scm/webid-oidc/jws.scm:314
 msgid "#:nonce should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:313
+#: src/scm/webid-oidc/jws.scm:323
 msgid ""
 "when making a single-use token, either its required #:nonce field or (#:jwt-"
 "header and #:jwt-payload) should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:358
+#: src/scm/webid-oidc/jws.scm:368
 msgid "the encoded JWS is not in 3 parts"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:369
+#: src/scm/webid-oidc/jws.scm:379
 #, scheme-format
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:371
+#: src/scm/webid-oidc/jws.scm:381
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:430
+#: src/scm/webid-oidc/jws.scm:440
 msgid "the JWS is not signed by any of the expected set of public keys"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:441
+#: src/scm/webid-oidc/jws.scm:451
 #, scheme-format
 msgid "while verifying the JWS signature: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:443
+#: src/scm/webid-oidc/jws.scm:453
 msgid "an unexpected error happened while verifying a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:479
+#: src/scm/webid-oidc/jws.scm:489
 #, scheme-format
 msgid "I cannot query the identity provider configuration: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:481
+#: src/scm/webid-oidc/jws.scm:491
 msgid "I cannot query the identity provider configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:497
+#: src/scm/webid-oidc/jws.scm:507
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:499
+#: src/scm/webid-oidc/jws.scm:509
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:522
+#: src/scm/webid-oidc/jws.scm:532
 #, scheme-format
 msgid "the token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:531
+#: src/scm/webid-oidc/jws.scm:541
 #, scheme-format
 msgid "the token expired ~a, which is in the past (from ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:554
+#: src/scm/webid-oidc/jws.scm:564
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:556
+#: src/scm/webid-oidc/jws.scm:566
 msgid "cannot decode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:574
+#: src/scm/webid-oidc/jws.scm:584
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:576
+#: src/scm/webid-oidc/jws.scm:586
 msgid "cannot encode a JWS"
 msgstr ""
 
-#: src/scm/webid-oidc/jws.scm:623
-msgid "cannot parse a token"
-msgstr ""
-
-#: src/scm/webid-oidc/oidc-configuration.scm:118
+#: src/scm/webid-oidc/oidc-configuration.scm:121
 msgid "#:jwks-uri should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:123
+#: src/scm/webid-oidc/oidc-configuration.scm:126
 msgid "#:token-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:128
+#: src/scm/webid-oidc/oidc-configuration.scm:131
 msgid "#:authorization-endpoint should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:133
+#: src/scm/webid-oidc/oidc-configuration.scm:136
 msgid ""
 "#:solid-oidc-supported should be exactly 'https://solidproject.org/TR/solid-"
 "oidc'"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:142
+#: src/scm/webid-oidc/oidc-configuration.scm:145
 msgid "#:server should be an URI"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:159
+#: src/scm/webid-oidc/oidc-configuration.scm:162
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:161
+#: src/scm/webid-oidc/oidc-configuration.scm:164
 msgid "cannot fetch the OIDC configuration"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:165
+#: src/scm/webid-oidc/oidc-configuration.scm:168
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:170
+#: src/scm/webid-oidc/oidc-configuration.scm:173
 msgid "there is no content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:175
+#: src/scm/webid-oidc/oidc-configuration.scm:178
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-configuration.scm:185
+#: src/scm/webid-oidc/oidc-configuration.scm:188
 msgid ""
 "when making an OIDC configuration, either its required #:jwks-uri, #:"
 "authorization-endpoint and #:token-endpoint fields or #:server or #:json-"
 "data should be passed"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:70
+#: src/scm/webid-oidc/oidc-id-token.scm:80
 #, scheme-format
 msgid "invalid OIDC ID token: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-id-token.scm:82
 msgid "invalid OIDC id token"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:103
+#: src/scm/webid-oidc/oidc-id-token.scm:113
 msgid "#:sub should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:108
+#: src/scm/webid-oidc/oidc-id-token.scm:118
 msgid "#:aud should be a string"
 msgstr ""
 
-#: src/scm/webid-oidc/oidc-id-token.scm:124
+#: src/scm/webid-oidc/oidc-id-token.scm:134
 msgid ""
 "when making an ID token either its required fields (#:alg, #:webid, #:iss, #:"
 "sub, #:aud, #:iat and #:exp) or (#:jwt-header and #:jwt-payload) should be "
@@ -1900,10 +1896,26 @@ msgstr ""
 msgid "reason-phrase|Not Acceptable"
 msgstr ""
 
-#: src/scm/webid-oidc/reverse-proxy.scm:57
+#: src/scm/webid-oidc/reverse-proxy.scm:58
 msgid "#:endpoint argument is not present or not an URI."
 msgstr ""
 
+#: src/scm/webid-oidc/serializable.scm:58
+msgid "a plugin class should have an explicit #:name and #:module-name"
+msgstr ""
+
+#: src/scm/webid-oidc/serializable.scm:61
+msgid "#:name should be a symbol"
+msgstr ""
+
+#: src/scm/webid-oidc/serializable.scm:71
+msgid "#:module-name should be a list of symbols"
+msgstr ""
+
+#: src/scm/webid-oidc/serializable.scm:76
+msgid "plugin class names should be surrounded by <angle brackets>"
+msgstr ""
+
 #: src/scm/webid-oidc/serve.scm:77
 msgid "content negociation failed while serving a request"
 msgstr ""
diff --git a/po/fr.po b/po/fr.po
index 7338871..d880b91 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-09-22 14:08+0200\n"
-"PO-Revision-Date: 2021-09-22 14:10+0200\n"
+"POT-Creation-Date: 2021-09-23 17:43+0200\n"
+"PO-Revision-Date: 2021-09-23 17:44+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
 "Language: fr\n"
@@ -126,34 +126,34 @@ msgstr ""
 "Le module aléatoire n'a pas été initialisé. Veuillez appeler "
 "webid_oidc_random_init d'abort.\n"
 
-#: src/scm/webid-oidc/access-token.scm:71
+#: src/scm/webid-oidc/access-token.scm:73
 #, scheme-format
 msgid "invalid access token: ~a"
 msgstr "jeton d’accès invalide : ~a"
 
-#: src/scm/webid-oidc/access-token.scm:73
+#: src/scm/webid-oidc/access-token.scm:75
 msgid "invalid access token"
 msgstr "jeton d’accès invalide"
 
-#: src/scm/webid-oidc/access-token.scm:115
-#: src/scm/webid-oidc/authorization-code.scm:93
-#: src/scm/webid-oidc/oidc-id-token.scm:98
+#: src/scm/webid-oidc/access-token.scm:117
+#: src/scm/webid-oidc/authorization-code.scm:95
+#: src/scm/webid-oidc/oidc-id-token.scm:108
 msgid "#:webid should be an URI"
 msgstr "#:webid doit être une URI"
 
-#: src/scm/webid-oidc/access-token.scm:120
+#: src/scm/webid-oidc/access-token.scm:122
 msgid "#:client-id should be an URI"
 msgstr "#:client-id doit être une URI"
 
-#: src/scm/webid-oidc/access-token.scm:125
+#: src/scm/webid-oidc/access-token.scm:127
 msgid "#:cnf/jkt should be a string"
 msgstr "#:cnf/jkt doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/access-token.scm:130
+#: src/scm/webid-oidc/access-token.scm:132
 msgid "#:aud should be exactly \"solid\""
 msgstr "#:aud doit être exactement « solid »"
 
-#: src/scm/webid-oidc/access-token.scm:148
+#: src/scm/webid-oidc/access-token.scm:150
 msgid ""
 "when making an access token either its required fields (#:alg, #:webid, #:"
 "iss, #:aud, #:client-id, #:cnf/jkt, #:iat and #:exp) or (#:jwt-header and #:"
@@ -163,20 +163,20 @@ msgstr ""
 "nécessaires (#:alg, #:webid, #:iss, #:aud, #:client-id, #:cnf/jkt, #:iat et "
 "#:exp) soit (#:jwt-header et #:jwt-payload)"
 
-#: src/scm/webid-oidc/authorization-code.scm:69
+#: src/scm/webid-oidc/authorization-code.scm:71
 #, scheme-format
 msgid "invalid authorization code: ~a"
 msgstr "jeton d’autorisation invalide : ~a"
 
-#: src/scm/webid-oidc/authorization-code.scm:71
+#: src/scm/webid-oidc/authorization-code.scm:73
 msgid "invalid authorization code"
 msgstr "jeton d’autorisation invalide"
 
-#: src/scm/webid-oidc/authorization-code.scm:98
+#: src/scm/webid-oidc/authorization-code.scm:100
 msgid "#:client-id should be a string"
 msgstr "#:client-id doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/authorization-code.scm:112
+#: src/scm/webid-oidc/authorization-code.scm:114
 msgid ""
 "when making an authorization code either its required fields (#:webid and #:"
 "client-id) or (#:jwt-header and #:jwt-payload) should be passed"
@@ -378,83 +378,83 @@ msgstr "impossible de télécharger le manifeste client ~s"
 msgid "the client manifest is dereferenced from ~s, but it pretends to be ~s"
 msgstr "le manifeste client est déréférencé depuis ~s, mais il prétend être ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:273
+#: src/scm/webid-oidc/client/accounts.scm:239
 msgid "The refresh token has expired."
 msgstr "le jeton de rafraîchissement a expiré."
 
-#: src/scm/webid-oidc/client/accounts.scm:280
+#: src/scm/webid-oidc/client/accounts.scm:246
 #, scheme-format
 msgid "The token request failed with code ~s (~s)."
 msgstr "La requête de jeton a échoué avec un code ~s (~s)."
 
-#: src/scm/webid-oidc/client/accounts.scm:289
+#: src/scm/webid-oidc/client/accounts.scm:255
 msgid "The token response did not set the content type."
 msgstr "Le jeton de réponse n’a pas défini de type de contenu."
 
-#: src/scm/webid-oidc/client/accounts.scm:297
+#: src/scm/webid-oidc/client/accounts.scm:263
 msgid "The token endpoint did not respond in UTF-8."
 msgstr "Le terminal de jetonn n’a pas répondu en UTF-8."
 
-#: src/scm/webid-oidc/client/accounts.scm:309
+#: src/scm/webid-oidc/client/accounts.scm:275
 #, scheme-format
 msgid "The token response has content-type ~s, not application/json."
 msgstr "La réponse de jeton a un type de contenu ~s, pas application/json."
 
-#: src/scm/webid-oidc/client/accounts.scm:319
+#: src/scm/webid-oidc/client/accounts.scm:285
 msgid "The token response is not valid JSON."
 msgstr "La réponse de jeton n’est pas un JSON valide."
 
-#: src/scm/webid-oidc/client/accounts.scm:333
+#: src/scm/webid-oidc/client/accounts.scm:299
 #, scheme-format
 msgid "The token response did not include an ID token: ~s"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’ID : ~s"
 
-#: src/scm/webid-oidc/client/accounts.scm:341
+#: src/scm/webid-oidc/client/accounts.scm:307
 #, scheme-format
 msgid "The token response did not include an access token: ~s\n"
 msgstr "La réponse de jeton n’a pas inclus de jeton d’accès : ~s\n"
 
-#: src/scm/webid-oidc/client/accounts.scm:352
+#: src/scm/webid-oidc/client/accounts.scm:318
 #, scheme-format
 msgid "the ID token signature is invalid: ~a"
 msgstr "la signature du jeton d’ID est invalide : ~a"
 
-#: src/scm/webid-oidc/client/accounts.scm:354
+#: src/scm/webid-oidc/client/accounts.scm:320
 msgid "the ID token signature is invalid"
 msgstr "la signature du jeton d’ID est invalide"
 
-#: src/scm/webid-oidc/client/accounts.scm:370
+#: src/scm/webid-oidc/client/accounts.scm:336
 #, scheme-format
 msgid "the ID token delivered by the identity provider for ~s has ~s as webid"
 msgstr ""
 "le jeton d’ID délivré par le fournisseur d’identité pour ~s a ~s pour webid"
 
-#: src/scm/webid-oidc/client/accounts.scm:380
+#: src/scm/webid-oidc/client/accounts.scm:346
 #, scheme-format
 msgid "The ID token delivered by the identity provider ~s is for issuer ~s."
 msgstr ""
 "Le jeton d’ID délivré par le fournisseur d’identité ~s est pour l’émetteur "
 "~s."
 
-#: src/scm/webid-oidc/client/accounts.scm:395
+#: src/scm/webid-oidc/client/accounts.scm:361
 msgid "The issuer is required."
 msgstr "L’émetteur est requis."
 
-#: src/scm/webid-oidc/client/accounts.scm:400
+#: src/scm/webid-oidc/client/accounts.scm:366
 msgid "The optional subject and required issuer should be strings or URI."
 msgstr ""
 "Le sujet optionnel et émetteur doivent être des chaînes de caractère ou des "
 "URIs."
 
-#: src/scm/webid-oidc/client/accounts.scm:436
+#: src/scm/webid-oidc/client/accounts.scm:382
 msgid "Cannot check the username and/or password."
 msgstr "Impossible de vérifier le nom d’utilisateur et/ou le mot de passe."
 
-#: src/scm/webid-oidc/client/accounts.scm:446
+#: src/scm/webid-oidc/client/accounts.scm:392
 msgid "The subject should be a string or URI."
 msgstr "Le sujet doit être une chaîne de caractères ou une URI."
 
-#: src/scm/webid-oidc/client/accounts.scm:460
+#: src/scm/webid-oidc/client/accounts.scm:406
 msgid "The issuer should be a string or URI."
 msgstr "L’émetteur doit être une chaîne de caractères ou une URI."
 
@@ -476,7 +476,7 @@ msgstr ""
 msgid "You already have an account for ~a issued by ~a."
 msgstr "Vous avez déjà un compte pour ~a émis par ~a."
 
-#: src/scm/webid-oidc/client/client.scm:106
+#: src/scm/webid-oidc/client/client.scm:91
 msgid ""
 "Client ID and redirect URIs should be URIs, and key pair should be a key "
 "pair.."
@@ -492,37 +492,37 @@ msgstr "Bonjour, le monde !\n"
 msgid "Hello, world!"
 msgstr "Bonjour, le monde !"
 
-#: src/scm/webid-oidc/dpop-proof.scm:110
+#: src/scm/webid-oidc/dpop-proof.scm:111
 #, scheme-format
 msgid "the DPoP proof is signed for ~s, but it is issued to ~s"
 msgstr "la preuve DPoP est signée pour ~s, mais elle est émise pour ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:155
+#: src/scm/webid-oidc/dpop-proof.scm:157
 #, scheme-format
 msgid "invalid DPoP proof: ~a"
 msgstr "preuve DPoP invalide : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:157
+#: src/scm/webid-oidc/dpop-proof.scm:159
 msgid "invalid DPoP proof token"
 msgstr "jeton de preuve DPoP invalide"
 
-#: src/scm/webid-oidc/dpop-proof.scm:195
+#: src/scm/webid-oidc/dpop-proof.scm:197
 msgid "#:typ should be exactly \"dpop+jwt\""
 msgstr "#:typ doit être exactement « dpop+jwt »"
 
-#: src/scm/webid-oidc/dpop-proof.scm:200
+#: src/scm/webid-oidc/dpop-proof.scm:202
 msgid "#:jwk should be a public key"
 msgstr "#:jwk doit être une clé publique"
 
-#: src/scm/webid-oidc/dpop-proof.scm:205
+#: src/scm/webid-oidc/dpop-proof.scm:207
 msgid "#:htm should be a symbol"
 msgstr "#:htm doit être un symbole"
 
-#: src/scm/webid-oidc/dpop-proof.scm:211
+#: src/scm/webid-oidc/dpop-proof.scm:213
 msgid "when present, #:ath should be a string"
 msgstr "si présent, #:ath doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/dpop-proof.scm:232
+#: src/scm/webid-oidc/dpop-proof.scm:234
 msgid ""
 "when making a DPoP proof, either its required fields (#:typ, #:jwk, #:htm "
 "and #:htu) or (#:jwt-header and #:jwt-payload) should be passed"
@@ -530,14 +530,14 @@ msgstr ""
 "lors de la création d’une preuve DPoP, il faut passer soit les champs requis "
 "(#:typ, #:jwk, #:htm et #:htu) soit (#:jwt-header et #:jwt-payload)"
 
-#: src/scm/webid-oidc/dpop-proof.scm:265
+#: src/scm/webid-oidc/dpop-proof.scm:267
 #, scheme-format
 msgid "the DPoP proof is signed for access through ~s, but it is used with ~s"
 msgstr ""
 "la preuve DPoP est signée pour un accès avec ~s, mais elle est utilisée avec "
 "~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:275
+#: src/scm/webid-oidc/dpop-proof.scm:277
 #, scheme-format
 msgid ""
 "the DPoP proof should go along with an access token hashed to ~s, not ~s"
@@ -545,16 +545,16 @@ msgstr ""
 "la preuve DPoP devrait être accompagnée d’un jeton d’accès de condensat ~s, "
 "pas ~s"
 
-#: src/scm/webid-oidc/dpop-proof.scm:283 src/scm/webid-oidc/dpop-proof.scm:290
+#: src/scm/webid-oidc/dpop-proof.scm:285 src/scm/webid-oidc/dpop-proof.scm:292
 msgid "the DPoP proof is signed with the wrong key"
 msgstr "la preuve DPoP est signée avec la mauvaise clé"
 
-#: src/scm/webid-oidc/dpop-proof.scm:288
+#: src/scm/webid-oidc/dpop-proof.scm:290
 #, scheme-format
 msgid "the DPoP proof is signed with the wrong key: ~a"
 msgstr "la preuve DPoP est signée avec la mauvaise clé : ~a"
 
-#: src/scm/webid-oidc/dpop-proof.scm:299
+#: src/scm/webid-oidc/dpop-proof.scm:301
 msgid "the cnf/check function returned #f"
 msgstr "la fonction cnf/check a retourné #f"
 
@@ -946,63 +946,63 @@ msgstr "Non Trouvé"
 msgid "a replay has been detected with JTI ~s"
 msgstr "une redite a été détectée avec le JTI ~s"
 
-#: src/scm/webid-oidc/jwk.scm:147
+#: src/scm/webid-oidc/jwk.scm:158
 msgid "the point and scalar are not on the same curve"
 msgstr "le point et le scalaire ne sont pas sur la même courbe elliptique"
 
-#: src/scm/webid-oidc/jwk.scm:259
+#: src/scm/webid-oidc/jwk.scm:274
 #, scheme-format
 msgid "the JWK is invalid: ~a"
 msgstr "le JWK est invalide : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:261
+#: src/scm/webid-oidc/jwk.scm:276
 msgid "the JWK is invalid"
 msgstr "le JWK est invalide"
 
-#: src/scm/webid-oidc/jwk.scm:270
+#: src/scm/webid-oidc/jwk.scm:285
 msgid "cannot compute the key type"
 msgstr "impossible de calculer le type de clé"
 
-#: src/scm/webid-oidc/jwk.scm:331
+#: src/scm/webid-oidc/jwk.scm:346
 msgid "it is built as an RSA key or key pair, but it is not"
 msgstr ""
 "elle est construite comme une clé ou paire de clés RSA, mais ce n’en est pas "
 "une"
 
-#: src/scm/webid-oidc/jwk.scm:339
+#: src/scm/webid-oidc/jwk.scm:354
 msgid "it is built as an elliptic curve key or key pair, but it is not"
 msgstr ""
 "elle est construite comme une clé ou paire de clés sur une courbe "
 "elliptique, mais ce n’en est pas une"
 
-#: src/scm/webid-oidc/jwk.scm:381
+#: src/scm/webid-oidc/jwk.scm:396
 #, scheme-format
 msgid "the key advertises a key type of ~s, but actually it is ~s"
 msgstr "la clé publie un type de clé ~s, mais c’est en fait ~s"
 
-#: src/scm/webid-oidc/jwk.scm:430
+#: src/scm/webid-oidc/jwk.scm:445
 msgid "this is neither a RSA key nor an elliptic curve key"
 msgstr "ce n’est ni une clé RSA ni une clé sur une courbe elliptique"
 
-#: src/scm/webid-oidc/jwk.scm:507
+#: src/scm/webid-oidc/jwk.scm:482
 #, scheme-format
 msgid "cannot fetch a JWKS: ~a"
 msgstr "impossible de télécharger un JWKS : ~a"
 
-#: src/scm/webid-oidc/jwk.scm:509
+#: src/scm/webid-oidc/jwk.scm:484
 msgid "cannot fetch a JWKS"
 msgstr "impossible de télécharger un JWKS"
 
-#: src/scm/webid-oidc/jwk.scm:513
+#: src/scm/webid-oidc/jwk.scm:488
 #, scheme-format
 msgid "the request failed with ~s ~s"
 msgstr "la requête a échoué avec ~s ~s"
 
-#: src/scm/webid-oidc/jwk.scm:518
+#: src/scm/webid-oidc/jwk.scm:493
 msgid "missing content-type"
 msgstr "type de contenu manquant"
 
-#: src/scm/webid-oidc/jwk.scm:523
+#: src/scm/webid-oidc/jwk.scm:498
 #, scheme-format
 msgid "invalid content-type: ~s"
 msgstr "type de contenu invalide : ~s"
@@ -1020,15 +1020,15 @@ msgstr ""
 "lors de la création d’un jeton il faut passer soit #:alg soit (#:jwt-header "
 "et #:jwt-payload)"
 
-#: src/scm/webid-oidc/jws.scm:206
+#: src/scm/webid-oidc/jws.scm:214
 msgid "#:iat should be a date"
 msgstr "#:iat doit être une date"
 
-#: src/scm/webid-oidc/jws.scm:211
+#: src/scm/webid-oidc/jws.scm:219
 msgid "#:exp should be a date"
 msgstr "#:exp doit être une date"
 
-#: src/scm/webid-oidc/jws.scm:221
+#: src/scm/webid-oidc/jws.scm:229
 msgid ""
 "when making a time-bound token, either its required fields (#:iat, and "
 "either #:exp or #:validity) or (#:jwt-header and #:jwt-payload) should be "
@@ -1038,11 +1038,11 @@ msgstr ""
 "champs requis (#:iat et soit #:exp soit #:validity) soit (#:jwt-header et #:"
 "jwt-payload)"
 
-#: src/scm/webid-oidc/jws.scm:249
+#: src/scm/webid-oidc/jws.scm:258
 msgid "#:iss should be an URI"
 msgstr "#:iss doit être une URI"
 
-#: src/scm/webid-oidc/jws.scm:260
+#: src/scm/webid-oidc/jws.scm:269
 msgid ""
 "when making an OIDC token, either its required #:iss field or (#:jwt-header "
 "and #:jwt-payload) should be passed"
@@ -1050,11 +1050,11 @@ msgstr ""
 "lors de la création d’un jeton OIDC, il faut passer soit le champs requis #:"
 "iss soit (#:jwt-header et #:jwt-payload)"
 
-#: src/scm/webid-oidc/jws.scm:304
+#: src/scm/webid-oidc/jws.scm:314
 msgid "#:nonce should be a string"
 msgstr "#:nonce doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/jws.scm:313
+#: src/scm/webid-oidc/jws.scm:323
 msgid ""
 "when making a single-use token, either its required #:nonce field or (#:jwt-"
 "header and #:jwt-payload) should be passed"
@@ -1062,11 +1062,11 @@ msgstr ""
 "lors de la création d’un jeton à usage unique, il faut soit passer le champs "
 "requis #:nonce soit (#:jwt-header et #:jwt-payload)"
 
-#: src/scm/webid-oidc/jws.scm:358
+#: src/scm/webid-oidc/jws.scm:368
 msgid "the encoded JWS is not in 3 parts"
 msgstr "le JWS encodé n’est pas en 3 parties"
 
-#: src/scm/webid-oidc/jws.scm:369
+#: src/scm/webid-oidc/jws.scm:379
 #, scheme-format
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64: ~a"
@@ -1074,91 +1074,87 @@ msgstr ""
 "l’en-tête ou la charge utile du JWS encodé n’est pas un objet JSON encodé en "
 "base64 : ~a"
 
-#: src/scm/webid-oidc/jws.scm:371
+#: src/scm/webid-oidc/jws.scm:381
 msgid ""
 "the encoded JWS header or payload is not a JSON object encoded in base64"
 msgstr ""
 "l’en-tête ou la charge utile du JWS encodé n’est pas un objet JSON encodé en "
 "base64"
 
-#: src/scm/webid-oidc/jws.scm:430
+#: src/scm/webid-oidc/jws.scm:440
 msgid "the JWS is not signed by any of the expected set of public keys"
 msgstr "le JWS n’est signé par aucune des clés attendues"
 
-#: src/scm/webid-oidc/jws.scm:441
+#: src/scm/webid-oidc/jws.scm:451
 #, scheme-format
 msgid "while verifying the JWS signature: ~a"
 msgstr "en vérifiant la signature du JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:443
+#: src/scm/webid-oidc/jws.scm:453
 msgid "an unexpected error happened while verifying a JWS"
 msgstr "une erreur inattendue est survenue pendant la vérification d’un JWS"
 
-#: src/scm/webid-oidc/jws.scm:479
+#: src/scm/webid-oidc/jws.scm:489
 #, scheme-format
 msgid "I cannot query the identity provider configuration: ~a"
 msgstr ""
 "je ne peux pas requêter la configuration du fournisseur d’identité : ~a"
 
-#: src/scm/webid-oidc/jws.scm:481
+#: src/scm/webid-oidc/jws.scm:491
 msgid "I cannot query the identity provider configuration"
 msgstr "je ne peux pas requêter la configuration du fournisseur d’identité"
 
-#: src/scm/webid-oidc/jws.scm:497
+#: src/scm/webid-oidc/jws.scm:507
 #, scheme-format
 msgid "I cannot query the JWKS URI of the identity provider: ~a"
 msgstr "je ne peux pas requêter l’URI de JWKS du fournisseur d’identité : ~a"
 
-#: src/scm/webid-oidc/jws.scm:499
+#: src/scm/webid-oidc/jws.scm:509
 msgid "I cannot query the JWKS URI of the identity provider"
 msgstr "impossible de requêter l’URI de JWKS du fournisseur d’identité"
 
-#: src/scm/webid-oidc/jws.scm:522
+#: src/scm/webid-oidc/jws.scm:532
 #, scheme-format
 msgid "the token is signed in the future, ~a, relative to current ~a"
 msgstr ""
 "le jeton est signé dans le futur, ~a, par rapport à la date courante, ~a"
 
-#: src/scm/webid-oidc/jws.scm:531
+#: src/scm/webid-oidc/jws.scm:541
 #, scheme-format
 msgid "the token expired ~a, which is in the past (from ~a)"
 msgstr "le jeton a expiré le ~a, qui est dans le passé (depuis ~a)"
 
-#: src/scm/webid-oidc/jws.scm:554
+#: src/scm/webid-oidc/jws.scm:564
 #, scheme-format
 msgid "cannot decode a JWS: ~a"
 msgstr "impossible de décoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:556
+#: src/scm/webid-oidc/jws.scm:566
 msgid "cannot decode a JWS"
 msgstr "impossible de décoder un JWS"
 
-#: src/scm/webid-oidc/jws.scm:574
+#: src/scm/webid-oidc/jws.scm:584
 #, scheme-format
 msgid "cannot encode a JWS: ~a"
 msgstr "impossible d’encoder un JWS : ~a"
 
-#: src/scm/webid-oidc/jws.scm:576
+#: src/scm/webid-oidc/jws.scm:586
 msgid "cannot encode a JWS"
 msgstr "impossible d’encoder un JWS"
 
-#: src/scm/webid-oidc/jws.scm:623
-msgid "cannot parse a token"
-msgstr "impossible d’analyser le jeton"
-
-#: src/scm/webid-oidc/oidc-configuration.scm:118
+#: src/scm/webid-oidc/oidc-configuration.scm:121
 msgid "#:jwks-uri should be an URI"
 msgstr "#:jwks-uri doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:123
+#: src/scm/webid-oidc/oidc-configuration.scm:126
 msgid "#:token-endpoint should be an URI"
 msgstr "#:token-endpoint doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:128
+#: src/scm/webid-oidc/oidc-configuration.scm:131
 msgid "#:authorization-endpoint should be an URI"
 msgstr "#:authorization-endpoint doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:133
+#: src/scm/webid-oidc/oidc-configuration.scm:136
 msgid ""
 "#:solid-oidc-supported should be exactly 'https://solidproject.org/TR/solid-"
 "oidc'"
@@ -1166,34 +1162,34 @@ msgstr ""
 "#:solid-oidc-supported doit être exactement « https://solidproject.org/TR/"
 "solid-oidc »"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:142
+#: src/scm/webid-oidc/oidc-configuration.scm:145
 msgid "#:server should be an URI"
 msgstr "#:server doit être une URI"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:159
+#: src/scm/webid-oidc/oidc-configuration.scm:162
 #, scheme-format
 msgid "cannot fetch the OIDC configuration: ~a"
 msgstr "impossible de télécharger la configuration OIDC : ~a"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:161
+#: src/scm/webid-oidc/oidc-configuration.scm:164
 msgid "cannot fetch the OIDC configuration"
 msgstr "impossible de télécharger la configuration OIDC"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:165
+#: src/scm/webid-oidc/oidc-configuration.scm:168
 #, scheme-format
 msgid "the server responded with ~s ~s"
 msgstr "le serveur a répondu ~s ~s"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:170
+#: src/scm/webid-oidc/oidc-configuration.scm:173
 msgid "there is no content-type"
 msgstr "il n’y a pas de type de contenu"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:175
+#: src/scm/webid-oidc/oidc-configuration.scm:178
 #, scheme-format
 msgid "unexpected content-type: ~s"
 msgstr "type de contenu inattendu : ~s"
 
-#: src/scm/webid-oidc/oidc-configuration.scm:185
+#: src/scm/webid-oidc/oidc-configuration.scm:188
 msgid ""
 "when making an OIDC configuration, either its required #:jwks-uri, #:"
 "authorization-endpoint and #:token-endpoint fields or #:server or #:json-"
@@ -1203,24 +1199,24 @@ msgstr ""
 "requis #:jwks-uri, #:authorization-endpoint et #:token-endpoint, soit #:"
 "server, soit #:json-data"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:70
+#: src/scm/webid-oidc/oidc-id-token.scm:80
 #, scheme-format
 msgid "invalid OIDC ID token: ~a"
 msgstr "jeton d’identité OIDC invalide : ~a"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:72
+#: src/scm/webid-oidc/oidc-id-token.scm:82
 msgid "invalid OIDC id token"
 msgstr "jeton d’identité OIDC invalide"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:103
+#: src/scm/webid-oidc/oidc-id-token.scm:113
 msgid "#:sub should be a string"
 msgstr "#:sub doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:108
+#: src/scm/webid-oidc/oidc-id-token.scm:118
 msgid "#:aud should be a string"
 msgstr "#:aud doit être une chaîne de caractères"
 
-#: src/scm/webid-oidc/oidc-id-token.scm:124
+#: src/scm/webid-oidc/oidc-id-token.scm:134
 msgid ""
 "when making an ID token either its required fields (#:alg, #:webid, #:iss, #:"
 "sub, #:aud, #:iat and #:exp) or (#:jwt-header and #:jwt-payload) should be "
@@ -2251,10 +2247,28 @@ msgstr "Type de Média Non Supporté"
 msgid "reason-phrase|Not Acceptable"
 msgstr "Inacceptable"
 
-#: src/scm/webid-oidc/reverse-proxy.scm:57
+#: src/scm/webid-oidc/reverse-proxy.scm:58
 msgid "#:endpoint argument is not present or not an URI."
 msgstr "l’argument de #:endpoint n’est pas présent, ou pas une URI."
 
+#: src/scm/webid-oidc/serializable.scm:58
+msgid "a plugin class should have an explicit #:name and #:module-name"
+msgstr ""
+"une classe de plugin doit avoir un nom #:name et un nom de module #:module-"
+"name explicite"
+
+#: src/scm/webid-oidc/serializable.scm:61
+msgid "#:name should be a symbol"
+msgstr "#:name doit être un symbole"
+
+#: src/scm/webid-oidc/serializable.scm:71
+msgid "#:module-name should be a list of symbols"
+msgstr "#:module-name doit être une liste de symboles"
+
+#: src/scm/webid-oidc/serializable.scm:76
+msgid "plugin class names should be surrounded by <angle brackets>"
+msgstr "un nom de classe de plugin doit être entouré par des <chevrons>"
+
 #: src/scm/webid-oidc/serve.scm:77
 msgid "content negociation failed while serving a request"
 msgstr "la négociation de contenu a échoué pour le service d’une requête"
@@ -2379,6 +2393,9 @@ msgstr ""
 "<p>Vous voulez utiliser <pre>~s</pre> comme type d’offre, mais ce n’est pas "
 "supporté.</p>"
 
+#~ msgid "cannot parse a token"
+#~ msgstr "impossible d’analyser le jeton"
+
 #, scheme-format
 #~ msgid "~a: Warning: loading XML catalog from the web, ~s.\n"
 #~ msgstr "~a : Attention : chargement d’un catalogue XML depuis le web, ~s.\n"