Make a better client API

3 files changed, 506 insertions, 522 deletions

diff --git a/po/POTFILES.in b/po/POTFILES.in
index 9ad200b..69026ba 100644
--- a/po/POTFILES.in
+++ b/po/POTFILES.in
@@ -29,3 +29,4 @@ src/scm/webid-oidc/resource-server.scm
 src/scm/webid-oidc/hello-world.scm
 src/scm/webid-oidc/example-app.scm
 src/scm/webid-oidc/program.scm
+src/scm/webid-oidc/client/accounts.scm
\ No newline at end of file
diff --git a/po/disfluid.pot b/po/disfluid.pot
index 75e0165..df099d6 100644
--- a/po/disfluid.pot
+++ b/po/disfluid.pot
@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: disfluid SNAPSHOT\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-08-08 23:16+0200\n"
+"POT-Creation-Date: 2021-08-12 18:50+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -122,704 +122,699 @@ msgstr ""
 msgid "Usage: generate-key [NUMBER OF BITS | CURVE]\n"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1090
+#: src/scm/webid-oidc/errors.scm:1081
 msgid "that’s how it is"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1095
+#: src/scm/webid-oidc/errors.scm:1086
 #, scheme-format
 msgid "the value ~s is not a base64 string (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1098
+#: src/scm/webid-oidc/errors.scm:1089
 #, scheme-format
 msgid "the value ~s is not JSON (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1101
+#: src/scm/webid-oidc/errors.scm:1092
 #, scheme-format
 msgid "the value ~s is not Turtle (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1104
+#: src/scm/webid-oidc/errors.scm:1095
 #, scheme-format
 msgid "the value ~s does not identify an elleptic curve"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1109
+#: src/scm/webid-oidc/errors.scm:1100
 #, scheme-format
 msgid "the value ~s does not identify a JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1111
+#: src/scm/webid-oidc/errors.scm:1102
 #, scheme-format
 msgid "the value ~s does not identify a JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1116
+#: src/scm/webid-oidc/errors.scm:1107
 #, scheme-format
 msgid "the value ~s does not identify a public JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1118
+#: src/scm/webid-oidc/errors.scm:1109
 #, scheme-format
 msgid "the value ~s does not identify a public JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1123
+#: src/scm/webid-oidc/errors.scm:1114
 #, scheme-format
 msgid "the value ~s does not identify a private JWK (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1125
+#: src/scm/webid-oidc/errors.scm:1116
 #, scheme-format
 msgid "the value ~s does not identify a private JWK"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1130
+#: src/scm/webid-oidc/errors.scm:1121
 #, scheme-format
 msgid "the value ~s does not identify a JWKS (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1132
+#: src/scm/webid-oidc/errors.scm:1123
 #, scheme-format
 msgid "the value ~s does not identify a JWKS"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1135
+#: src/scm/webid-oidc/errors.scm:1126
 #, scheme-format
 msgid "the value ~s does not identify a hash algorithm"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1138
+#: src/scm/webid-oidc/errors.scm:1129
 #, scheme-format
 msgid "the value ~s is not an alist or misses key ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1141
+#: src/scm/webid-oidc/errors.scm:1132
 #, scheme-format
 msgid "the value ~s is not a JWS header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1144
+#: src/scm/webid-oidc/errors.scm:1135
 #, scheme-format
 msgid "the value ~s is not a JWS payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1147
+#: src/scm/webid-oidc/errors.scm:1138
 #, scheme-format
 msgid "the value ~s is not a JWS (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1150
+#: src/scm/webid-oidc/errors.scm:1141
 #, scheme-format
 msgid "the string ~s cannot be split in 3 parts with ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1153
+#: src/scm/webid-oidc/errors.scm:1144
 #, scheme-format
 msgid ""
 "all key candidates failed to verify signature ~s with algorithm ~s and "
 "payload ~a (there were ~a: ~s)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1156
+#: src/scm/webid-oidc/errors.scm:1147
 #, scheme-format
 msgid "I cannot decode JWS ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1159
+#: src/scm/webid-oidc/errors.scm:1150
 #, scheme-format
 msgid "I cannot encode JWS ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1162
+#: src/scm/webid-oidc/errors.scm:1153
 #, scheme-format
 msgid ""
 "the server request unexpectedly failed with code ~a and reason phrase ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1167
+#: src/scm/webid-oidc/errors.scm:1158
 #, scheme-format
 msgid "the header ~a should not have the value ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1169
+#: src/scm/webid-oidc/errors.scm:1160
 #, scheme-format
 msgid "the header ~a should be present"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1172
+#: src/scm/webid-oidc/errors.scm:1163
 #, scheme-format
 msgid "the server response wasn't expected: ~s (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1178
+#: src/scm/webid-oidc/errors.scm:1169
 #, scheme-format
 msgid "the value ~s is not an OIDC configuration (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1183
+#: src/scm/webid-oidc/errors.scm:1174
 #, scheme-format
 msgid "the webid field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1184
+#: src/scm/webid-oidc/errors.scm:1175
 msgid "the webid field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1188
+#: src/scm/webid-oidc/errors.scm:1179
 #, scheme-format
 msgid "the sub field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1189
+#: src/scm/webid-oidc/errors.scm:1180
 msgid "the sub field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1193
+#: src/scm/webid-oidc/errors.scm:1184
 #, scheme-format
 msgid "the iss field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1194
+#: src/scm/webid-oidc/errors.scm:1185
 msgid "the iss field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1198
+#: src/scm/webid-oidc/errors.scm:1189
 #, scheme-format
 msgid "the aud field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1199
+#: src/scm/webid-oidc/errors.scm:1190
 msgid "the aud field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1203
+#: src/scm/webid-oidc/errors.scm:1194
 #, scheme-format
 msgid "the iat field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1204
+#: src/scm/webid-oidc/errors.scm:1195
 msgid "the iat field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1208
+#: src/scm/webid-oidc/errors.scm:1199
 #, scheme-format
 msgid "the exp field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1209
+#: src/scm/webid-oidc/errors.scm:1200
 msgid "the exp field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1213
+#: src/scm/webid-oidc/errors.scm:1204
 #, scheme-format
 msgid "the cnf/jkt field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1214
+#: src/scm/webid-oidc/errors.scm:1205
 msgid "the cnf/jkt field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1218
+#: src/scm/webid-oidc/errors.scm:1209
 #, scheme-format
 msgid "the client-id field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1219
+#: src/scm/webid-oidc/errors.scm:1210
 msgid "the client-id field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1223
+#: src/scm/webid-oidc/errors.scm:1214
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:149
 #, scheme-format
 msgid "the redirect_uris field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1224
+#: src/scm/webid-oidc/errors.scm:1215
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:150
 msgid "the redirect_uris field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1228
+#: src/scm/webid-oidc/errors.scm:1219
 #, scheme-format
 msgid "the typ field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1229
+#: src/scm/webid-oidc/errors.scm:1220
 msgid "the typ field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1233
+#: src/scm/webid-oidc/errors.scm:1224
 #, scheme-format
 msgid "the jwk field is incorrect: ~s (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1235
+#: src/scm/webid-oidc/errors.scm:1226
 msgid "the jwk field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1239
+#: src/scm/webid-oidc/errors.scm:1230
 #, scheme-format
 msgid "the jti field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1240
+#: src/scm/webid-oidc/errors.scm:1231
 msgid "the jti field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1244
+#: src/scm/webid-oidc/errors.scm:1235
 #, scheme-format
 msgid "the nonce field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1245
+#: src/scm/webid-oidc/errors.scm:1236
 msgid "the nonce field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1249
+#: src/scm/webid-oidc/errors.scm:1240
 #, scheme-format
 msgid "the htm field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1250
+#: src/scm/webid-oidc/errors.scm:1241
 msgid "the htm field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1254
+#: src/scm/webid-oidc/errors.scm:1245
 #, scheme-format
 msgid "the htu field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1255
+#: src/scm/webid-oidc/errors.scm:1246
 msgid "the htu field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1259
+#: src/scm/webid-oidc/errors.scm:1250
 #, scheme-format
 msgid "the ath field is incorrect: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1260
+#: src/scm/webid-oidc/errors.scm:1251
 msgid "the ath field is missing"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1262
+#: src/scm/webid-oidc/errors.scm:1253
 #, scheme-format
 msgid "~s is not an access token (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1265
+#: src/scm/webid-oidc/errors.scm:1256
 #, scheme-format
 msgid "~s is not an access token header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1268
+#: src/scm/webid-oidc/errors.scm:1259
 #, scheme-format
 msgid "~s is not an access token payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1271
+#: src/scm/webid-oidc/errors.scm:1262
 #, scheme-format
 msgid "~s is not a DPoP proof (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1274
+#: src/scm/webid-oidc/errors.scm:1265
 #, scheme-format
 msgid "~s is not a DPoP proof header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1277
+#: src/scm/webid-oidc/errors.scm:1268
 #, scheme-format
 msgid "~s is not a DPoP proof payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1280
+#: src/scm/webid-oidc/errors.scm:1271
 #, scheme-format
 msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1287
+#: src/scm/webid-oidc/errors.scm:1278
 #, scheme-format
 msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1298
+#: src/scm/webid-oidc/errors.scm:1289
 #, scheme-format
 msgid "the HTTP method is signed for ~s, but ~s was requested"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1301
+#: src/scm/webid-oidc/errors.scm:1292
 #, scheme-format
 msgid "the HTTP uri is signed for ~a, but ~a was requested"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1304
+#: src/scm/webid-oidc/errors.scm:1295
 #, scheme-format
 msgid "the date is ~a, but the DPoP proof is signed in the future at ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1308
+#: src/scm/webid-oidc/errors.scm:1299
 #, scheme-format
 msgid "the date is ~a, but the DPoP proof was signed too long ago at ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1317
+#: src/scm/webid-oidc/errors.scm:1308
 #, scheme-format
 msgid "the key ~s does not hash to ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1319
+#: src/scm/webid-oidc/errors.scm:1310
 #, scheme-format
 msgid "the key confirmation of ~s failed (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1321
+#: src/scm/webid-oidc/errors.scm:1312
 #, scheme-format
 msgid "the key confirmation of ~s failed"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1326
+#: src/scm/webid-oidc/errors.scm:1317
 #, scheme-format
 msgid "the DPoP proof is bound to an access token with hash ~s, not ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1328
+#: src/scm/webid-oidc/errors.scm:1319
 #, scheme-format
 msgid "the DPoP proof should be bound to the access token ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1331
+#: src/scm/webid-oidc/errors.scm:1322
 #, scheme-format
 msgid "the jti ~s has already been found (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1334
+#: src/scm/webid-oidc/errors.scm:1325
 #, scheme-format
 msgid "I cannot decode ~s as an access token (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1337
+#: src/scm/webid-oidc/errors.scm:1328
 #, scheme-format
 msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1340
+#: src/scm/webid-oidc/errors.scm:1331
 #, scheme-format
 msgid "I cannot decode ~s as a DPoP proof (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1343
+#: src/scm/webid-oidc/errors.scm:1334
 #, scheme-format
 msgid "I cannot encode ~s as a DPoP proof (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1346
+#: src/scm/webid-oidc/errors.scm:1337
 #, scheme-format
 msgid "I could not fetch a RDF graph at ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1349
+#: src/scm/webid-oidc/errors.scm:1340
 #, scheme-format
 msgid "~s is not a client manifest (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1352
+#: src/scm/webid-oidc/errors.scm:1343
 #, scheme-format
 msgid "~s does not authorize redirection URI ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1355
+#: src/scm/webid-oidc/errors.scm:1346
 msgid "I cannot serve a public manifest"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1357
+#: src/scm/webid-oidc/errors.scm:1348
 #, scheme-format
 msgid "~a does not have a client manifest registration triple"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1360
+#: src/scm/webid-oidc/errors.scm:1351
 #, scheme-format
 msgid "the client manifest at ~a is advertised for ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1363
+#: src/scm/webid-oidc/errors.scm:1354
 #, scheme-format
 msgid "I could not fetch the client manifest of ~a (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1366
+#: src/scm/webid-oidc/errors.scm:1357
 #, scheme-format
 msgid "~s is not an authorization code (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1369
+#: src/scm/webid-oidc/errors.scm:1360
 #, scheme-format
 msgid "~s is not an authorization code header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1372
+#: src/scm/webid-oidc/errors.scm:1363
 #, scheme-format
 msgid "~s is not an authorization code payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1375
+#: src/scm/webid-oidc/errors.scm:1366
 #, scheme-format
 msgid "the current time is ~a, and the authorization code expired at ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1379
+#: src/scm/webid-oidc/errors.scm:1370
 #, scheme-format
 msgid "I cannot decode ~s as an authorization code (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1382
+#: src/scm/webid-oidc/errors.scm:1373
 #, scheme-format
 msgid "I cannot encode ~s as an authorization code (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1385
+#: src/scm/webid-oidc/errors.scm:1376
 #, scheme-format
 msgid "there is no such refresh token as ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1388
+#: src/scm/webid-oidc/errors.scm:1379
 #, scheme-format
 msgid ""
 "the refresh token is bound to a key confirmed as ~s, but it is used with key "
 "~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1391
+#: src/scm/webid-oidc/errors.scm:1382
 #, scheme-format
 msgid "I cannot decode ~s as an ID token (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1394
+#: src/scm/webid-oidc/errors.scm:1385
 #, scheme-format
 msgid "I cannot encode ~s as an ID token (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1397
+#: src/scm/webid-oidc/errors.scm:1388
 #, scheme-format
 msgid "the grant type ~s is not supported"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1400
+#: src/scm/webid-oidc/errors.scm:1391
 msgid "there is no authorization code in the request"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1402
+#: src/scm/webid-oidc/errors.scm:1393
 msgid "there is no refresh token in the request"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1404
+#: src/scm/webid-oidc/errors.scm:1395
 #, scheme-format
 msgid "~s is not an ID token (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1407
+#: src/scm/webid-oidc/errors.scm:1398
 #, scheme-format
 msgid "~s is not an ID token header (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1410
+#: src/scm/webid-oidc/errors.scm:1401
 #, scheme-format
 msgid "~s is not an ID token payload (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1413
+#: src/scm/webid-oidc/errors.scm:1404
 #, scheme-format
 msgid ""
 "I couldn’t set the locale to ~s as an approximation of the client locale ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1416
+#: src/scm/webid-oidc/errors.scm:1407
 #, scheme-format
 msgid "~s does not admit ~s as an identity provider"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1419
+#: src/scm/webid-oidc/errors.scm:1410
 #, scheme-format
 msgid ""
 "~a is neither an identity provider (because ~a) nor a webid (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1424
-#, scheme-format
-msgid "the token request failed (because ~a)"
-msgstr ""
-
-#: src/scm/webid-oidc/errors.scm:1427
+#: src/scm/webid-oidc/errors.scm:1415
 #, scheme-format
 msgid "you don’t have a refresh token for identity ~a certified by ~a in ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1432
+#: src/scm/webid-oidc/errors.scm:1420
 #, scheme-format
 msgid "all identity provider candidates for ~a failed: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1436
+#: src/scm/webid-oidc/errors.scm:1424
 #, scheme-format
 msgid "~s failed (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1439
+#: src/scm/webid-oidc/errors.scm:1427
 msgid ", "
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1441
+#: src/scm/webid-oidc/errors.scm:1429
 #, scheme-format
 msgid "no resource has been found to serve URI path ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1444
+#: src/scm/webid-oidc/errors.scm:1432
 #, scheme-format
 msgid "the resource kind ~s is absent for the resource at ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1447
+#: src/scm/webid-oidc/errors.scm:1435
 #, scheme-format
 msgid "no resource has been found to serve URI path ~s, but ~s exists"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1450
+#: src/scm/webid-oidc/errors.scm:1438
 msgid "the root storage cannot be deleted"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1452
+#: src/scm/webid-oidc/errors.scm:1440
 #, scheme-format
 msgid "the container ~s should be emptied before being deleted"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1455
+#: src/scm/webid-oidc/errors.scm:1443
 #, scheme-format
 msgid "the group ~s cannot be fetched (because ~a)"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1459
+#: src/scm/webid-oidc/errors.scm:1447
 #, scheme-format
 msgid "the containment triples in the request to update ~s are not up to date"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1462
+#: src/scm/webid-oidc/errors.scm:1450
 #, scheme-format
 msgid "the server cannot process resources with the ~s content-type"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1465
+#: src/scm/webid-oidc/errors.scm:1453
 #, scheme-format
 msgid ""
 "the client wants to create a resource at ~s, which is reserved for an "
 "auxiliary resource"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1468
+#: src/scm/webid-oidc/errors.scm:1456
 #, scheme-format
 msgid ""
 "the operation on ~s by ~a is refused, because it’s not by ~s and the access "
 "control forbids the following mode of operation: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1472
+#: src/scm/webid-oidc/errors.scm:1460
 msgid "an anonymous user"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1477
+#: src/scm/webid-oidc/errors.scm:1465
 #, scheme-format
 msgid ""
 "the client precondition failed for ~s: it allows for ~s, forbids ~s, but the "
 "resource has a representation of ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1479
+#: src/scm/webid-oidc/errors.scm:1467
 #, scheme-format
 msgid ""
 "the client precondition failed for ~s: it allows for ~s, forbids ~s, but the "
 "resource has no representation"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1482
+#: src/scm/webid-oidc/errors.scm:1470
 #, scheme-format
 msgid ""
 "the client wanted a response with a content type among ~s, but the resource "
 "at ~s has content-type ~s which cannot be converted to one of them"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1489
+#: src/scm/webid-oidc/errors.scm:1477
 msgid "that’s it"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1493
+#: src/scm/webid-oidc/errors.scm:1481
 #, scheme-format
 msgid "~a and ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1496
+#: src/scm/webid-oidc/errors.scm:1484
 #, scheme-format
 msgid "~a, ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1500
+#: src/scm/webid-oidc/errors.scm:1488
 #, scheme-format
 msgid "the signature ~a does not match key ~s with payload ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1503
+#: src/scm/webid-oidc/errors.scm:1491
 #, scheme-format
 msgid "the request failed unexpectedly with code ~a: ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1507
+#: src/scm/webid-oidc/errors.scm:1495
 msgid "there is an undefined variable"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1509
+#: src/scm/webid-oidc/errors.scm:1497
 #, scheme-format
 msgid "the origin is ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1512
+#: src/scm/webid-oidc/errors.scm:1500
 #, scheme-format
 msgid "a message is attached: ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1515
+#: src/scm/webid-oidc/errors.scm:1503
 #, scheme-format
 msgid "the values ~s are problematic"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1518
+#: src/scm/webid-oidc/errors.scm:1506
 #, scheme-format
 msgid "there is a kind (~s) and args ~s"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1521
+#: src/scm/webid-oidc/errors.scm:1509
 msgid "there is an assertion failure"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1523
+#: src/scm/webid-oidc/errors.scm:1511
 #, scheme-format
 msgid "the program quits with code ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1526
+#: src/scm/webid-oidc/errors.scm:1514
 msgid "the program cannot recover from this exception"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1528
+#: src/scm/webid-oidc/errors.scm:1516
 msgid "there is an external error"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1530
+#: src/scm/webid-oidc/errors.scm:1518
 msgid "there is an error"
 msgstr ""
 
-#: src/scm/webid-oidc/errors.scm:1532
+#: src/scm/webid-oidc/errors.scm:1520
 #, scheme-format
-msgid "Unhandled exception type ~a."
+msgid "there is an unknown exception of kind ~s"
 msgstr ""
 
 #: src/scm/webid-oidc/identity-provider.scm:68
@@ -958,18 +953,17 @@ msgid ""
 "permissions."
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:85
+#: src/scm/webid-oidc/resource-server.scm:86
 #, scheme-format
 msgid "~a: authentication failure: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/resource-server.scm:267
+#: src/scm/webid-oidc/resource-server.scm:279
 #, scheme-format
 msgid "Warning: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/hello-world.scm:47 src/scm/webid-oidc/example-app.scm:116
-#: src/scm/webid-oidc/program.scm:233
+#: src/scm/webid-oidc/hello-world.scm:47 src/scm/webid-oidc/program.scm:233
 msgid "command-line|version"
 msgstr ""
 
@@ -1023,7 +1017,6 @@ msgid ""
 msgstr ""
 
 #: src/scm/webid-oidc/hello-world.scm:102
-#: src/scm/webid-oidc/example-app.scm:159
 #, scheme-format
 msgid "~a version ~a\n"
 msgstr ""
@@ -1037,114 +1030,63 @@ msgstr ""
 msgid "The port should be a number between 0 and 65535.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:51
-#, scheme-format
-msgid "~a.\t~a, certified by ~a;\n"
+#: src/scm/webid-oidc/example-app.scm:63
+msgid "Main menu:\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:62
+#: src/scm/webid-oidc/example-app.scm:66
 #, scheme-format
-msgid "~a – ~a\n"
+msgid "~a. Log in with ~a (issued by ~a): ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:81
-#, scheme-format
-msgid "I’m expecting a number between ~a and ~a.\n"
+#: src/scm/webid-oidc/example-app.scm:71
+msgid "a new user"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:88
-msgid "Please enter an URI to GET: "
+#: src/scm/webid-oidc/example-app.scm:75
+msgid "status|currently logged in"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:107
-#, scheme-format
-msgid "Sending a request: ~s\n"
+#: src/scm/webid-oidc/example-app.scm:77
+msgid "status|offline (but accessible)"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:118
-msgid "comand-line|help"
+#: src/scm/webid-oidc/example-app.scm:78
+msgid "status|offline (inaccessible)"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:126
-#, scheme-format
-msgid ""
-"Usage: ~a [OPTIONS]...\n"
-"\n"
-"Demonstrate a webid-oidc application.\n"
-"\n"
-"Options:\n"
-"  -h, --~a:\n"
-"      display this help message and exit.\n"
-"  -v, --~a:\n"
-"      display the version information (~a) and exit.\n"
-"\n"
-"Environment variables:\n"
-"\n"
-"  LANG: set the locale. Currently ~a.\n"
-"\n"
-"  XDG_CACHE_HOME: where the seed for the key generator is\n"
-"stored. Currently ~a.\n"
-"\n"
-"  XDG_DATA_HOME: where the login credentials are stored. Currently ~a.\n"
-"\n"
-"  HOME: to compute a default value for XDG_CACHE_HOME and\n"
-"XDG_DATA_HOME, if missing. Currently ~a.\n"
-"\n"
-"If you find a bug, send a report to ~a.\n"
-msgstr ""
-
-#: src/scm/webid-oidc/example-app.scm:163
-msgid "First, let’s log in. Here are your options:\n"
+#: src/scm/webid-oidc/example-app.scm:79
+msgid "status|not initialized yet"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:165
-msgid "0.\tLog in with a different identity.\n"
-msgstr ""
-
-#: src/scm/webid-oidc/example-app.scm:170
-#: src/scm/webid-oidc/example-app.scm:189
-msgid "Please indicate your choice number: "
+#: src/scm/webid-oidc/example-app.scm:81
+msgid ""
+"Type a number to log in, prefix it with '-' to delete the account, or type + "
+"to create a new account.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:175
-msgid "Please enter your webid, or identity server: "
+#: src/scm/webid-oidc/example-app.scm:98
+#, scheme-format
+msgid "Please visit: ~a\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:185
-msgid "There are different possible identity providers for your webid:\n"
+#: src/scm/webid-oidc/example-app.scm:99
+msgid "Then, paste the authorization code you get:\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:192
+#: src/scm/webid-oidc/example-app.scm:105
 #, scheme-format
-msgid ""
-"Please visit the following URI with a web browser:\n"
-"~a\n"
-msgstr ""
-
-#: src/scm/webid-oidc/example-app.scm:194
-msgid "Please paste your authorization code: "
+msgid "I could not negociate an access token.  ~a"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:205
-#, scheme-format
+#: src/scm/webid-oidc/example-app.scm:109
 msgid ""
-"Log in success. Keep this identity token for yourself:\n"
-"\n"
-"~a\n"
-"\n"
-"Now, you can do authenticated request by presenting the following access "
-"token:\n"
-"\n"
-"~a\n"
-"\n"
-"and signing DPoP proofs with the following key:\n"
-"\n"
-"~a\n"
+"The refresh token has expired, it is not possible to use that account "
+"offline.\n"
 msgstr ""
 
-#: src/scm/webid-oidc/example-app.scm:226
-#, scheme-format
-msgid "There was an error: ~a\n"
+#: src/scm/webid-oidc/example-app.scm:114
+msgid "Please enter an URI to GET:\n"
 msgstr ""
 
 #: src/scm/webid-oidc/program.scm:125
diff --git a/po/fr.po b/po/fr.po
index 1f8d428..310c9a8 100644
--- a/po/fr.po
+++ b/po/fr.po
@@ -2,8 +2,8 @@ msgid ""
 msgstr ""
 "Project-Id-Version: webid-oidc 0.0.0\n"
 "Report-Msgid-Bugs-To: vivien@planete-kraus.eu\n"
-"POT-Creation-Date: 2021-08-08 23:16+0200\n"
-"PO-Revision-Date: 2021-07-30 21:16+0200\n"
+"POT-Creation-Date: 2021-08-12 18:50+0200\n"
+"PO-Revision-Date: 2021-08-12 18:53+0200\n"
 "Last-Translator: Vivien Kraus <vivien@planete-kraus.eu>\n"
 "Language-Team: French <vivien@planete-kraus.eu>\n"
 "Language: fr\n"
@@ -126,101 +126,101 @@ msgstr "Utilisation : generate-random [NOMBRE D'OCTETS]\n"
 msgid "Usage: generate-key [NUMBER OF BITS | CURVE]\n"
 msgstr "Utilisation : generate-key [NOMBRE DE BITS | COURBE]\n"
 
-#: src/scm/webid-oidc/errors.scm:1090
+#: src/scm/webid-oidc/errors.scm:1081
 msgid "that’s how it is"
 msgstr "c’est comme ça"
 
-#: src/scm/webid-oidc/errors.scm:1095
+#: src/scm/webid-oidc/errors.scm:1086
 #, scheme-format
 msgid "the value ~s is not a base64 string (because ~a)"
 msgstr "la valeur ~s n’est pas une chaîne base64 (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1098
+#: src/scm/webid-oidc/errors.scm:1089
 #, scheme-format
 msgid "the value ~s is not JSON (because ~a)"
 msgstr "la valeur ~s n’est pas du JSON (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1101
+#: src/scm/webid-oidc/errors.scm:1092
 #, scheme-format
 msgid "the value ~s is not Turtle (because ~a)"
 msgstr "la valeur ~s n’est pas du Turtle (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1104
+#: src/scm/webid-oidc/errors.scm:1095
 #, scheme-format
 msgid "the value ~s does not identify an elleptic curve"
 msgstr "la valeur ~s n’identifie pas une courbe elliptique"
 
-#: src/scm/webid-oidc/errors.scm:1109
+#: src/scm/webid-oidc/errors.scm:1100
 #, scheme-format
 msgid "the value ~s does not identify a JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1111
+#: src/scm/webid-oidc/errors.scm:1102
 #, scheme-format
 msgid "the value ~s does not identify a JWK"
 msgstr "la valeur ~s n’identifie pas une JWK"
 
-#: src/scm/webid-oidc/errors.scm:1116
+#: src/scm/webid-oidc/errors.scm:1107
 #, scheme-format
 msgid "the value ~s does not identify a public JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK publique (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1118
+#: src/scm/webid-oidc/errors.scm:1109
 #, scheme-format
 msgid "the value ~s does not identify a public JWK"
 msgstr "la valeur ~s n’identifie pas une JWK publique"
 
-#: src/scm/webid-oidc/errors.scm:1123
+#: src/scm/webid-oidc/errors.scm:1114
 #, scheme-format
 msgid "the value ~s does not identify a private JWK (because ~a)"
 msgstr "la valeur ~s n’identifie pas une JWK privée (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1125
+#: src/scm/webid-oidc/errors.scm:1116
 #, scheme-format
 msgid "the value ~s does not identify a private JWK"
 msgstr "la valeur ~s n’identifie pas une JWK privée"
 
-#: src/scm/webid-oidc/errors.scm:1130
+#: src/scm/webid-oidc/errors.scm:1121
 #, scheme-format
 msgid "the value ~s does not identify a JWKS (because ~a)"
 msgstr "la valeur ~s n’identifie pas un JWKS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1132
+#: src/scm/webid-oidc/errors.scm:1123
 #, scheme-format
 msgid "the value ~s does not identify a JWKS"
 msgstr "la valeur ~s n’identifie pas un JWKS"
 
-#: src/scm/webid-oidc/errors.scm:1135
+#: src/scm/webid-oidc/errors.scm:1126
 #, scheme-format
 msgid "the value ~s does not identify a hash algorithm"
 msgstr "la valeur ~s n’identifie pas un algorithme de hachage"
 
-#: src/scm/webid-oidc/errors.scm:1138
+#: src/scm/webid-oidc/errors.scm:1129
 #, scheme-format
 msgid "the value ~s is not an alist or misses key ~s"
 msgstr "la valeur ~s n’est pas une alist ou il manque la clé ~s"
 
-#: src/scm/webid-oidc/errors.scm:1141
+#: src/scm/webid-oidc/errors.scm:1132
 #, scheme-format
 msgid "the value ~s is not a JWS header (because ~a)"
 msgstr "la valeur ~s n’est pas un header JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1144
+#: src/scm/webid-oidc/errors.scm:1135
 #, scheme-format
 msgid "the value ~s is not a JWS payload (because ~a)"
 msgstr "la valeur ~s n’est pas un contenu JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1147
+#: src/scm/webid-oidc/errors.scm:1138
 #, scheme-format
 msgid "the value ~s is not a JWS (because ~a)"
 msgstr "la valeur ~s n’est pas un JWS (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1150
+#: src/scm/webid-oidc/errors.scm:1141
 #, scheme-format
 msgid "the string ~s cannot be split in 3 parts with ~s"
 msgstr "la chaîne ~s ne peut pas être découpée en 3 parties avec ~s"
 
-#: src/scm/webid-oidc/errors.scm:1153
+#: src/scm/webid-oidc/errors.scm:1144
 #, scheme-format
 msgid ""
 "all key candidates failed to verify signature ~s with algorithm ~s and "
@@ -229,17 +229,17 @@ msgstr ""
 "aucune clé candidate n’a pu vérifier la signature ~s avec l’algorithme ~s et "
 "le contenu ~a (il y en avait ~a : ~s)"
 
-#: src/scm/webid-oidc/errors.scm:1156
+#: src/scm/webid-oidc/errors.scm:1147
 #, scheme-format
 msgid "I cannot decode JWS ~a (because ~a)"
 msgstr "je n’ai pas pu décoder le JWS encodé par ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1159
+#: src/scm/webid-oidc/errors.scm:1150
 #, scheme-format
 msgid "I cannot encode JWS ~a (because ~a)"
 msgstr "je n’ai pas pu encoder le JWS ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1162
+#: src/scm/webid-oidc/errors.scm:1153
 #, scheme-format
 msgid ""
 "the server request unexpectedly failed with code ~a and reason phrase ~s"
@@ -247,357 +247,357 @@ msgstr ""
 "la requête au serveur a échoué de façon inattendue avec un code ~a et une "
 "raison ~s"
 
-#: src/scm/webid-oidc/errors.scm:1167
+#: src/scm/webid-oidc/errors.scm:1158
 #, scheme-format
 msgid "the header ~a should not have the value ~s"
 msgstr "l’en-tête ~a ne devrait pas avoir la valeur ~s"
 
-#: src/scm/webid-oidc/errors.scm:1169
+#: src/scm/webid-oidc/errors.scm:1160
 #, scheme-format
 msgid "the header ~a should be present"
 msgstr "l’en-tête ~a devrait être présent"
 
-#: src/scm/webid-oidc/errors.scm:1172
+#: src/scm/webid-oidc/errors.scm:1163
 #, scheme-format
 msgid "the server response wasn't expected: ~s (because ~a)"
 msgstr "la réponse du serveur est inattendue : ~s (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1178
+#: src/scm/webid-oidc/errors.scm:1169
 #, scheme-format
 msgid "the value ~s is not an OIDC configuration (because ~a)"
 msgstr "la valeur ~s n’est pas une configuration OIDC (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1183
+#: src/scm/webid-oidc/errors.scm:1174
 #, scheme-format
 msgid "the webid field is incorrect: ~s"
 msgstr "le champ webid est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1184
+#: src/scm/webid-oidc/errors.scm:1175
 msgid "the webid field is missing"
 msgstr "le champ webid est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1188
+#: src/scm/webid-oidc/errors.scm:1179
 #, scheme-format
 msgid "the sub field is incorrect: ~s"
 msgstr "le champ sub est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1189
+#: src/scm/webid-oidc/errors.scm:1180
 msgid "the sub field is missing"
 msgstr "le champ sub est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1193
+#: src/scm/webid-oidc/errors.scm:1184
 #, scheme-format
 msgid "the iss field is incorrect: ~s"
 msgstr "le champ iss est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1194
+#: src/scm/webid-oidc/errors.scm:1185
 msgid "the iss field is missing"
 msgstr "le champ iss est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1198
+#: src/scm/webid-oidc/errors.scm:1189
 #, scheme-format
 msgid "the aud field is incorrect: ~s"
 msgstr "le champ aud est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1199
+#: src/scm/webid-oidc/errors.scm:1190
 msgid "the aud field is missing"
 msgstr "le champ aud est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1203
+#: src/scm/webid-oidc/errors.scm:1194
 #, scheme-format
 msgid "the iat field is incorrect: ~s"
 msgstr "le champ iat est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1204
+#: src/scm/webid-oidc/errors.scm:1195
 msgid "the iat field is missing"
 msgstr "le champ iat est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1208
+#: src/scm/webid-oidc/errors.scm:1199
 #, scheme-format
 msgid "the exp field is incorrect: ~s"
 msgstr "le champ exp est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1209
+#: src/scm/webid-oidc/errors.scm:1200
 msgid "the exp field is missing"
 msgstr "le champ exp est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1213
+#: src/scm/webid-oidc/errors.scm:1204
 #, scheme-format
 msgid "the cnf/jkt field is incorrect: ~s"
 msgstr "le champ cnf/jkt est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1214
+#: src/scm/webid-oidc/errors.scm:1205
 msgid "the cnf/jkt field is missing"
 msgstr "le champ cnf/jkt est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1218
+#: src/scm/webid-oidc/errors.scm:1209
 #, scheme-format
 msgid "the client-id field is incorrect: ~s"
 msgstr "le champ client-id est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1219
+#: src/scm/webid-oidc/errors.scm:1210
 msgid "the client-id field is missing"
 msgstr "le champ client-id est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1223
+#: src/scm/webid-oidc/errors.scm:1214
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:149
 #, scheme-format
 msgid "the redirect_uris field is incorrect: ~s"
 msgstr "le champ redirect_uris est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1224
+#: src/scm/webid-oidc/errors.scm:1215
 #: src/scm/webid-oidc/authorization-page-unsafe.scm:150
 msgid "the redirect_uris field is missing"
 msgstr "le champ redirect_uris est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1228
+#: src/scm/webid-oidc/errors.scm:1219
 #, scheme-format
 msgid "the typ field is incorrect: ~s"
 msgstr "le champ typ est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1229
+#: src/scm/webid-oidc/errors.scm:1220
 msgid "the typ field is missing"
 msgstr "le champ typ est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1233
+#: src/scm/webid-oidc/errors.scm:1224
 #, scheme-format
 msgid "the jwk field is incorrect: ~s (because ~a)"
 msgstr "le champ jwk est incorrect : ~s (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1235
+#: src/scm/webid-oidc/errors.scm:1226
 msgid "the jwk field is missing"
 msgstr "le champ jwk est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1239
+#: src/scm/webid-oidc/errors.scm:1230
 #, scheme-format
 msgid "the jti field is incorrect: ~s"
 msgstr "le champ jti est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1240
+#: src/scm/webid-oidc/errors.scm:1231
 msgid "the jti field is missing"
 msgstr "le champ jti est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1244
+#: src/scm/webid-oidc/errors.scm:1235
 #, scheme-format
 msgid "the nonce field is incorrect: ~s"
 msgstr "le champ nonce est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1245
+#: src/scm/webid-oidc/errors.scm:1236
 msgid "the nonce field is missing"
 msgstr "le champ nonce est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1249
+#: src/scm/webid-oidc/errors.scm:1240
 #, scheme-format
 msgid "the htm field is incorrect: ~s"
 msgstr "le champ htm est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1250
+#: src/scm/webid-oidc/errors.scm:1241
 msgid "the htm field is missing"
 msgstr "le champ htm est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1254
+#: src/scm/webid-oidc/errors.scm:1245
 #, scheme-format
 msgid "the htu field is incorrect: ~s"
 msgstr "le champ htu est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1255
+#: src/scm/webid-oidc/errors.scm:1246
 msgid "the htu field is missing"
 msgstr "le champ htu est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1259
+#: src/scm/webid-oidc/errors.scm:1250
 #, scheme-format
 msgid "the ath field is incorrect: ~s"
 msgstr "le champ ath est incorrect : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1260
+#: src/scm/webid-oidc/errors.scm:1251
 msgid "the ath field is missing"
 msgstr "le champ ath est manquant"
 
-#: src/scm/webid-oidc/errors.scm:1262
+#: src/scm/webid-oidc/errors.scm:1253
 #, scheme-format
 msgid "~s is not an access token (because ~a)"
 msgstr "~s n’est pas un jeton d’accès (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1265
+#: src/scm/webid-oidc/errors.scm:1256
 #, scheme-format
 msgid "~s is not an access token header (because ~a)"
 msgstr "~s n’est pas un en-tête de jeton d’accès (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1268
+#: src/scm/webid-oidc/errors.scm:1259
 #, scheme-format
 msgid "~s is not an access token payload (because ~a)"
 msgstr "~s n’est pas un contenu de jeton d’accès (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1271
+#: src/scm/webid-oidc/errors.scm:1262
 #, scheme-format
 msgid "~s is not a DPoP proof (because ~a)"
 msgstr "~s n’est pas une preuve DPoP (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1274
+#: src/scm/webid-oidc/errors.scm:1265
 #, scheme-format
 msgid "~s is not a DPoP proof header (because ~a)"
 msgstr "~s n’est pas un en-tête de preuve DPoP (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1277
+#: src/scm/webid-oidc/errors.scm:1268
 #, scheme-format
 msgid "~s is not a DPoP proof payload (because ~a)"
 msgstr "~s n’est pas un contenu de preuve DPoP (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1280
+#: src/scm/webid-oidc/errors.scm:1271
 #, scheme-format
 msgid "I cannot fetch the issuer configuration of ~a (because ~a)"
 msgstr ""
 "je n’ai pas pu récupérer la configuration de l’émetteur ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1287
+#: src/scm/webid-oidc/errors.scm:1278
 #, scheme-format
 msgid "I cannot fetch the JWKS of ~a at ~a (because ~a)"
 msgstr "je n’ai pas pu récupérer le JWKS de ~a à ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1298
+#: src/scm/webid-oidc/errors.scm:1289
 #, scheme-format
 msgid "the HTTP method is signed for ~s, but ~s was requested"
 msgstr "la méthode HTTP a été signée pour ~s, mais ~s a été demandé"
 
-#: src/scm/webid-oidc/errors.scm:1301
+#: src/scm/webid-oidc/errors.scm:1292
 #, scheme-format
 msgid "the HTTP uri is signed for ~a, but ~a was requested"
 msgstr "l’uri HTTP a été signé pour ~a, mais ~a a été demandé"
 
-#: src/scm/webid-oidc/errors.scm:1304
+#: src/scm/webid-oidc/errors.scm:1295
 #, scheme-format
 msgid "the date is ~a, but the DPoP proof is signed in the future at ~a"
 msgstr "la date est ~a, mais la preuve DPoP a été signée dans le futur à ~a"
 
-#: src/scm/webid-oidc/errors.scm:1308
+#: src/scm/webid-oidc/errors.scm:1299
 #, scheme-format
 msgid "the date is ~a, but the DPoP proof was signed too long ago at ~a"
 msgstr ""
 "la date est ~a, mais la preuve DPoP a été signée il y a trop longtemps à ~a"
 
-#: src/scm/webid-oidc/errors.scm:1317
+#: src/scm/webid-oidc/errors.scm:1308
 #, scheme-format
 msgid "the key ~s does not hash to ~a"
 msgstr "la clé ~s ne donne pas un hash de ~a"
 
-#: src/scm/webid-oidc/errors.scm:1319
+#: src/scm/webid-oidc/errors.scm:1310
 #, scheme-format
 msgid "the key confirmation of ~s failed (because ~a)"
 msgstr "la confirmation de clé de ~s a échoué (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1321
+#: src/scm/webid-oidc/errors.scm:1312
 #, scheme-format
 msgid "the key confirmation of ~s failed"
 msgstr "la confirmation de la clé ~s a échoué"
 
-#: src/scm/webid-oidc/errors.scm:1326
+#: src/scm/webid-oidc/errors.scm:1317
 #, scheme-format
 msgid "the DPoP proof is bound to an access token with hash ~s, not ~s"
 msgstr "la preuve DPoP est liée à un jeton d’accès haché en ~s, pas ~s"
 
-#: src/scm/webid-oidc/errors.scm:1328
+#: src/scm/webid-oidc/errors.scm:1319
 #, scheme-format
 msgid "the DPoP proof should be bound to the access token ~s"
 msgstr "la preuve DPoP doit être liée au jeton d’accès ~s"
 
-#: src/scm/webid-oidc/errors.scm:1331
+#: src/scm/webid-oidc/errors.scm:1322
 #, scheme-format
 msgid "the jti ~s has already been found (because ~a)"
 msgstr "le jti ~s a déjà été trouvé (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1334
+#: src/scm/webid-oidc/errors.scm:1325
 #, scheme-format
 msgid "I cannot decode ~s as an access token (because ~a)"
 msgstr "je n’ai pas pu décoder ~s comme jeton d’accès (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1337
+#: src/scm/webid-oidc/errors.scm:1328
 #, scheme-format
 msgid "I cannot encode ~s as an access token with key ~s (because ~a)"
 msgstr ""
 "je n’ai pas pu encoder ~s comme un jeton d’accès avec la clé ~s (parce que "
 "~a)"
 
-#: src/scm/webid-oidc/errors.scm:1340
+#: src/scm/webid-oidc/errors.scm:1331
 #, scheme-format
 msgid "I cannot decode ~s as a DPoP proof (because ~a)"
 msgstr "je n’ai pas pu décoder ~s comme preuve DPoP (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1343
+#: src/scm/webid-oidc/errors.scm:1334
 #, scheme-format
 msgid "I cannot encode ~s as a DPoP proof (because ~a)"
 msgstr "je n’ai pas pu encoder ~s comme une preuve DPoP (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1346
+#: src/scm/webid-oidc/errors.scm:1337
 #, scheme-format
 msgid "I could not fetch a RDF graph at ~a (because ~a)"
 msgstr "je n’ai pas pu récupérer de graphe RDF à ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1349
+#: src/scm/webid-oidc/errors.scm:1340
 #, scheme-format
 msgid "~s is not a client manifest (because ~a)"
 msgstr "~s n’est pas un manifeste client (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1352
+#: src/scm/webid-oidc/errors.scm:1343
 #, scheme-format
 msgid "~s does not authorize redirection URI ~a"
 msgstr "~s n’autorise pas l’URI de redirection ~a"
 
-#: src/scm/webid-oidc/errors.scm:1355
+#: src/scm/webid-oidc/errors.scm:1346
 msgid "I cannot serve a public manifest"
 msgstr "je ne peux pas servir un manifeste public"
 
-#: src/scm/webid-oidc/errors.scm:1357
+#: src/scm/webid-oidc/errors.scm:1348
 #, scheme-format
 msgid "~a does not have a client manifest registration triple"
 msgstr "~a n’a pas de triplet d’enregistrement de manifeste client"
 
-#: src/scm/webid-oidc/errors.scm:1360
+#: src/scm/webid-oidc/errors.scm:1351
 #, scheme-format
 msgid "the client manifest at ~a is advertised for ~a"
 msgstr "le manifeste client ~a est publié pour ~a"
 
-#: src/scm/webid-oidc/errors.scm:1363
+#: src/scm/webid-oidc/errors.scm:1354
 #, scheme-format
 msgid "I could not fetch the client manifest of ~a (because ~a)"
 msgstr "je n’ai pas pu récupérer le manifeste client de ~a (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1366
+#: src/scm/webid-oidc/errors.scm:1357
 #, scheme-format
 msgid "~s is not an authorization code (because ~a)"
 msgstr "~s n’est pas un code d’autorisation (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1369
+#: src/scm/webid-oidc/errors.scm:1360
 #, scheme-format
 msgid "~s is not an authorization code header (because ~a)"
 msgstr "~s n’est pas un en-tête de code d’autorisation (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1372
+#: src/scm/webid-oidc/errors.scm:1363
 #, scheme-format
 msgid "~s is not an authorization code payload (because ~a)"
 msgstr "~s n’est pas un contenu de code d’autorisation (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1375
+#: src/scm/webid-oidc/errors.scm:1366
 #, scheme-format
 msgid "the current time is ~a, and the authorization code expired at ~a"
 msgstr ""
 "la date est actuellement ~a, et le code d’autorisation a expiré à la date ~a"
 
-#: src/scm/webid-oidc/errors.scm:1379
+#: src/scm/webid-oidc/errors.scm:1370
 #, scheme-format
 msgid "I cannot decode ~s as an authorization code (because ~a)"
 msgstr "je n’ai pas pu décoder ~s comme un code d’autorisation (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1382
+#: src/scm/webid-oidc/errors.scm:1373
 #, scheme-format
 msgid "I cannot encode ~s as an authorization code (because ~a)"
 msgstr "je n’ai pas pu encoder ~s comme un code d’autorisation (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1385
+#: src/scm/webid-oidc/errors.scm:1376
 #, scheme-format
 msgid "there is no such refresh token as ~s"
 msgstr "il n’y a pas de jeton de rafraîchissement ~s"
 
-#: src/scm/webid-oidc/errors.scm:1388
+#: src/scm/webid-oidc/errors.scm:1379
 #, scheme-format
 msgid ""
 "the refresh token is bound to a key confirmed as ~s, but it is used with key "
@@ -606,45 +606,45 @@ msgstr ""
 "Le jeton de rafraîchissement est lié à une clé confirmée par ~s, mais il est "
 "utilisé avec la clé ~s"
 
-#: src/scm/webid-oidc/errors.scm:1391
+#: src/scm/webid-oidc/errors.scm:1382
 #, scheme-format
 msgid "I cannot decode ~s as an ID token (because ~a)"
 msgstr "je n’ai pas pu décoder ~s comme jeton d’identité (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1394
+#: src/scm/webid-oidc/errors.scm:1385
 #, scheme-format
 msgid "I cannot encode ~s as an ID token (because ~a)"
 msgstr "je n’ai pas pu encoder ~s comme un jeton d’identité (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1397
+#: src/scm/webid-oidc/errors.scm:1388
 #, scheme-format
 msgid "the grant type ~s is not supported"
 msgstr "le type d’octroi ~s n’est pas supporté "
 
-#: src/scm/webid-oidc/errors.scm:1400
+#: src/scm/webid-oidc/errors.scm:1391
 msgid "there is no authorization code in the request"
 msgstr "il n’y a pas de code d’autorisation dans la requête"
 
-#: src/scm/webid-oidc/errors.scm:1402
+#: src/scm/webid-oidc/errors.scm:1393
 msgid "there is no refresh token in the request"
 msgstr "il n’y a pas de jeton de rafraîchissement dans la requête"
 
-#: src/scm/webid-oidc/errors.scm:1404
+#: src/scm/webid-oidc/errors.scm:1395
 #, scheme-format
 msgid "~s is not an ID token (because ~a)"
 msgstr "~s n’est pas un jeton d’identité (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1407
+#: src/scm/webid-oidc/errors.scm:1398
 #, scheme-format
 msgid "~s is not an ID token header (because ~a)"
 msgstr "~s n’est pas un en-tête de jeton d’identité (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1410
+#: src/scm/webid-oidc/errors.scm:1401
 #, scheme-format
 msgid "~s is not an ID token payload (because ~a)"
 msgstr "~s n’est pas un contenu de jeton d’identité (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1413
+#: src/scm/webid-oidc/errors.scm:1404
 #, scheme-format
 msgid ""
 "I couldn’t set the locale to ~s as an approximation of the client locale ~s"
@@ -652,12 +652,12 @@ msgstr ""
 "je n’ai pas pu définir la locale à ~s comme approximation de la locale du "
 "client ~s"
 
-#: src/scm/webid-oidc/errors.scm:1416
+#: src/scm/webid-oidc/errors.scm:1407
 #, scheme-format
 msgid "~s does not admit ~s as an identity provider"
 msgstr "~s n’admet pas ~s comme fournisseur d’identité"
 
-#: src/scm/webid-oidc/errors.scm:1419
+#: src/scm/webid-oidc/errors.scm:1410
 #, scheme-format
 msgid ""
 "~a is neither an identity provider (because ~a) nor a webid (because ~a)"
@@ -665,76 +665,71 @@ msgstr ""
 "~a n’est ni un fournisseur d’identité (parce que ~a) ni un webid (parce que "
 "~a)"
 
-#: src/scm/webid-oidc/errors.scm:1424
-#, scheme-format
-msgid "the token request failed (because ~a)"
-msgstr "la requête de jeton a échoué (parce que ~a)"
-
-#: src/scm/webid-oidc/errors.scm:1427
+#: src/scm/webid-oidc/errors.scm:1415
 #, scheme-format
 msgid "you don’t have a refresh token for identity ~a certified by ~a in ~s"
 msgstr ""
 "vous n’avez pas de jeton de rafraîchissement pour l’identité ~a certifié par "
 "~a dans ~s"
 
-#: src/scm/webid-oidc/errors.scm:1432
+#: src/scm/webid-oidc/errors.scm:1420
 #, scheme-format
 msgid "all identity provider candidates for ~a failed: ~a"
 msgstr "tous les candidats de fournisseurs d’identité pour ~a ont échoué : ~a"
 
-#: src/scm/webid-oidc/errors.scm:1436
+#: src/scm/webid-oidc/errors.scm:1424
 #, scheme-format
 msgid "~s failed (because ~a)"
 msgstr "~s a échoué (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1439
+#: src/scm/webid-oidc/errors.scm:1427
 msgid ", "
 msgstr ", "
 
-#: src/scm/webid-oidc/errors.scm:1441
+#: src/scm/webid-oidc/errors.scm:1429
 #, scheme-format
 msgid "no resource has been found to serve URI path ~s"
 msgstr "aucune ressource n’a été trouvée pour servir le chemin d’URI ~s"
 
-#: src/scm/webid-oidc/errors.scm:1444
+#: src/scm/webid-oidc/errors.scm:1432
 #, scheme-format
 msgid "the resource kind ~s is absent for the resource at ~s"
 msgstr "le type de ressource ~s est absent pour la ressource ~s"
 
-#: src/scm/webid-oidc/errors.scm:1447
+#: src/scm/webid-oidc/errors.scm:1435
 #, scheme-format
 msgid "no resource has been found to serve URI path ~s, but ~s exists"
 msgstr ""
 "aucune ressource n’a été trouvée pour servir le chemin d’URI ~s, mais ~s "
 "existe"
 
-#: src/scm/webid-oidc/errors.scm:1450
+#: src/scm/webid-oidc/errors.scm:1438
 msgid "the root storage cannot be deleted"
 msgstr "le stockage racine ne peut pas être détruit"
 
-#: src/scm/webid-oidc/errors.scm:1452
+#: src/scm/webid-oidc/errors.scm:1440
 #, scheme-format
 msgid "the container ~s should be emptied before being deleted"
 msgstr "le conteneur ~s doit être vidé avant d’être détruit"
 
-#: src/scm/webid-oidc/errors.scm:1455
+#: src/scm/webid-oidc/errors.scm:1443
 #, scheme-format
 msgid "the group ~s cannot be fetched (because ~a)"
 msgstr "le groupe ~s n’a pas pu être récupéré (parce que ~a)"
 
-#: src/scm/webid-oidc/errors.scm:1459
+#: src/scm/webid-oidc/errors.scm:1447
 #, scheme-format
 msgid "the containment triples in the request to update ~s are not up to date"
 msgstr ""
 "les triplets de contention dans la requête pour changer ~s ne sont pas à jour"
 
-#: src/scm/webid-oidc/errors.scm:1462
+#: src/scm/webid-oidc/errors.scm:1450
 #, scheme-format
 msgid "the server cannot process resources with the ~s content-type"
 msgstr ""
 "le serveur ne peut pas traiter des ressources avec le type de contenu ~s"
 
-#: src/scm/webid-oidc/errors.scm:1465
+#: src/scm/webid-oidc/errors.scm:1453
 #, scheme-format
 msgid ""
 "the client wants to create a resource at ~s, which is reserved for an "
@@ -743,7 +738,7 @@ msgstr ""
 "le client veut créer une ressource en tant que ~s, qui est réservé pour une "
 "ressource auxiliare"
 
-#: src/scm/webid-oidc/errors.scm:1468
+#: src/scm/webid-oidc/errors.scm:1456
 #, scheme-format
 msgid ""
 "the operation on ~s by ~a is refused, because it’s not by ~s and the access "
@@ -752,11 +747,11 @@ msgstr ""
 "l’opération sur ~s par ~a est refusée, parce que ce n’est pas ~s et le "
 "contrôle d’accès refuse le mode d’opération suivant : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1472
+#: src/scm/webid-oidc/errors.scm:1460
 msgid "an anonymous user"
 msgstr "un utilisateur anonyme"
 
-#: src/scm/webid-oidc/errors.scm:1477
+#: src/scm/webid-oidc/errors.scm:1465
 #, scheme-format
 msgid ""
 "the client precondition failed for ~s: it allows for ~s, forbids ~s, but the "
@@ -765,7 +760,7 @@ msgstr ""
 "la précondition du client a échoué pour ~s : elle autorise ~s, interdit ~s, "
 "mais la ressource a une représentation ~s"
 
-#: src/scm/webid-oidc/errors.scm:1479
+#: src/scm/webid-oidc/errors.scm:1467
 #, scheme-format
 msgid ""
 "the client precondition failed for ~s: it allows for ~s, forbids ~s, but the "
@@ -774,7 +769,7 @@ msgstr ""
 "la précondition du client a échoué pour ~s : elle autorise ~s, interdit ~s, "
 "mais la ressource n’a pas de représentation"
 
-#: src/scm/webid-oidc/errors.scm:1482
+#: src/scm/webid-oidc/errors.scm:1470
 #, scheme-format
 msgid ""
 "the client wanted a response with a content type among ~s, but the resource "
@@ -784,80 +779,80 @@ msgstr ""
 "ressource ~s a un type de contenu ~s qui ne peut pas être converti vers l’un "
 "d’eux"
 
-#: src/scm/webid-oidc/errors.scm:1489
+#: src/scm/webid-oidc/errors.scm:1477
 msgid "that’s it"
 msgstr "c’est tout"
 
-#: src/scm/webid-oidc/errors.scm:1493
+#: src/scm/webid-oidc/errors.scm:1481
 #, scheme-format
 msgid "~a and ~a"
 msgstr "~a et ~a"
 
-#: src/scm/webid-oidc/errors.scm:1496
+#: src/scm/webid-oidc/errors.scm:1484
 #, scheme-format
 msgid "~a, ~a"
 msgstr "~a, ~a"
 
-#: src/scm/webid-oidc/errors.scm:1500
+#: src/scm/webid-oidc/errors.scm:1488
 #, scheme-format
 msgid "the signature ~a does not match key ~s with payload ~a"
 msgstr "la signature ~a ne correspond pas à la clé ~s avec le contenu ~a"
 
-#: src/scm/webid-oidc/errors.scm:1503
+#: src/scm/webid-oidc/errors.scm:1491
 #, scheme-format
 msgid "the request failed unexpectedly with code ~a: ~s"
 msgstr ""
 "la requête au serveur a échoué de façon inattendue avec un code ~a : ~s"
 
-#: src/scm/webid-oidc/errors.scm:1507
+#: src/scm/webid-oidc/errors.scm:1495
 msgid "there is an undefined variable"
 msgstr "il y a une variable non définie"
 
-#: src/scm/webid-oidc/errors.scm:1509
+#: src/scm/webid-oidc/errors.scm:1497
 #, scheme-format
 msgid "the origin is ~a"
 msgstr "l’origine est ~a"
 
-#: src/scm/webid-oidc/errors.scm:1512
+#: src/scm/webid-oidc/errors.scm:1500
 #, scheme-format
 msgid "a message is attached: ~a"
 msgstr "un message est attaché : ~a"
 
-#: src/scm/webid-oidc/errors.scm:1515
+#: src/scm/webid-oidc/errors.scm:1503
 #, scheme-format
 msgid "the values ~s are problematic"
 msgstr "les valeurs ~s sont problématiques"
 
-#: src/scm/webid-oidc/errors.scm:1518
+#: src/scm/webid-oidc/errors.scm:1506
 #, scheme-format
 msgid "there is a kind (~s) and args ~s"
 msgstr "il y a un type (~s) et des arguments ~s"
 
-#: src/scm/webid-oidc/errors.scm:1521
+#: src/scm/webid-oidc/errors.scm:1509
 msgid "there is an assertion failure"
 msgstr "il y a un échec d’assertion"
 
-#: src/scm/webid-oidc/errors.scm:1523
+#: src/scm/webid-oidc/errors.scm:1511
 #, scheme-format
 msgid "the program quits with code ~a"
 msgstr "le programme quitte avec le code ~a"
 
-#: src/scm/webid-oidc/errors.scm:1526
+#: src/scm/webid-oidc/errors.scm:1514
 msgid "the program cannot recover from this exception"
 msgstr "le programme ne peut pas récupérer après cette exception"
 
-#: src/scm/webid-oidc/errors.scm:1528
+#: src/scm/webid-oidc/errors.scm:1516
 msgid "there is an external error"
 msgstr "il y a une erreur externe"
 
-#: src/scm/webid-oidc/errors.scm:1530
+#: src/scm/webid-oidc/errors.scm:1518
 msgid "there is an error"
 msgstr "il y a une erreur"
 
-#: src/scm/webid-oidc/errors.scm:1532
+#: src/scm/webid-oidc/errors.scm:1520
 #, scheme-format
-msgid "Unhandled exception type ~a."
-msgstr "Type d’exception non pris en charge ~a."
+msgid "there is an unknown exception of kind ~s"
+msgstr "il y a eu une exception de type inconnu ~s"
 
 #: src/scm/webid-oidc/identity-provider.scm:68
 msgid "Warning: generating a new key pair."
@@ -1001,18 +996,17 @@ msgstr ""
 "<a href=~s>~a</a> peut maintenant s'identifier en votre nom. Vous devez "
 "toujours ajuster ses permissions."
 
-#: src/scm/webid-oidc/resource-server.scm:85
+#: src/scm/webid-oidc/resource-server.scm:86
 #, scheme-format
 msgid "~a: authentication failure: ~a\n"
 msgstr "~a : échec d’authentificationn : ~a\n"
 
-#: src/scm/webid-oidc/resource-server.scm:267
+#: src/scm/webid-oidc/resource-server.scm:279
 #, scheme-format
 msgid "Warning: ~a\n"
 msgstr "Avertissement : ~a\n"
 
-#: src/scm/webid-oidc/hello-world.scm:47 src/scm/webid-oidc/example-app.scm:116
-#: src/scm/webid-oidc/program.scm:233
+#: src/scm/webid-oidc/hello-world.scm:47 src/scm/webid-oidc/program.scm:233
 msgid "command-line|version"
 msgstr "version"
 
@@ -1091,7 +1085,6 @@ msgstr ""
 "      redirige la sortie d’erreur du programme vers ce fichier.\n"
 
 #: src/scm/webid-oidc/hello-world.scm:102
-#: src/scm/webid-oidc/example-app.scm:159
 #, scheme-format
 msgid "~a version ~a\n"
 msgstr "~a version ~a\n"
@@ -1107,156 +1100,68 @@ msgstr ""
 msgid "The port should be a number between 0 and 65535.\n"
 msgstr "Le port doit être un nombre entre 0 et 65535.\n"
 
-#: src/scm/webid-oidc/example-app.scm:51
-#, scheme-format
-msgid "~a.\t~a, certified by ~a;\n"
-msgstr "~a.\t~a, certifié par ~a ;\n"
+#: src/scm/webid-oidc/example-app.scm:63
+msgid "Main menu:\n"
+msgstr "Menu principal :\n"
 
-#: src/scm/webid-oidc/example-app.scm:62
+#: src/scm/webid-oidc/example-app.scm:66
 #, scheme-format
-msgid "~a – ~a\n"
-msgstr "~a – ~a\n"
+msgid "~a. Log in with ~a (issued by ~a): ~a\n"
+msgstr "~a. Se connecter avec ~a (émis par ~a) : ~a\n"
 
-#: src/scm/webid-oidc/example-app.scm:81
-#, scheme-format
-msgid "I’m expecting a number between ~a and ~a.\n"
-msgstr "J’attends un nombre entre ~a et ~a.\n"
+#: src/scm/webid-oidc/example-app.scm:71
+msgid "a new user"
+msgstr "un nouvel utilisateur"
 
-#: src/scm/webid-oidc/example-app.scm:88
-msgid "Please enter an URI to GET: "
-msgstr "Veuillez entrer un URI à requêter avec GET :"
+#: src/scm/webid-oidc/example-app.scm:75
+msgid "status|currently logged in"
+msgstr "actuellement connecté"
 
-#: src/scm/webid-oidc/example-app.scm:107
-#, scheme-format
-msgid "Sending a request: ~s\n"
-msgstr "Envoi d’une requête : ~s\n"
+#: src/scm/webid-oidc/example-app.scm:77
+msgid "status|offline (but accessible)"
+msgstr "hors ligne (mais accessible)"
 
-#: src/scm/webid-oidc/example-app.scm:118
-msgid "comand-line|help"
-msgstr "aide"
+#: src/scm/webid-oidc/example-app.scm:78
+msgid "status|offline (inaccessible)"
+msgstr "hors ligne (inaccessible)"
 
-#: src/scm/webid-oidc/example-app.scm:126
-#, scheme-format
-msgid ""
-"Usage: ~a [OPTIONS]...\n"
-"\n"
-"Demonstrate a webid-oidc application.\n"
-"\n"
-"Options:\n"
-"  -h, --~a:\n"
-"      display this help message and exit.\n"
-"  -v, --~a:\n"
-"      display the version information (~a) and exit.\n"
-"\n"
-"Environment variables:\n"
-"\n"
-"  LANG: set the locale. Currently ~a.\n"
-"\n"
-"  XDG_CACHE_HOME: where the seed for the key generator is\n"
-"stored. Currently ~a.\n"
-"\n"
-"  XDG_DATA_HOME: where the login credentials are stored. Currently ~a.\n"
-"\n"
-"  HOME: to compute a default value for XDG_CACHE_HOME and\n"
-"XDG_DATA_HOME, if missing. Currently ~a.\n"
-"\n"
-"If you find a bug, send a report to ~a.\n"
-msgstr ""
-"Utilisation : ~a [OPTIONS]...\n"
-"\n"
-"Fait démonstration d’une application webid-oidc.\n"
-"\n"
-"Options :\n"
-"  -h, --~a :\n"
-"      affiche ce message d’aide et quitte.\n"
-"  -v, --~a :\n"
-"      affiche le numéro de version (~a) et quitte.\n"
-"\n"
-"Variables d’environnement :\n"
-"\n"
-"  LANG : définit la locale. Actuellement ~a.\n"
-"\n"
-"  XDG_CACHE_HOME : où stocker la graine aléatoire du générateur de\n"
-"clé. Actuellement ~a.\n"
-"\n"
-"  XDG_DATA_HOME : où les données d’authentification sont\n"
-"stockées. Actuellement ~a.\n"
-"\n"
-"  HOME : pour calculer une valeur par défaut de XDG_CACHE_HOME et\n"
-"XDG_DATA_HOME, si manquant. Actuellement ~a.\n"
-"\n"
-"Si vous trouvez une erreur dans le programme, envoyez-en un rapport à\n"
-"~a.\n"
+#: src/scm/webid-oidc/example-app.scm:79
+msgid "status|not initialized yet"
+msgstr "pas encore initialisé"
 
-#: src/scm/webid-oidc/example-app.scm:163
-msgid "First, let’s log in. Here are your options:\n"
-msgstr "En premier lieu, authentifions-nous. Voici vos options :\n"
-
-#: src/scm/webid-oidc/example-app.scm:165
-msgid "0.\tLog in with a different identity.\n"
-msgstr "0.\tS’authentifier avec une identité différente.\n"
-
-#: src/scm/webid-oidc/example-app.scm:170
-#: src/scm/webid-oidc/example-app.scm:189
-msgid "Please indicate your choice number: "
-msgstr "Veuillez indiquer votre choix de numéro : "
-
-#: src/scm/webid-oidc/example-app.scm:175
-msgid "Please enter your webid, or identity server: "
-msgstr "Veuillez entrer votre webid, ou serveur d’identité : "
-
-#: src/scm/webid-oidc/example-app.scm:185
-msgid "There are different possible identity providers for your webid:\n"
+#: src/scm/webid-oidc/example-app.scm:81
+msgid ""
+"Type a number to log in, prefix it with '-' to delete the account, or type + "
+"to create a new account.\n"
 msgstr ""
-"Il y a différents fournisseurs d’identité possibles pour votre\n"
-"webid :\n"
+"Entrez un nombre pour vous connecter, préfixez-le avec « - » pour supprimer "
+"le compte, ou tapez + pour créer un nouveau compte.\n"
 
-#: src/scm/webid-oidc/example-app.scm:192
+#: src/scm/webid-oidc/example-app.scm:98
 #, scheme-format
-msgid ""
-"Please visit the following URI with a web browser:\n"
-"~a\n"
-msgstr ""
-"Veuillez accéder à cet URI avec un navigateur web :\n"
-"~a\n"
+msgid "Please visit: ~a\n"
+msgstr "Veuillez visiter : ~a\n"
 
-#: src/scm/webid-oidc/example-app.scm:194
-msgid "Please paste your authorization code: "
-msgstr "Veuillez coller votre code d’autorisation : "
+#: src/scm/webid-oidc/example-app.scm:99
+msgid "Then, paste the authorization code you get:\n"
+msgstr "Ensuite, veuillez coller votre code d’autorisation :\n"
 
-#: src/scm/webid-oidc/example-app.scm:205
+#: src/scm/webid-oidc/example-app.scm:105
 #, scheme-format
+msgid "I could not negociate an access token.  ~a"
+msgstr "Je n’ai pas pu négocier de jeton d’accès.  ~a"
+
+#: src/scm/webid-oidc/example-app.scm:109
 msgid ""
-"Log in success. Keep this identity token for yourself:\n"
-"\n"
-"~a\n"
-"\n"
-"Now, you can do authenticated request by presenting the following access "
-"token:\n"
-"\n"
-"~a\n"
-"\n"
-"and signing DPoP proofs with the following key:\n"
-"\n"
-"~a\n"
+"The refresh token has expired, it is not possible to use that account "
+"offline.\n"
 msgstr ""
-"Authentification réussie. Gardez ce jeton d’identité pour vous :\n"
-"\n"
-"~a\n"
-"\n"
-"À partir de maintenant, vous pouvez effectuer des requêtes\n"
-"authentifiées en présentant le jeton d’accès suivant :\n"
-"\n"
-"~a\n"
-"\n"
-"et en signant les preuves DPoP avec la clé suivante :\n"
-"\n"
-"~a\n"
+"Le jeton de rafraîchissement a expiré, il n’est pas possible d’utiliser ce "
+"compte hors ligne.\n"
 
-#: src/scm/webid-oidc/example-app.scm:226
-#, scheme-format
-msgid "There was an error: ~a\n"
-msgstr "Il y a eu une erreur : ~a\n"
+#: src/scm/webid-oidc/example-app.scm:114
+msgid "Please enter an URI to GET:\n"
+msgstr "Veuillez entrer un URI à requêter avec GET :\n"
 
 #: src/scm/webid-oidc/program.scm:125
 #, scheme-format
@@ -2191,6 +2096,142 @@ msgid "Unknown command ~s\n"
 msgstr "Commande inconnue ~s\n"
 
 #, scheme-format
+#~ msgid "the token request failed (because ~a)"
+#~ msgstr "la requête de jeton a échoué (parce que ~a)"
+
+#, scheme-format
+#~ msgid "Unhandled exception type ~a."
+#~ msgstr "Type d’exception non pris en charge ~a."
+
+#, scheme-format
+#~ msgid "~a.\t~a, certified by ~a;\n"
+#~ msgstr "~a.\t~a, certifié par ~a ;\n"
+
+#, scheme-format
+#~ msgid "~a – ~a\n"
+#~ msgstr "~a – ~a\n"
+
+#, scheme-format
+#~ msgid "I’m expecting a number between ~a and ~a.\n"
+#~ msgstr "J’attends un nombre entre ~a et ~a.\n"
+
+#, scheme-format
+#~ msgid "Sending a request: ~s\n"
+#~ msgstr "Envoi d’une requête : ~s\n"
+
+#~ msgid "comand-line|help"
+#~ msgstr "aide"
+
+#, scheme-format
+#~ msgid ""
+#~ "Usage: ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Demonstrate a webid-oidc application.\n"
+#~ "\n"
+#~ "Options:\n"
+#~ "  -h, --~a:\n"
+#~ "      display this help message and exit.\n"
+#~ "  -v, --~a:\n"
+#~ "      display the version information (~a) and exit.\n"
+#~ "\n"
+#~ "Environment variables:\n"
+#~ "\n"
+#~ "  LANG: set the locale. Currently ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME: where the seed for the key generator is\n"
+#~ "stored. Currently ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME: where the login credentials are stored. Currently ~a.\n"
+#~ "\n"
+#~ "  HOME: to compute a default value for XDG_CACHE_HOME and\n"
+#~ "XDG_DATA_HOME, if missing. Currently ~a.\n"
+#~ "\n"
+#~ "If you find a bug, send a report to ~a.\n"
+#~ msgstr ""
+#~ "Utilisation : ~a [OPTIONS]...\n"
+#~ "\n"
+#~ "Fait démonstration d’une application webid-oidc.\n"
+#~ "\n"
+#~ "Options :\n"
+#~ "  -h, --~a :\n"
+#~ "      affiche ce message d’aide et quitte.\n"
+#~ "  -v, --~a :\n"
+#~ "      affiche le numéro de version (~a) et quitte.\n"
+#~ "\n"
+#~ "Variables d’environnement :\n"
+#~ "\n"
+#~ "  LANG : définit la locale. Actuellement ~a.\n"
+#~ "\n"
+#~ "  XDG_CACHE_HOME : où stocker la graine aléatoire du générateur de\n"
+#~ "clé. Actuellement ~a.\n"
+#~ "\n"
+#~ "  XDG_DATA_HOME : où les données d’authentification sont\n"
+#~ "stockées. Actuellement ~a.\n"
+#~ "\n"
+#~ "  HOME : pour calculer une valeur par défaut de XDG_CACHE_HOME et\n"
+#~ "XDG_DATA_HOME, si manquant. Actuellement ~a.\n"
+#~ "\n"
+#~ "Si vous trouvez une erreur dans le programme, envoyez-en un rapport à\n"
+#~ "~a.\n"
+
+#~ msgid "First, let’s log in. Here are your options:\n"
+#~ msgstr "En premier lieu, authentifions-nous. Voici vos options :\n"
+
+#~ msgid "0.\tLog in with a different identity.\n"
+#~ msgstr "0.\tS’authentifier avec une identité différente.\n"
+
+#~ msgid "Please indicate your choice number: "
+#~ msgstr "Veuillez indiquer votre choix de numéro : "
+
+#~ msgid "Please enter your webid, or identity server: "
+#~ msgstr "Veuillez entrer votre webid, ou serveur d’identité : "
+
+#~ msgid "There are different possible identity providers for your webid:\n"
+#~ msgstr ""
+#~ "Il y a différents fournisseurs d’identité possibles pour votre\n"
+#~ "webid :\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "Please visit the following URI with a web browser:\n"
+#~ "~a\n"
+#~ msgstr ""
+#~ "Veuillez accéder à cet URI avec un navigateur web :\n"
+#~ "~a\n"
+
+#, scheme-format
+#~ msgid ""
+#~ "Log in success. Keep this identity token for yourself:\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "Now, you can do authenticated request by presenting the following access "
+#~ "token:\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "and signing DPoP proofs with the following key:\n"
+#~ "\n"
+#~ "~a\n"
+#~ msgstr ""
+#~ "Authentification réussie. Gardez ce jeton d’identité pour vous :\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "À partir de maintenant, vous pouvez effectuer des requêtes\n"
+#~ "authentifiées en présentant le jeton d’accès suivant :\n"
+#~ "\n"
+#~ "~a\n"
+#~ "\n"
+#~ "et en signant les preuves DPoP avec la clé suivante :\n"
+#~ "\n"
+#~ "~a\n"
+
+#, scheme-format
+#~ msgid "There was an error: ~a\n"
+#~ msgstr "Il y a eu une erreur : ~a\n"
+
+#, scheme-format
 #~ msgid ""
 #~ "\n"
 #~ "      It is currently set to ~s.\n"