{
  "error-api-connect": "Error in Glewlwyd API",
  "error-config": "Error in config file, contact your administrator",
  "title-login": "Log in",
  "title-logout": "Log out",
  "add": "Add",
  "remove": "Remove",
  "upload": "Upload",
  "browse": "Browse",
  "save": "Save",
  "details": "Details",
  "yes": "Yes",
  "no": "No",
  "login": {
    "menu-title": "Glewlwyd",
    "error-scope-unavailable": "Error, no required scope is available",
    "info-some-scope-unavailable": "Some scopes aren't available",
    "warning-no-callback-url": "callback_url parameter is missing",
    "warning-no-scope": "scope parameter is missing",
    "warning-error-scheme": "Scheme error",
    "warning-not-registered-scheme": "You must register a scheme in your profile before using it for connection",
    "hello": "Hello {{- name}}",
    "btn-ok": "OK",
    "btn-reload": "Reload",
    "btn-cancel": "Cancel",
    "enter-login-password": "Please enter your login and password",
    "enter-login": "Please enter your username",
    "welcome-login": "Welcome {{- username}}",
    "select-login": "User {{username}} selected",
    "login": "Login",
    "login-placeholder": "Your username",
    "password": "Password",
    "password-placeholder": "Your password",
    "sign-in-title": "Click here to validate your login and password",
    "success-login": "Authentication success",
    "error-login": "Authentication error",
    "error-change-user-api": "Error changing user",
    "error-scheme-scope-api": "Error while getting authorization schemes for scopes",
    "error-scheme-scope-unavailable": "You don't have the credential to access these scopes",
    "continue": "Continue",
    "continue-title": "Continue to client application",
    "login-another": "Change user",
    "login-another-new": "New user",
    "login-handle": "Manage",
    "update-profile": "Profile page",
    "logout": "Logout",
    "logout-all": "Logout all users",
    "logout-all-sessions-tokens": "Disconnect all sessions and all tokens",
    "logout-all-sessions": "Disconnect all sessions",
    "logout-all-tokens": "Disconnect all tokens",
    "logout-all-success": "Disconnect successfull",
    "success-delete-session": "Session disabled",
    "error-delete-session": "Error disconnecting",
    "error-value-expected": "Value required",
    "grant-title": "Client access grant",
    "grant-client-title": "{{- client}} requires access to the following scopes",
    "grant-client-id": "Client ID:",
    "grant-client-redirect-uri": "URL:",
    "grant": "Grant access",
    "grant-change-title": "Change grant scope for client",
    "grant-change": "Grant",
    "grant-auth-title": "Authenticate all access for the client",
    "grant-auth": "Authenticate",
    "grant-info-message": "Please check the box and click on 'Grant access' to proceed.",
    "error-set-grant": "Error while saving grant access to client",
    "error-grant-api": "Error while saving grant",
    "scheme-list-scope": "Scope: {{- scope}}",
    "enter-mock-scheme-value": "Enter mock scheme value",
    "mock-value-label": "Mock value",
    "mock-value-button-title": "This shouldn't be so hard",
    "error-mock-expected": "The answer is {{value}}",
    "wish-message": "What do you wish for?",
    "connect-to": "Connection to {{- client}}",
    "connection": "Connection",
    "cant-continue-message": "You don't have the credentials to continue",
    "error-mock-value": "Error mock value",
    "error-mock-trigger": "Error while triggering mock value",
    "mock-trigger-must-register": "You must register mock value in the profile page",
    "mail-enter-scheme-code": "Enter the code sent by e-mail",
    "mail-code-label": "E-mail code",
    "mail-code-ph": "e.g. 123456",
    "mail-trigger-button-title": "Send a new code",
    "mail-scheme-trigger": "Send a new code",
    "mail-code-button-title": "Confirm code",
    "mail-trigger-ok": "Code Sent",
    "mail-trigger-error": "Error sending code",
    "mail-code-error": "Error while validating code",
    "mail-code-invalid": "Invalid code",
    "webauthn-login-title": "Webauthn Authentication",
    "webauthn-login-button-title": "Run an authentication attempt on the server",
    "webauthn-login-authenticate": "Login",
    "webauthn-trigger-must-register": "You must register a webauthn device",
    "webauthn-error-trigger": "Error while attempting to authenticate",
    "otp-enter-value": "Enter one time password",
    "otp-value-label": "Code",
    "otp-button-title": "Validate",
    "password-enter-value": "Enter your password",
    "password-value-label": "Password",
    "password-button-title": "Validate",
    "login-choose-scheme": "Scheme",
    "mock-title": "Mock value",
    "mail-title": "E-mail code",
    "webauthn-title": "Webauthn",
    "otp-title": "One time password",
    "password-title": "Password",
    "certificate-title": "TLS Certificate",
    "select": "Select",
    "back": "Back",
    "select-acount-title": "Select the account to use",
    "manage-users": "Manage connected users",
    "certificate-scheme-title": "Client certificate authentication",
    "certificate-scheme-auth-success": "Valid certificate",
    "certificate-scheme-auth-invalid": "Invalid certificate",
    "certificate-login-authenticate": "Authenticate",
    "http-title": "HTTP",
    "register-link": "Register new account",
    "reset-credentials-link": "Lost credentials?",
    "oauth2-title": "Connect to an external provider",
    "oauth2-connect": "Connect with {{provider}}",
    "end-session-title": "End session",
    "end-session-message": "Do you want to end the current session?",
    "end-session-message-post-redirect-ongoing": "Session is closing, please wait",
    "end-session-message-post-redirect": "The client {{client}} wishes you to close the current session",
    "end-session-message-post-redirect-url": "Then you will be redirected to:",
    "end-all-session-message": "Do you want to end all active sessions and revoke all tokens?",
    "ignore-logout": "Stay connected",
    "device-authorization-title": "Device authorization",
    "device-authorization-message": "Please enter the code",
    "device-auth-user-code": "Code given by the device",
    "device-auth-user-code-ph": "X1Y2-A3B4",
    "device-authorization-complete-message": "Authorization complete, you may close this window",
    "device-authorization-server-error-message": "Server error",
    "device-authorization-code-error-message": "Invalid code, please retry",
    "session-closed-title": "Session closed",
    "session-closed-message": "You are disconnected",
    "error-invalid-url-parameters": "Invalid login URL",
    "reset-credentials-title": "Reset credentials",
    "reset-credentials-code-title": "Use recovery code",
    "reset-credentials-code-label": "Code",
    "reset-credentials-code-button": "Submit",
    "reset-credentials-email-title": "Send link via e-mail",
    "reset-credentials-email-button": "Send",
    "reset-credentials-email-message-label": "The message has been sent",
    "reset-credentials-code-invalid": "Invalid username or code",
    "grant-auth-details-title": "Required authorization details",
    "grant-auth-details-locations": "Required locations",
    "grant-auth-details-actions": "Required actions",
    "grant-auth-details-datatypes": "Required  data types",
    "grant-auth-details-privileges": "Required privileges",
    "grant-auth-details-enriched": "Required enriched details",
    "grant-auth-details-type": "Type: {{type}}",
    "grant-auth-details-description": "Description: {{description}}",
    "grant-auth-details-explanation": "By granting acess to this authorization details, the client will be allowed to access all the following grant on your behalf",
    "grant-auth-details-granted": "Grant updated",
    "ciba-message-title": "Autorization request",
    "ciba-message-message-complete": "The request is complete",
    "ciba-message-message-invalid": "Unable to manage the request",
    "ciba-message-message-not-found": "Request not found",
    "ciba-message-message-server-error": "Server error",
    "ciba-message-message-cancelled": "Request cancelled",
    "ciba-login-hint": "Please log in with the account {{username}}"
  },
  "admin": {
    "error-credential-message": "Please connect with a user that has admin credentials",
    "error-input": "Errors are present in the form",
    "menu-title": "Glewlwyd",
    "menu-users": "Users",
    "menu-clients": "Clients",
    "menu-scopes": "Scopes",
    "menu-parameters": "Parameters",
    "menu-users-mod": "Users data sources",
    "menu-clients-mod": "Clients data sources",
    "menu-users-middleware-mod": "Users middleware modules",
    "menu-auth-schemes": "Authentication schemes",
    "menu-plugins": "Plugins",
    "menu-api-key": "API Keys",
    "menu-misc-config": "Misc configurations",
    "add": "Add",
    "edit": "Edit",
    "delete": "Delete",
    "delete-all": "Delete all",
    "delegate": "Update profile",
    "source": "Source",
    "username": "Username",
    "name": "Name",
    "type": "Type",
    "email": "E-mail address",
    "enabled": "Enabled",
    "client_id": "Client ID",
    "and": "And",
    "or": "Or",
    "readonly": "Read only",
    "order": "Order",
    "move-up": "Move up",
    "choose-file": "Choose file",
    "switch-off": "Disable",
    "switch-on": "Enable",
    "export": "Export",
    "import": "Import",
    "import-error": "Error while importing file, The file may be in an incorrect format.",
    "data-reloaded": "Data reloaded",
    "confirm-delete-user-title": "Delete {{user}}",
    "confirm-delete-user": "Are you sure you want to delete {{- name}} ({{- username}})",
    "edit-user-title": "Update a user",
    "add-user-title": "Add a user",
    "source-dropdown": "Source",
    "user-username": "Username",
    "user-username-ph": "Enter username",
    "user-password": "Password",
    "user-password-ph": "Enter password",
    "user-password-confirm-ph": "Confirm password",
    "confirm-add-elt-title": "Add an element in the list",
    "confirm-add-elt": "Do you want to add '{{- elt}}'?",
    "add-elt-mandatory": "You must click on '+' to add the element",
    "invalid-json": "Invalid JSON object",
    "user-name": "Name",
    "user-name-ph": "Name of the user",
    "user-email": "E-mail address",
    "user-email-ph": "e.g. bob@glewlwyd.tld",
    "user-scope": "Scopes",
    "user-enabled": "Active",
    "user-alias": "Aliases",
    "user-alias-ph": "e.g. jondoe",
    "user-ssh": "SSH Keys",
    "user-ssh-ph": "/path/to/key-file",
    "user-list-title": "User list",
    "user-cert": "Certificate",
    "user-cert-ph": "e.g. -----BEGIN CERTIFICATE-----MIIF...",
    "user-picture": "Picture",
    "user-pictures": "Pictures",
    "user-code": "CIBA User Code",
    "user-code-ph": "e.g.: xyz1234",
    "user-password-error-match": "Passwords don't match",
    "user-password-error-invalid": "Password must be at least {{minLength}} characters long",
    "user-password-mandatory": "Password is mandatory",
    "user-username-mandatory": "Username is mandatory",
    "user-username-exists": "Username already exist",
    "edit-client-title": "Update a client",
    "add-client-title": "Add a client",
    "confirm-delete-client-title": "Remove client {{- client}}",
    "confirm-delete-client": "Are you sure you want to remove the client {{- name}} ({{- clientId}})?",
    "client-clientid": "Client ID",
    "client-clientid-ph": "e.g. client_42",
    "client-name": "Name",
    "client-name-ph": "e.g. My client",
    "client-confidential": "Confidential",
    "client-secret": "Secret",
    "client-secret-ph": "e.g. xyz1234",
    "client-password": "Password",
    "client-password-ph": "Enter a password",
    "client-password-confirm-ph": "Confirm the password",
    "client-token_endpoint_auth_method": "Token endpoint auth method",
    "client-scope": "Scope",
    "client-redirect-uri": "Redirect URIs",
    "client-redirect-uri-ph": "e.g. https://client.glewlwyd.tld/",
    "client-authorization-type": "Authorization types",
    "client-response_mode": "Response mode",
    "client-enabled": "Enabled",
    "client-client-id-mandatory": "Client ID is mandatory",
    "client-client-id-exists": "Client ID already exist",
    "client-list-title": "Clients list",
    "client-sector-identifier-uri": "sector_identifier_uri",
    "client-sector-identifier-uri-ph": "e.g. https://client.tld",
    "client-jwks": "JSON Web Key Set (JWKS)",
    "client-jwks-ph": "e.g. {\"keys\":[...]}",
    "client-jwks_uri": "JSON Web Key Set URL",
    "client-jwks_uri-ph": "e.g. https://client.example.com/jwks",
    "client-pubkey": "Public key",
    "client-enc": "JWE Cryptographic Algorithms for Content Encryption",
    "client-enc-ph": "e.g. A128CBC-HS256",
    "client-alg": "JWE Cryptographic Algorithms for Key Management",
    "client-alg-ph": "e.g. RSA1_5",
    "client-alg_kid": "Content Encryption KID",
    "client-alg_kid-ph": "e.g. abcd1234",
    "client-sign_kid": "Signature KID",
    "client-sign_kid-ph": "e.g. abcd1234",
    "client-encrypt_code": "Encrypt authorization code",
    "client-encrypt_at": "Encrypt access_token",
    "client-encrypt_userinfo": "Encrypt userinfo",
    "client-encrypt_id_token": "Encrypt id_token",
    "client-encrypt_refresh_token": "Encrypt refresh_token",
    "client-resource": "Available resources list",
    "client-authorization-data-types": "authorization_details_types list",
    "client-authorization-data-types-ph": "e.g. type1",
    "client-post-logout-redirect-uris": "post_logout_redirect URI",
    "client-post-logout-redirect-uris-ph": "e.g. https://client.example.com/logout",
    "client-tls_client_auth_san_dns": "TLS Certificate value san_dns",
    "client-tls_client_auth_san_dns-ph": "e.g. client.example.com",
    "client-tls_client_auth_san_uri": "TLS Certificate value san_uri",
    "client-tls_client_auth_san_uri-ph": "e.g. https://client.example.com/",
    "client-tls_client_auth_san_ip": "TLS Certificate value san_ip",
    "client-tls_client_auth_san_ip-ph": "e.g. 1.2.3.4",
    "client-tls_client_auth_san_email": "TLS Certificate value san_email",
    "client-tls_client_auth_san_email-ph": "e.g. client@example.com",
    "client-backchannel_token_delivery_mode": "CIBA Mode",
    "client-backchannel_client_notification_endpoint": "Client CIBA notification endpoint",
    "client-backchannel_client_notification_endpoint-ph": "e.g. https://client.example.com/ciba/",
    "client-backchannel_user_code_parameter": "Support parameter user_code",
    "client-request_object_signing_alg": "request_object_signing_alg",
    "client-request_object_encryption_enc": "request_object_encryption_enc",
    "client-request_object_encryption_alg": "request_object_encryption_alg",
    "client-token_endpoint_signing_alg": "token_endpoint_signing_alg",
    "client-token_endpoint_encryption_enc": "token_endpoint_encryption_enc",
    "client-token_endpoint_encryption_alg": "token_endpoint_encryption_alg",
    "client-backchannel_authentication_request_signing_alg": "backchannel_authentication_request_signing_alg",
    "client-backchannel_authentication_request_encryption_enc": "backchannel_authentication_request_encryption_enc",
    "client-backchannel_authentication_request_encryption_alg": "backchannel_authentication_request_encryption_alg",
    "client-authorization_signing_alg_values_supported": "authorization_signing_alg_values_supported",
    "client-authorization_encryption_alg_values_supported": "authorization_encryption_alg_values_supported",
    "client-authorization_encryption_enc_values_supported": "authorization_encryption_enc_values_supported",
    "client-post_logout_redirect_uri": "post_logout_redirect_uri",
    "client-post_logout_redirect_uri-ph": "e.g. https://client.example.com/logout/",
    "client-frontchannel_logout_uri": "frontchannel_logout_uri",
    "client-frontchannel_logout_uri-ph": "e.g. https://client.example.com/front-logout/",
    "client-frontchannel_logout_session_required": "frontchannel_logout_session_required",
    "client-backchannel_logout_uri": "backchannel_logout_uri",
    "client-backchannel_logout_uri-ph": "e.g. https://client.example.com/back-logout/",
    "client-backchannel_logout_session_required": "backchannel_logout_session_required",
    "client-dpop_bound_access_tokens": "dpop_bound_access_tokens",
    "nav-search-placeholder": "Search pattern",
    "nav-search-title": "Search users",
    "nav-search": "Search",
    "nav-previous": "Previous",
    "nav-next": "Next",
    "nav-per-page": "Results per page",
    "nav-footer": "Results: {{offset}} to {{limit}}",
    "user-add": "Add a user",
    "client-add": "Add a client",
    "display-name": "Display name",
    "description": "Description",
    "scope-list-title": "Scope list",
    "add-scope-title": "Add a scope",
    "edit-scope-title": "Update a scope",
    "scope-add": "Add",
    "scope-name": "Name",
    "scope-name-ph": "e.g. mail",
    "confirm-delete-scope-title": "Remove scope {{- scope}}",
    "confirm-delete-scope": "Are you sure you want to remove the scope {{- name}} ({{- scope}})?",
    "scope-password-max-age": "Password session duration (0: unlimited)",
    "scope-password-max-age-ph": "e.g. 600",
    "scope-display-name": "Display name",
    "scope-display-name-ph": "e.g. e-mail and calendar",
    "scope-description": "Description",
    "scope-description-ph": "e.g. Shared e-mail and calendar",
    "scope-auth-title": "Authentication",
    "scope-auth-schemes-title": "Additional authentication schemes",
    "scope-scheme-password": "Password",
    "scope-add-scheme-group": "Add a scheme in a new group",
    "scope-add-scheme": "Add a scheme",
    "scope-error-name": "Name is mandatory",
    "scope-scheme-required-count": "Required scheme: {{number}}",
    "user-mod-list-title": "User modules",
    "user-middleware-mod-list-title": "Users middleware modules",
    "add-mod-title": "Add a module",
    "edit-mod-title": "Update module {{mod}}",
    "confirm-delete-mod-title": "Delete module {{mod}}",
    "confirm-delete-mod": "Do you want to delete module {{mod}}?",
    "error-mod-name-mandatory": "Name is mandatory",
    "error-mod-type-mandatory": "Type is mandatory",
    "error-mod-name-exist": "Name already exist for a module",
    "mod-name": "Name",
    "mod-name-ph": "e.g. db",
    "mod-display-name": "Display Name",
    "mod-display-name-ph": "e.g. Database",
    "mod-expiration": "Expiration (seconds)",
    "mod-expiration-ph": "e.g. 600",
    "mod-max-use": "Max use per session (0: unlimited)",
    "mod-max-use-ph": "e.g. 2",
    "mod-allow-user-register": "Allow users to register",
    "mod-forbid-user-profile": "Forbid users to register on the profile page",
    "mod-forbid-user-reset-credential": "Forbid users to register on the reset credential page",
    "mod-type": "Type",
    "mod-type-select": "Choose a type",
    "mod-readonly": "Read only",
    "mod-multiple-password": "Multiple password",
    "client-mod-list-title": "Client modules",
    "scheme-mod-list-title": "Authentication schemes modules",
    "plugin-mod-list-title": "Plugins",
    "mod-username-prefix": "Username prefix",
    "mod-username-prefix-ph": "e.g. plop",
    "mod-middleware": "User middleware value",
    "mod-middleware-ph": "e.g.: plop",
    "mod-client-id-prefix": "Client ID prefix",
    "mod-client-id-prefix-ph": "e.g. grut",
    "mod-scheme-value": "Mock value",
    "mod-scheme-value-ph": "e.g. 42",
    "mod-data-format-property-error": "Property is mandatory",
    "mod-database-use-internal-connection": "Use the same connection as Glewlwyd server",
    "mod-database-select-type": "Database type",
    "mod-database-type-sqlite": "SQLite3",
    "mod-database-type-mariadb": "MariaDB/MySQL",
    "mod-database-type-postgre": "PostgreSQL",
    "mod-database-sqlite-dbpath": "Path to the database",
    "mod-database-sqlite-dbpath-ph": "e.g. /var/cache/base.db",
    "mod-database-postgre-conninfo": "Postgre SQL connection string",
    "mod-database-postgre-conninfo-ph": "e.g. host=localhost dbname=db user=user password=password",
    "mod-database-mariadb-host": "Host",
    "mod-database-mariadb-host-ph": "e.g. localhost",
    "mod-database-mariadb-user": "Username",
    "mod-database-mariadb-user-ph": "e.g. glewlwyd",
    "mod-database-mariadb-password": "Password",
    "mod-database-mariadb-password-ph": "e.g. 1234",
    "mod-database-mariadb-dbname": "Database name",
    "mod-database-mariadb-dbname-ph": "e.g. glewlwyd",
    "mod-database-mariadb-port": "TCP connection port (0: system default)",
    "mod-database-mariadb-port-ph": "3306",
    "mod-database-pbkdf2-iterations": "PKBDF2 iterations (SQLite3)",
    "mod-data-format": "Specific data format",
    "mod-data-format-add": "Add a data format",
    "mod-data-format-message": "By default, any property can be added to a user as string, and is invisible in the user profile. To have multiple values or allow profile read/write, please specify it",
    "mod-database-data-format-property": "Property",
    "mod-database-data-format-property-ph": "e.g. postal-code",
    "mod-database-data-format-multiple": "Multiple values",
    "mod-database-data-format-ldap-property": "LDAP Property",
    "mod-database-data-format-ldap-property-ph": "e.g. PostalCode",
    "mod-database-data-format-read": "Read (admin)",
    "mod-database-data-format-write": "Write (admin)",
    "mod-database-data-format-profile-read": "Read (profile)",
    "mod-database-data-format-profile-write": "Write (profile)",
    "mod-ldap-uri": "Connection URI",
    "mod-ldap-uri-ph": "e.g. ldaps://localhost/",
    "mod-ldap-bind-dn": "Connection DN",
    "mod-ldap-bind-dn-ph": "e.g. cn=operator,dc=example,dc=org",
    "mod-ldap-bind-password": "Connection password",
    "mod-ldap-bind-password-ph": "e.g. 12345",
    "mod-ldap-page-size": "Search page size",
    "mod-ldap-page-size-ph": "e.g. 50",
    "mod-ldap-base-search": "Search base",
    "mod-ldap-base-search-ph": "e.g. ou=user,dc=example,dc=org",
    "mod-ldap-filter": "Search filter",
    "mod-ldap-filter-ph": "e.g. objectClass=*",
    "mod-ldap-username-property": "Username property",
    "mod-ldap-username-property-ph": "e.g. cn",
    "mod-ldap-client_id-property": "Client ID",
    "mod-ldap-client_id-property-ph": "e.g. cn",
    "mod-ldap-description-property": "Description property",
    "mod-ldap-description-property-ph": "e.g. description",
    "mod-database-confidential-property": "Confidential",
    "mod-ldap-scope-property": "Scope property",
    "mod-ldap-scope-property-ph": "e.g. o",
    "mod-ldap-name-property": "Name property",
    "mod-ldap-name-property-ph": "e.g. sn",
    "mod-ldap-email-property": "E-mail property",
    "mod-ldap-email-property-ph": "e.g. mail",
    "mod-ldap-rdn-property": "rdn property",
    "mod-ldap-rdn-property-ph": "e.g. cn",
    "mod-ldap-confidential-property": "Confidential property",
    "mod-ldap-confidential-property-ph": "e.g. employeeType",
    "mod-ldap-password-property": "Password property",
    "mod-ldap-password-property-ph": "e.g. userPassword",
    "mod-ldap-object-class": "Object class property for a new record",
    "mod-ldap-object-class-ph": "e.g. top,person,inetOrgPerson",
    "mod-scope-match": "Scope field property",
    "mod-scope-match-add": "Add a correspondence",
    "mod-ldap-scope-match": "Match",
    "mod-ldap-scope-match-ldap": "LDAP value",
    "mod-ldap-scope-match-ldap-ph": "e.g. MailOrgGroup",
    "mod-ldap-scope-match-scope": "Corresponding scope",
    "mod-ldap-scope-match-scope-ph": "e.g. mail",
    "mod-ldap-scope-match-equals": "Equals",
    "mod-ldap-scope-match-contains": "Contains",
    "mod-ldap-scope-match-startswith": "Starts with",
    "mod-ldap-scope-match-endswith": "Ends with",
    "mod-ldap-password-algorithm": "Algorithm",
    "mod-ldap-password-algorithm-select": "Choose an algorithm",
    "mod-ldap-password-algorithm-ssha": "SSHA",
    "mod-ldap-password-algorithm-sha": "SHA",
    "mod-ldap-password-algorithm-smd5": "SMD5",
    "mod-ldap-password-algorithm-md5": "MD5",
    "mod-ldap-password-algorithm-crypt": "CRYPT",
    "mod-ldap-password-algorithm-crypt-md5": "CRYPT-MD5",
    "mod-ldap-password-algorithm-crypt-sha256": "CRYPT-SHA256",
    "mod-ldap-password-algorithm-crypt-sha512": "CRYPT-SHA512",
    "mod-ldap-password-algorithm-plain": "PLAIN",
    "mod-ldap-search-scope": "Search scope",
    "mod-ldap-search-scope-one": "one",
    "mod-ldap-search-scope-subtree": "subtree",
    "mod-ldap-search-scope-children": "children",
    "mod-ldap-data-format-property-ldap-error": "LDAP property is mandatory",
    "mod-ldap-scope-match-ldap-value-error": "LDAP property is mandatory",
    "mod-ldap-scope-match-scope-value-error": "Scope value is mandatory",
    "mod-database-data-format-convert": "Convert",
    "mod-database-data-format-convert-none": "None",
    "mod-database-data-format-convert-base64": "Base64",
    "mod-database-data-format-convert-jwks": "JWKS",
    "mod-http-default-scope": "Default scopes",
    "mod-http-url": "URL",
    "mod-http-url-ph": "e.g. http://glewlwyd.tld/",
    "mod-check-server-certificate": "Validate server certificate",
    "mod-http-username-format": "Username format on HTTP server",
    "mod-http-username-format-ph": "e.g. domain/{username}, {username}@glewlwyd.tld",
    "mod-http-username-format-error": "Format is optional and must contain {username}",
    "mod-mock-username-prefix-required": "Prefix required",
    "mod-mock-middleware-required": "Middleware value required",
    "mod-mock-client-id-prefix-required": "Prefix required",
    "mod-mock-scheme-value-required": "Scheme value required",
    "mod-database-sqlite-dbpath-error": "Database path required",
    "mod-database-mariadb-host-error": "Host name required",
    "mod-database-mariadb-user-error": "Username required",
    "mod-database-mariadb-password-error": "Password required",
    "mod-database-mariadb-dbname-error": "Database name required",
    "mod-database-postgre-conninfo-error": "Connection info required",
    "mod-database-connection-type-error": "Connection type required",
    "mod-ldap-uri-error": "URI required",
    "mod-ldap-bind-dn-error": "DN required",
    "mod-ldap-bind-password-error": "Password required",
    "mod-ldap-base-search-error": "Base search required",
    "mod-ldap-filter-error": "Filter required",
    "mod-ldap-username-property-error": "Username property required",
    "mod-ldap-client_id-property-error": "Client ID property required",
    "mod-ldap-scope-property-error": "Scope property required",
    "mod-ldap-rdn-property-error": "RDN property required",
    "mod-ldap-password-property-error": "Password property required",
    "mod-ldap-password-algorithm-error": "Password algorithm required",
    "mod-ldap-object-class-error": "Object class required",
    "mod-http-url-error": "URL required",
    "mod-http-default-scope-error": "At least one default scope is required",
    "mod-glwd-key": "Secret key",
    "mod-glwd-key-ph": "e.g. my-secret-key",
    "mod-glwd-cert": "Public key",
    "mod-glwd-allowed-scope": "Supported scopes",
    "mod-glwd-allowed-scope-all": "All",
    "mod-glwd-scope-override-scope": "Scope",
    "mod-glwd-scope-override-refresh-duration": "Refresh token duration (seconds) - 0: Keep default value",
    "mod-glwd-scope-override-refresh-duration-ph": "e.g. 1209600",
    "mod-scope-override-refresh-rolling": "Rolling refresh",
    "glwd-scope-override-refresh-rolling-value-undefined": "Keep default value",
    "glwd-scope-override-refresh-rolling-value-false": "No",
    "glwd-scope-override-refresh-rolling-value-true": "Yes",
    "mod-scope-override-delete": "Delete",
    "mod-glwd-additional-parameter": "Additional token values",
    "mod-glwd-additional-parameter-message": "In this section, you can specify user properties that will be added to the access_token payload",
    "mod-glwd-additional-parameter-add": "Add a new parameter",
    "mod-additional-parameter-new": "New parameter",
    "mod-glwd-additional-parameter-user-parameter": "User property",
    "mod-glwd-additional-parameter-user-parameter-ph": "e.g. email",
    "mod-glwd-additional-parameter-client-parameter": "Client property",
    "mod-glwd-additional-parameter-client-parameter-ph": "e.g. description",
    "mod-glwd-additional-parameter-user-parameter-error": "User or client property is mandatory",
    "mod-glwd-additional-parameter-token-parameter": "Token property name",
    "mod-glwd-additional-parameter-token-parameter-ph": "e.g. userEmail",
    "mod-glwd-additional-parameter-token-parameter-error": "Token property is mandatory",
    "mod-glwd-additional-parameter-token-parameter-invalid-error": "This token property value is forbidden",
    "mod-additional-parameter-token-delete": "Delete",
    "mod-glwd-url": "URL prefix",
    "mod-glwd-url-ph": "e.g. glwd",
    "mod-glwd-specify-jwks": "JWKS",
    "mod-glwd-specify-keys": "PEM format keys",
    "mod-glwd-secret-type": "Subject Type Identifier",
    "mod-glwd-secret-type-public": "Public",
    "mod-glwd-secret-type-pairwise": "Pairwise",
    "mod-glwd-jwt-type": "JWT type",
    "mod-glwd-jwt-type-rsa": "RSA",
    "mod-glwd-jwt-type-ecdsa": "ECDSA",
    "mod-glwd-jwt-type-sha": "SHA",
    "mod-glwd-jwt-type-rsa-pss": "RSA-PSS",
    "mod-glwd-jwt-type-eddsa": "EdDSA",
    "mod-glwd-jwt-key-size": "Key size",
    "mod-glwd-jwt-key-size-256": "256 bits",
    "mod-glwd-jwt-key-size-384": "384 bits",
    "mod-glwd-jwt-key-size-512": "512 bits",
    "mod-glwd-access-token-duration": "Access token duration (seconds)",
    "mod-glwd-access-token-duration-ph": "e.g. 3600 (1 hour)",
    "mod-glwd-refresh-token-duration": "Refresh token duration (seconds)",
    "mod-glwd-refresh-token-duration-ph": "e.g. 1209600 (2 weeks)",
    "mod-glwd-code-duration": "Code duration (seconds)",
    "mod-glwd-code-duration-ph": "e.g. 600 (10 minutes)",
    "mod-glwd-refresh-token-rolling": "Refresh token rolling",
    "mod-glwd-refresh-token-one-use": "One-time use refresh token",
    "mod-glwd-refresh-token-one-use-always": "Always",
    "mod-glwd-refresh-token-one-use-never": "Never",
    "mod-glwd-refresh-token-one-use-client-driven": "Client driven",
    "mod-glwd-client-refresh-token-one-use-parameter": "refresh-token-one-use property",
    "mod-glwd-client-refresh-token-one-use-parameter-ph": "e.g. refresh-token-one-use",
    "mod-glwd-client-refresh-token-one-use-parameter-public-client": "Mandatory for public clients",
    "mod-glwd-auth-type-code-enabled": "Authentication type code enabled",
    "mod-glwd-auth-type-code-revoke-replayed": "Revoke all tokens if a client tries to replay a code",
    "mod-glwd-auth-type-implicit-enabled": "Authentication type implicit enabled",
    "mod-glwd-auth-type-password-enabled": "Authentication type password enabled",
    "mod-glwd-auth-type-client-enabled": "Authentication type client enabled",
    "mod-glwd-auth-type-device-enabled": "Authentication type device enabled",
    "mod-glwd-auth-type-refresh-enabled": "Authentication type refresh enabled",
    "mod-glwd-scope-override": "Specific scope parameters",
    "mod-glwd-scope-override-message": "In this section, you can set specify parameters for scopes that will override default settings",
    "mod-glwd-scope-add": "Add",
    "mod-glwd-url-error": "Prefix is required and must be unique",
    "mod-glwd-key-error": "Secret key is required",
    "mod-glwd-cert-error": "Public key is required",
    "mod-glwd-access-token-duration-error": "Duration must be greater than 0",
    "mod-glwd-refresh-token-duration-error": "Duration must be greater than 0",
    "mod-glwd-code-duration-error": "Duration must be greater than 0",
    "mod-glwd-iss": "Issuer",
    "mod-glwd-iss-ph": "e.g. https://glewlwyd.tld",
    "mod-glwd-oauth-as-iss-id": "Add issuer in /auth response",
    "mod-glwd-auth-type-token-enabled": "Authentication type token enabled",
    "mod-glwd-auth-type-id-token-enabled": "Authentication type ID Token enabled",
    "mod-glwd-auth-type-none-enabled": "Authentication type 'none' enabled",
    "mod-glwd-allow-non-oidc": "Allow non OIDC but valid OAuth2 requests",
    "mod-glwd-claims": "Additional claims in the ID Token or the /userinfo endpoint",
    "mod-glwd-claims-message": "These values will be added in each Token ID or /userinfo endpoint call if the parameter is claimed or mandatory.",
    "mod-glwd-name-claim": "Name claim",
    "mod-glwd-email-claim": "E-mail claim",
    "mod-glwd-scope-claim": "Scope claim",
    "mod-glwd-name-email-claim-no": "No",
    "mod-glwd-name-email-claim-on-demand": "On demand",
    "mod-glwd-name-email-claim-mandatory": "Mandatory",
    "mod-glwd-iss-error": "Issuer is mandatory",
    "mod-claims-new": "New claim",
    "mod-glwd-claims-name": "Name",
    "mod-glwd-claims-name-ph": "e.g. phone",
    "mod-glwd-claims-name-error": "Name is mandatory",
    "mod-glwd-claims-name-forbidden-error": "This name is reserved",
    "mod-glwd-claims-user-property": "Corresponding property in the user profile",
    "mod-glwd-claims-user-property-ph": "e.g. phone",
    "mod-glwd-claims-user-property-error": "Corresponding property is mandatory",
    "mod-glwd-claims-type": "Type",
    "mod-glwd-claims-type-string": "String",
    "mod-glwd-claims-type-number": "Number",
    "mod-glwd-claims-type-boolean": "Boolean",
    "mod-glwd-claims-boolean-value-true": "Value for true",
    "mod-glwd-claims-boolean-value-true-ph": "e.g. 1",
    "mod-glwd-claims-boolean-value-true-error": "Value for true is mandatory",
    "mod-glwd-claims-boolean-value-false": "Value for false",
    "mod-glwd-claims-boolean-value-false-ph": "e.g. 0",
    "mod-glwd-claims-boolean-value-false-error": "Value for false is mandatory",
    "mod-glwd-claims-mandatory": "Mandatory",
    "mod-glwd-claims-on-demand": "On demand",
    "mod-glwd-scope-claim": "Scope",
    "mod-glwd-scope-claim-select": "Select",
    "mod-glwd-name-scope": "Scopes for name",
    "mod-glwd-email-scope": "Scopes for e-mail",
    "mod-glwd-scope-scope": "Scopes for scope",
    "mod-glwd-name-email-scope-select": "Select",
    "mod-glwd-address-claim": "Address claim properties",
    "mod-glwd-address-claim-message": "You can specify if a claim address is available and what properties correspond to address fields",
    "mod-glwd-address-claim-use": "Use claim address",
    "mod-glwd-address-claim-none": "No",
    "mod-glwd-address-claim-object": "Yes",
    "mod-glwd-addr-claim-formatted": "Formatted address property",
    "mod-glwd-addr-claim-formatted-ph": "e.g. address-formatted",
    "mod-glwd-addr-claim-street-address": "Address property",
    "mod-glwd-addr-claim-street-address-ph": "e.g. address",
    "mod-glwd-addr-claim-locality": "Locality property",
    "mod-glwd-addr-claim-locality-ph": "e.g. city",
    "mod-glwd-addr-claim-region": "Region property",
    "mod-glwd-addr-claim-region-ph": "e.g. region",
    "mod-glwd-addr-claim-postal-code": "Postal code property",
    "mod-glwd-addr-claim-postal-code-ph": "e.g. postal-code",
    "mod-glwd-addr-claim-country": "Country property",
    "mod-glwd-addr-claim-country-ph": "e.g. country",
    "mod-glwd-addr-claim-mandatory": "Mandatory",
    "mod-glwd-jwt-request-pubkey": "JWT requests, public keys and JWKS",
    "mod-glwd-jwt-request-pubkey-client-pubkey-parameter": "pubkey property",
    "mod-glwd-jwt-request-pubkey-client-pubkey-parameter-ph": "e.g. pubkey",
    "mod-glwd-jwt-request-pubkey-client-jwks-parameter": "JWKS property",
    "mod-glwd-jwt-request-pubkey-client-jwks-parameter-ph": "e.g. jwks",
    "mod-glwd-jwt-request-pubkey-client-jwks_uri-parameter": "JWKS_URI property",
    "mod-glwd-jwt-request-pubkey-client-jwks_uri-parameter-ph": "jwks_uri",
    "mod-glwd-jwt-request-encrypt-out-tokens": "Encrypt out tokens",
    "mod-glwd-encrypt-out-token-allow": "Allow out token encryption",
    "mod-glwd-jwks-uri": "JWKS URI",
    "mod-glwd-jwks-uri-ph": "e.g. https://example.com/private_jwks",
    "mod-glwd-jwks": "JWKS to use",
    "mod-glwd-jwks-error": "Error parsing JWKS",
    "mod-glwd-jwks-public-uri": "Public JWKS URI",
    "mod-glwd-jwks-public-uri-ph": "e.g. https://example.com/public_jwks",
    "mod-glwd-jwks-public": "Public JWKS",
    "mod-glwd-jwks-public-ph": "Optional",
    "mod-glwd-default-kid": "Default Key ID (KID)",
    "mod-glwd-default-kid-ph": "e.g. abcd1234",
    "mod-glwd-default-kid-error": "Error, kid not found in the JWKS",
    "mod-glwd-client-sign_kid-parameter": "Client sign_kid property",
    "mod-glwd-client-sign_kid-parameter-ph": "e.g. sign_kid",
    "mod-glwd-jwt-request-client-enc-parameter": "enc property",
    "mod-glwd-jwt-request-client-enc-parameter-ph": "enc",
    "mod-glwd-jwt-request-client-alg-parameter": "alg property",
    "mod-glwd-jwt-request-client-alg-parameter-ph":"alg",
    "mod-glwd-jwt-request-client-alg_kid-parameter": "kid_alg property",
    "mod-glwd-jwt-request-client-alg_kid-parameter-ph": "kid_alg",
    "mod-glwd-jwt-request-client-encrypt_code-parameter": "encrypt_code property",
    "mod-glwd-jwt-request-client-encrypt_code-parameter-ph": "encrypt_code",
    "mod-glwd-jwt-request-client-encrypt_at-parameter": "encrypt_at property",
    "mod-glwd-jwt-request-client-encrypt_at-parameter-ph": "encrypt_at",
    "mod-glwd-jwt-request-client-encrypt_userinfo-parameter": "encrypt_userinfo property",
    "mod-glwd-jwt-request-client-encrypt_userinfo-parameter-ph": "encrypt_userinfo",
    "mod-glwd-jwt-request-client-encrypt_id_token-parameter": "encrypt_id_token property",
    "mod-glwd-jwt-request-client-encrypt_id_token-parameter-ph": "encrypt_id_token",
    "mod-glwd-jwt-request-client-encrypt_refresh_token-parameter": "encrypt_refresh_token property",
    "mod-glwd-jwt-request-client-encrypt_refresh_token-parameter-ph": "encrypt_refresh_token",
    "mod-glwd-jwt-request-client-encrypt_introspection-parameter": "encrypt_introspection property",
    "mod-glwd-jwt-request-client-encrypt_introspection-parameter-ph": "encrypt_introspection",
    "mod-glwd-jwt-request-maximum-exp": "Maximum expiration time authorized for JWT requests",
    "mod-glwd-jwt-request-maximum-exp-ph": "e.g. 3600",
    "mod-glwd-oidc-general-title": "General",
    "mod-glwd-sign-title": "Tokens signature",
    "mod-glwd-token-title": "Tokens parameter",
    "mod-glwd-auth-type-title": "Authentication types",
    "mod-glwd-openid-configuration-title": "Webservice .well-known/openid-configuration parameters",
    "mod-glwd-jwks-title": "Webservice /jwks parameters",
    "mod-glwd-service-documentation": "Service documentation URL (optional)",
    "mod-glwd-service-documentation-ph": "e.g. https://glewlwyd.tld/docs/",
    "mod-glwd-op-policy-uri": "Service policy URL (optional)",
    "mod-glwd-op-policy-uri-ph": "e.g. https://glewlwyd.tld/policy",
    "mod-glwd-op-tos-uri": "Terms of service URL (optional)",
    "mod-glwd-op-tos-uri-ph": "e.g. https://glewlwyd.tld/tos",
    "mod-glwd-jwks-show": "JWKS available",
    "mod-glwd-jwks-x5c": "X5C certificate chain (optional)",
    "mod-glwd-request-parameter-allow": "Allow passing request parameter as JWT",
    "mod-glwd-request-parameter-ietf-strict": "Strict compliance with IETF request parameter",
    "mod-glwd-request-parameter-allow-encrypted": "Allow encrypted request parameter as JWT",
    "mod-glwd-token-encryption-allow": "Allow out token encryption",
    "mod-glwd-request-uri-allow-https-non-secure": "Allow request_uri and jwks_uri to a insecure https:// uri",
    "mod-glwd-url-auth": "URL API Auth for this instance",
    "mod-glwd-url-token": "URL API Token for this instance",
    "mod-glwd-url-profile": "URL API Profile for this instance",
    "mod-glwd-url-oidc-config": "URL openid-configuration for this instance",
    "mod-glwd-url-userinfo": "URL userinfo for this instance",
    "mod-glwd-pkce-title": "PKCE - Code challenge (RFC 7636)",
    "mod-glwd-pkce-allowed": "PKCE allowed",
    "mod-glwd-pkce-method-plain-allowed": "Method plain allowed",
    "mod-glwd-pkce-scopes": "Scopes where PKCE is required",
    "mod-glwd-pkce-required": "PKCE always required",
    "mod-glwd-pkce-required-public-client": "PKCE required for public clients",
    "mod-glwd-introspection-revocation-title": "Tokens Introspection (RFC 7662) and Revocation (RFC 7009)",
    "mod-glwd-introspection-revocation-allowed": "Allow tokens introspection and invocation",
    "mod-glwd-introspection-revocation-allow-target-client": "Allow for the token client",
    "mod-glwd-introspection-revocation-scope-required": "Required scopes in the access token",
    "mod-glwd-scope": "Scopes",
    "mod-glwd-introspection-revocation-error": "You must allow for the token client or add a scope required in the access token",
    "mod-glwd-registration-title": "Clients registration",
    "mod-glwd-register-client-allowed": "Allow client registration via API /register",
    "mod-glwd-register-client-auth-scope": "Required scopes in the access token",
    "mod-glwd-register-client-auth-scope-open": "Open registration",
    "mod-glwd-register-client-credentials-scope": "Scopes to add to the new clients",
    "mod-glwd-register-client-token-one-use": "Token used for registration can be used once",
    "mod-glwd-register-client-management-allowed": "Allow clients to manage their registration",
    "mod-glwd-register-resource-specify-allowed": "Allow client to specify resource indicators",
    "mod-glwd-register-resource-default": "Set default resource indicators list",
    "mod-glwd-register-resource-default-ph": "e.g. https://resource.tld/",
    "mod-glwd-register-default-properties": "Default properties",
    "mod-glwd-register-default-properties-value-ph": "value",
    "mod-glwd-register-default-properties-values-ph": "value1\nvalue2",
    "mod-glwd-register-default-properties-error": "Value is mandatory",
    "mod-glwd-register-default-properties-btn": "Add a default property",
    "mod-glwd-register-default-properties-add": "Add",
    "mod-glwd-register-default-properties-delete": "Remove",
    "mod-glwd-session-management-title": "Session management",
    "mod-glwd-session-management-allowed": "Allow session management endpoints",
    "mod-glwd-session-cookie-name": "OIDC session cookie name",
    "mod-glwd-session-cookie-name-ph": "e.g. GLEWLWYD2_OIDC_SID",
    "mod-glwd-session-cookie-name-error": "OIDC session cookie name is mandatory",
    "mod-glwd-session-cookie-expiration": "OIDC session cookie expiration (seconds)",
    "mod-glwd-session-cookie-expiration-ph": "e.g. 2419200 (4 weeks)",
    "mod-glwd-session-cookie-expiration-error": "OIDC session cookie expiration is mandatory",
    "mod-glwd-front-channel-logout-allowed": "Allow front-channel logout",
    "mod-glwd-back-channel-logout-allowed": "Allow back-channel logout",
    "mod-glwd-device-authorization-title": "Device authorization management",
    "mod-glwd-device-authorization-expiration": "Code expiration (seconds)",
    "mod-glwd-device-authorization-expiration-ph": "e.g. 600",
    "mod-glwd-device-authorization-interval": "Suggested interval between code verification (seconds)",
    "mod-glwd-device-authorization-interval-ph": "e.g. 5",
    "mod-glwd-mtls-client-title": "Mutual-TLS Client Authentication (RFC8705)",
    "mod-glwd-mtls-client-source": "Certificate source",
    "mod-glwd-mtls-client-source-no": "None",
    "mod-glwd-mtls-client-source-TLS": "TLS session",
    "mod-glwd-mtls-client-source-header": "HTTP header",
    "mod-glwd-mtls-client-source-both": "Both",
    "mod-glwd-mtls-client-cert-header-name": "Corresponding header property",
    "mod-glwd-mtls-client-cert-header-name-ph": "e.g. SSL_CLIENT_CERT",
    "mod-glwd-mtls-client-cert-use-endpoint-aliases": "Use alias for client endpoints",
    "mod-glwd-mtls-client-cert-self-signed-allowed": "Allow self-signed certificates",
    "mod-glwd-oauth-ciba-title": "Client-Initiated Backchannel Authentication Flow (CIBA)",
    "mod-glwd-oauth-ciba-allowed": "Allow Client-Initiated Backchannel Authentication Flow (CIBA)",
    "mod-glwd-oauth-ciba-mode-ping-allowed": "Ping mode allowed",
    "mod-glwd-oauth-ciba-mode-poll-allowed": "Poll mode allowed",
    "mod-glwd-oauth-ciba-mode-push-allowed": "Push mode allowed",
    "mod-glwd-oauth-ciba-allow-https-non-secure": "Allow out requests ping and push to a insecure https://",
    "mod-glwd-oauth-ciba-user-code-allowed": "user_code parameter allowed",
    "mod-glwd-oauth-ciba-user-code-property": "user_code property",
    "mod-glwd-oauth-ciba-user-code-property-ph": "e.g. user-code",
    "mod-glwd-oauth-ciba-user-code-property-error": "user_code property is mandatory",
    "mod-glwd-oauth-ciba-mode-error": "You must allow at least one mode",
    "mod-glwd-oauth-ciba-default-expiry": "Default expiration time (seconds)",
    "mod-glwd-oauth-ciba-default-expiry-ph": "e.g. 600",
    "mod-glwd-oauth-ciba-maximum-expiry": "Maximum duration expiration time (seconds)",
    "mod-glwd-oauth-ciba-maximum-expiry-ph": "e.g. 1200",
    "mod-glwd-oauth-ciba-email-allowed": "Send an e-mail to the targeted user",
    "mod-glwd-oauth-ciba-email-body-pattern": "E-mail body template, {CONNECT_URL} required",
    "mod-glwd-oauth-ciba-email-body-pattern-ph": "e.g. Click to confirm: {CONNECT_URL}\nClick to cancel: {CANCEL_URL}\nsender message: {BINDING_MESSAGE}",
    "mod-glwd-oauth-ciba-email-body-pattern-error": "E-mail body is mandatory for language '{{lang}}' and must contain the pattern {CONNECT_URL}",
    "mod-glwd-oauth-fapi-title": "Financial-grade API additional options (FAPI)",
    "mod-glwd-oauth-fapi-check-all": "Select all below",
    "mod-glwd-oauth-fapi-allow-jarm": "Allow JWT responses in /auth (JARM)",
    "mod-glwd-oauth-fapi-add-s_hash": "Add s_hash in id_token",
    "mod-glwd-oauth-fapi-verify-nbf": "Verify nbf property",
    "mod-glwd-oauth-fapi-allow-restrict-alg": "Allow restricted algs for encryption",
    "mod-glwd-oauth-fapi-restrict-alg": "Allowed algs",
    "mod-glwd-oauth-fapi-restrict-alg-list": "Select",
    "mod-glwd-oauth-fapi-allow-multiple-kid": "Allow clients with multiple similar kid",
    "mod-glwd-oauth-fapi-ciba-confidential-client": "CIBA allowed clients must be confidential",
    "mod-glwd-oauth-fapi-ciba-push-forbidden": "Push mode forbidden",
    "mod-glwd-message-deprecated": "This plugin is deprecated, it will no longer receive fixes or evolutions. You should use the OpenID Connect plugin instead",
    "requires-admin-scope": "Administrator scope required",
    "success-api-delete-user": "User deleted",
    "error-api-delete-user": "Error while removing user",
    "success-api-delete-client": "Client deleted",
    "error-api-delete-client": "Error while removing client",
    "success-api-delete-scope": "Scope deleted",
    "error-api-delete-scope": "Error while removing scope",
    "success-api-set-user": "User updated",
    "error-api-set-user": "Error while updating user",
    "success-api-set-client": "Client updated",
    "error-api-set-client": "Error while updating client",
    "success-api-set-scope": "Scope updated",
    "error-api-set-scope": "Error while updating scope",
    "success-api-add-user": "User added",
    "error-api-add-user": "Error while adding user",
    "success-api-add-client": "Client added",
    "error-api-add-client": "Error while adding client",
    "success-api-add-scope": "Scope added",
    "error-api-add-scope": "Error while adding scope",
    "success-api-add-mod": "Module added",
    "error-api-add-mod": "Error while adding module",
    "success-api-delete-mod": "Module deleted",
    "error-api-delete-mod": "Error while removing module",
    "success-api-edit-mod": "Module updated",
    "error-api-edit-mod": "Error while updating module",
    "error-api-fetch": "Error while fetching data",
    "mod-email-code-length": "Code length",
    "mod-email-code-length-ph": "e.g. 6",
    "mod-email-code-duration": "Code duration (seconds)",
    "mod-email-code-duration-ph": "e.g. 600",
    "mod-email-host": "SMTP server",
    "mod-email-host-ph": "e.g. mail.network.tld",
    "mod-email-port": "Port SMTP (0: system default)",
    "mod-email-port-ph": "e.g. 25",
    "mod-email-use-tls": "Use a TLS connection",
    "mod-email-check-certificate": "Check server certificate",
    "mod-email-user": "SMTP username (if required)",
    "mod-email-user-ph": "e.g. mail-user",
    "mod-email-password": "SMTP password (if required)",
    "mod-email-password-ph": "e.g. password",
    "mod-email-from": "E-mail sender address",
    "mod-email-from-ph": "e.g. noreply@glewlwyd.tld",
    "mod-email-code-length-error": "Code length is mandatory",
    "mod-email-code-duration-error": "Code duration is mandatory",
    "mod-email-host-error": "SMTP Host is mandatory",
    "mod-email-from-error": "E-mail sender is mandatory",
    "mod-email-content-type": "Content-Type",
    "mod-email-content-type-ph": "Content-Type: text/plain; charset=utf-8",
    "mod-email-content-type-error": "Content-Type is mandatory",
    "mod-email-lang": "Lang",
    "mod-email-user-lang-property": "User lang property",
    "mod-email-user-lang-property-ph": "e.g. lang",
    "mod-email-user-lang-property-error": "User lang property is mandatory",
    "mod-email-lang-default": "Fallback lang",
    "mod-email-subject": "E-mail subject",
    "mod-email-subject-ph": "e.g. Glewlwyd confirmation code",
    "mod-email-subject-error": "Subject is mandatory for language '{{lang}}' - ",
    "mod-email-body-pattern": "E-mail body, the pattern {CODE} will be replaced by the code",
    "mod-email-body-pattern-ph": "e.g. 'Confirmation code is {CODE}'",
    "mod-email-body-pattern-token": "E-mail body, the pattern {TOKEN} will be replaced by the token",
    "mod-email-body-pattern-token-ph": "e.g. 'Click on the following link: https://glewlwyd.tld/?token={TOKEN}'",
    "mod-email-body-pattern-error": "E-mail body is mandatory for language '{{lang}}' and must contain the pattern {CODE} - ",
    "mod-email-new-lang-ph": "xx",
    "mod-email-new-lang-add": "Add",
    "mod-email-new-lang-remove": "Remove",
    "mod-email-new-lang-select": "Select",
    "mod-webauthn-session-mandatory": "User must have a valid session to connect",
    "mod-webauthn-force-fmt-none": "Force attestations without validation certificate (much lesser safe)",
    "mod-webauthn-seed": "Random seed used to mitigate intrusion",
    "mod-webauthn-seed-ph": "A random string maximum 128 characters",
    "mod-webauthn-seed-generate": "Generate",
    "mod-webauthn-challenge-length": "Challenge length",
    "mod-webauthn-challenge-length-ph": "e.g. 64",
    "mod-webauthn-challenge-length-error": "Challenge length is required",
    "mod-webauthn-credential-expiration": "Maximum duration to register a component (seconds)",
    "mod-webauthn-credential-expiration-ph": "e.g. 120",
    "mod-webauthn-credential-expiration-error": "Maximum duration to register a component is mandatory",
    "mod-webauthn-credential-assertion": "Maximum duration to complete an authentication (seconds)",
    "mod-webauthn-credential-assertion-ph": "e.g. 120",
    "mod-webauthn-credential-assertion-error": "Maximum duration to complete an authentication is mandatory",
    "mod-webauthn-fmt-params": "Supported webauthn formats",
    "mod-webauthn-fmt-error": "You must select at least one format",
    "mod-webauthn-fmt-packed-label": "Packed",
    "mod-webauthn-fmt-tpm-label": "TPM",
    "mod-webauthn-fmt-android-key-label": "Android Key",
    "mod-webauthn-fmt-android-safetynet-label": "Android Safetynet",
    "mod-webauthn-fmt-fido-u2f-label": "FIDO U2F",
    "mod-webauthn-fmt-apple-label": "Apple",
    "mod-webauthn-fmt-none-label": "None",
    "mod-webauthn-unsupported": "Unsupported",
    "mod-webauthn-rp-origin": "Relying party",
    "mod-webauthn-rp-origin-ph": "e.g. https://glewlwyd.tld",
    "mod-webauthn-rp-origin-error": "Relying party is required",
    "mod-webauthn-pubKey-cred-params": "Signature algorithm",
    "mod-webauthn-pubKey-cred-params-error": "You must select at least one signature type",
    "mod-webauthn-pubKey-cred-params-label-ecdsa-sha256": "ECDSA w/ SHA-256",
    "mod-webauthn-pubKey-cred-params-label-ecdsa-sha384": "ECDSA w/ SHA-384",
    "mod-webauthn-pubKey-cred-params-label-ecdsa-sha512": "ECDSA w/ SHA-512",
    "mod-webauthn-pubKey-cred-params-label-rsa-sha256": "RSA w/ SHA-256",
    "mod-webauthn-pubKey-cred-params-label-rsa-sha384": "RSA w/ SHA-384",
    "mod-webauthn-pubKey-cred-params-label-rsa-sha512": "RSA w/ SHA-512",
    "mod-webauthn-root-ca-list": "Root certificates list for FIDO2 or Packed devices (Leave empty list if you don't want to verify the components certificates)",
    "mod-webauthn-root-ca-yubico-link": "Example: Yubico inc. root CA certificate",
    "mod-webauthn-root-ca-path": "Certificates file path on the server",
    "mod-webauthn-root-ca-path-ph": "e.g. /path/to/ca.pem",
    "mod-webauthn-safetynet-integrity-link": "More information about potential integrity",
    "mod-webauthn-safetynet-integrity-params": "Potential integrity verdict for Android SafetyNet devices",
    "mod-webauthn-safetynet-integrity-ctsProfileMatch": "Expected ctsProfileMatch value",
    "mod-webauthn-safetynet-integrity-basicIntegrity": "Expected basicIntegrity value",
    "mod-webauthn-safetynet-integrity--1": "All",
    "mod-webauthn-safetynet-integrity-0": "False",
    "mod-webauthn-safetynet-integrity-1": "True",
    "mod-webauthn-google-root-ca-r2": "Server local path to the root certificate 'GlobalSign Root CA- R2'",
    "mod-webauthn-google-root-ca-r2-ph": "Leave empty if no chain validation is required",
    "mod-webauthn-google-root-ca-r2-download-link": "Download “GlobalSign Root CA- R2” (DER Format) from Google PKI",
    "mod-webauthn-apple-root-ca": "Server local path to the root certificate 'Apple WebAuthn Root CA'",
    "mod-webauthn-apple-root-ca-ph": "Leave empty if no chain validation is required",
    "mod-webauthn-apple-root-ca-download-link": "Download “Apple WebAuthn Root CA” (PEM Format) from Apple Private PKI",
    "mod-otp-issuer": "Issuer",
    "mod-otp-issuer-ph": "e.g. glewlwyd.tld",
    "mod-otp-issuer-error": "Issuer is mandatory",
    "mod-otp-secret-minimum-size": "Secret minimum size",
    "mod-otp-secret-minimum-size-ph": "e.g. 16",
    "mod-otp-secret-minimum-size-error": "Secret minimum size is mandatory",
    "mod-otp-otp-length": "Code length",
    "mod-otp-otp-length-ph": "6 to 8 digits",
    "mod-otp-otp-length-error": "Code length is mandatory",
    "mod-otp-hotp-allow": "HOTP",
    "mod-otp-hotp-window": "HOTP window",
    "mod-otp-hotp-window-ph": "e.g. 1",
    "mod-otp-hotp-window-error": "HOTP window is mandatory",
    "mod-otp-totp-allow": "TOTP",
    "mod-otp-totp-window": "TOTP window",
    "mod-otp-totp-window-ph": "e.g. 1",
    "mod-otp-totp-window-error": "TOTP window is mandatory",
    "mod-otp-totp-start-offset": "Start offset",
    "mod-otp-totp-start-offset-ph": "e.g. 0",
    "mod-certificate-cert-source": "Certificate source",
    "mod-certificate-cert-source-TLS": "TLS session",
    "mod-certificate-cert-source-header": "HTTP header",
    "mod-certificate-cert-source-both": "Both",
    "mod-certificate-header-name": "Corresponding header property",
    "mod-certificate-header-name-ph": "e.g. SSL_CLIENT_CERT",
    "mod-certificate-header-name-error": "The property is mandatory",
    "mod-certificate-value-yes": "Yes",
    "mod-certificate-value-no": "No",
    "mod-certificate-use-scheme-storage": "Use scheme storage",
    "mod-certificate-user-certificate-property": "Certificate property",
    "mod-certificate-user-certificate-property-ph": "e.g. x509-certificate",
    "mod-certificate-user-dn-property": "DN Property",
    "mod-certificate-user-dn-property-ph": "e.g. x509-dn",
    "mod-certificate-user-property-error": "At least one of these fields is mandatory",
    "mod-certificate-user-certificate-format": "Certificate format",
    "mod-certificate-user-certificate-format-PEM": "PEM",
    "mod-certificate-user-certificate-format-DER": "DER",
    "mod-certificate-use-ca-chain": "Use a CA",
    "mod-certificate-user-certificate-ca-chain":"CA certificates",
    "mod-certificate-user-certificate-ca-chain-message": "Select all the certificates of the CA chains you want to use for validation",
    "mod-certificate-user-certificate-ca-chain-delete": "Delete",
    "mod-register-session-key": "Session identifier",
    "mod-register-session-key-ph": "e.g. G_REGISTER_SESSION",
    "mod-register-session-key-error": "Session identifier is mandatory",
    "mod-register-session-duration": "Session duration in seconds",
    "mod-register-session-duration-ph": "e.g. 3600",
    "mod-register-session-duration-error": "Session duration is mandatory and must be positive",
    "mod-register-set-password": "Password",
    "mod-register-always": "Mandatory",
    "mod-register-yes": "Yes",
    "mod-register-no": "No",
    "mod-register-scope-add": "Scopes to add",
    "mod-register-scope": "Scopes",
    "mod-register-scope-error": "You must select at least one scope",
    "mod-register-add-scheme": "Add a scheme",
    "mod-register-scheme-name": "Scheme",
    "mod-register-scheme-register": "Mandatory",
    "mod-register-scheme-error": "You must select a scheme",
    "mod-register-verify-email": "Verify e-mail",
    "mod-register-email-is-username": "Username is e-mail",
    "mod-register-has-mandatory-error": "You must have at least one mandatory authentication method",
    "mod-register-subject-ph": "e.g. Complete your Glewlwyd registration",
    "mod-register-body-pattern": "E-mail body",
    "mod-register-body-pattern-doc": "The patterns {CODE} and {TOKEN} will be replaced by the code and the token",
    "mod-register-verification-code-length": "Verification code length",
    "mod-register-verification-code-length-ph": "e.g. 8",
    "mod-register-verification-code-length-error": "Verification code length is mandatory and must be above 0",
    "mod-register-verification-code-duration": "Verification code duration (seconds)",
    "mod-register-verification-code-duration-ph": "e.g. 600",
    "mod-register-verification-code-duration-error": "Verification code duration is mandatory and must be above 0",
    "mod-register-title": "Register account",
    "mod-register-update-email-title": "Update e-mail address",
    "mod-register-reset-credentials-title": "Reset credential",
    "mod-register-smtp-params-title": "SMTP parameters",
    "mod-register-enabled": "Register account enabled",
    "mod-register-update-email": "Update e-mail address enabled",
    "mod-register-update-email-token-duration": "Token duration (seconds)",
    "mod-register-update-email-token-duration-ph": "e.g. 600",
    "mod-register-reset-credentials": "Reset credentials",
    "mod-register-reset-credentials-session-key": "Session identifier",
    "mod-register-reset-credentials-session-key-ph": "e.g. G_CREDENTIALS_SESSION",
    "mod-register-reset-credentials-session-key-error": "Session identifier is mandatory",
    "mod-register-reset-credentials-session-duration": "Session duration in seconds",
    "mod-register-reset-credentials-session-duration-ph": "e.g. 3600",
    "mod-register-reset-credentials-session-duration-error": "Session duration is mandatory and must be positive",
    "mod-register-reset-credentials-email": "Use e-mail to reset credentials",
    "mod-register-reset-credentials-token-duration": "Token duration (seconds)",
    "mod-register-reset-credentials-token-duration-ph": "e.g. 600",
    "mod-register-reset-credentials-code": "Use recovery code to reset credentials",
    "mod-register-reset-credentials-code-property": "Recovery code hash property",
    "mod-register-reset-credentials-code-property-ph": "e.g. reset-credentials-code",
    "mod-register-reset-credentials-code-property-error": "Recovery code hash property is mandatory",
    "mod-register-option-error": "Please select one of the options",
    "mod-reset-credentials-code-list-size": "Number of recovery codes available",
    "mod-reset-credentials-code-list-size-ph": "e.g. 4",
    "mod-reset-credentials-code-list-size-error": "Number of recovery codes available is mandatory and must be a non null positive integer",
    "mod-oauth2-redirect_uri": "Redirect URI",
    "mod-oauth2-redirect_uri-ph": "e.g. https://example.com/callback",
    "mod-oauth2-redirect_uri-error": "Redirect URI is mandatory",
    "mod-oauth2-session_expiration": "Session duration for authentication (seconds)",
    "mod-oauth2-session_expiration-ph": "e.g. 600",
    "mod-oauth2-session_expiration-error": "Session duration is mandatory",
    "mod-oauth2-provider_list-message": "Authorized providers list",
    "mod-oauth2-new": "New OAuth2/OIDC provider",
    "mod-oauth2-mainstream_provider-none": "Personalized",
    "mod-oauth2-mainstream_provider": "Provider type",
    "mod-oauth2-help_url": "Online help to configure the provider settings",
    "mod-oauth2-name": "Name",
    "mod-oauth2-name-ph": "e.g. oidcProvider",
    "mod-oauth2-name-error": "Name is mandatory",
    "mod-oauth2-provider_type": "Provider type",
    "mod-oauth2-provider_type-oauth2": "OAuth2",
    "mod-oauth2-provider_type-oidc": "OpenID Connect",
    "mod-oauth2-enabled": "Enabled",
    "mod-oauth2-logo_uri": "Logo URL",
    "mod-oauth2-logo_uri-ph": "e.g. https://example.com/logo.png",
    "mod-oauth2-logo_fa": "Fork Awesome icon",
    "mod-oauth2-logo_fa-ph": "e.g. GitHub",
    "mod-oauth2-client_id": "client_id",
    "mod-oauth2-client_id-ph": "e.g. clientXyz1234",
    "mod-oauth2-client_id-error": "client_id is mandatory",
    "mod-oauth2-client_secret": "Secret",
    "mod-oauth2-client_secret-ph": "e.g. aef426bdc897",
    "mod-oauth2-response_type": "Response type",
    "mod-oauth2-response_type-code": "code",
    "mod-oauth2-response_type-token": "token",
    "mod-oauth2-response_type-id_token": "id_token",
    "mod-oauth2-userid_property": "Userid property",
    "mod-oauth2-userid_property-ph": "e.g. sub",
    "mod-oauth2-userid_property-error": "Userid property is mandatory",
    "mod-oauth2-config_endpoint": "Config Endpoint URL",
    "mod-oauth2-config_endpoint-ph": "e.g. https://oidcProvider.tld/.well-known/openid-configuration",
    "mod-oauth2-auth_endpoint": "Auth Endpoint URL",
    "mod-oauth2-auth_endpoint-ph": "e.g. https://oidcProvider.tld/auth",
    "mod-oauth2-auth_endpoint-error": "URL endpoint auth is mandatory",
    "mod-oauth2-token_endpoint": "Token Endpoint URL",
    "mod-oauth2-token_endpoint-ph": "e.g. https://oidcProvider.tld/token",
    "mod-oauth2-token_endpoint-error": "URL endpoint token is mandatory",
    "mod-oauth2-userinfo_endpoint": "Userinfo Endpoint URL",
    "mod-oauth2-userinfo_endpoint-ph": "e.g. https://oidcProvider.tld/userinfo",
    "mod-oauth2-userinfo_endpoint-error": "URL userinfo is mandatory",
    "mod-oauth2-scope": "Scope",
    "mod-oauth2-scope-ph": "e.g. g_profile",
    "mod-oauth2-additional_parameters": "Additional parameters",
    "mod-oauth2-additional_parameters-add": "Add",
    "mod-oauth2-add-param-key-ph": "Key",
    "mod-oauth2-additional_parameters-key-error": "Key is mandatory",
    "mod-oauth2-add-param-value-ph": "Value",
    "mod-oauth2-additional_parameters-value-error": "Value is mandatory",
    "api-key-description": "Warning! API keys allows to access all administration APIs without an administrator session cookie and has no expiration date. Please use and save them safely.",
    "api-key-disabled": "API keys is disabled in the server configuration, see 'Configure glewlwyd/Admin session authentication' in the installation documentation.",
    "api-key-title": "Created API keys",
    "api-key-add": "Create a key",
    "api-key-counter": "Used counter",
    "api-key-username": "Created by",
    "api-key-issued-at": "Created on",
    "api-key-issued-for": "Source address",
    "api-key-user-agent": "User-Agent",
    "api-key-add-title": "New API key",
    "api-key-add-label": "Please save the key below with caution",
    "confirm-delete-api-key-title": "Disable an API key",
    "confirm-delete-api-key": "Are you sure you want to disable this API key?",
    "success-api-delete-api-key": "API key disabled",
    "api-key-example-description": "To use an API key, you must set it in a header 'Authorization' with the prefix value 'token' (the prefix is case sensitive)",
    "api-key-example": "curl 'http://localhost:4593/api/user' -H 'Authorization: token XJcv1MRnK33EHAedPGELl0yXx2W6vUPu'",
    "mod-glwd-oauth-dpop-title": "OAuth 2.0 Demonstration of Proof-of-Possession at the Application Layer (DPoP) (Draft 07)",
    "mod-glwd-oauth-dpop-allowed": "Allow DPoP",
    "mod-glwd-oauth-dpop-iat-duration": "DPoP Token iat claim maximum duration (seconds)",
    "mod-glwd-oauth-dpop-iat-duration-ph": "e.g. 10",
    "mod-glwd-oauth-dpop-iat-duration-error": "DPoP Token iat claim maximum duration is mandatory",
    "mod-glwd-oauth-dpop-iat-gap-duration": "DPoP Token iat claim maximum margin of error (seconds)",
    "mod-glwd-oauth-dpop-iat-gap-duration-ph": "e.g. 0",
    "mod-glwd-oauth-dpop-iat-gap-duration-error": "DPoP Token iat claim maximum margin of error is mandatory",
    "mod-glwd-oauth-dpop-dpop_bound_access_tokens-property": "dpop_bound_access_tokens property",
    "mod-glwd-oauth-dpop-dpop_bound_access_tokens-property-ph": "e.g. dpop_bound_access_tokens",
    "mod-glwd-oauth-dpop-nonce-mandatory": "DPoP Nonce mandatory",
    "mod-glwd-oauth-dpop-nonce-counter": "Maximum number of times a DPoP Nonce can be used",
    "mod-glwd-oauth-dpop-nonce-counter-ph": "e.g. 10",
    "mod-glwd-oauth-dpop-nonce-counter-error": "Maximum number of times is mandatory",
    "mod-glwd-resource-title": "Resource Indicators (RFC 8707)",
    "mod-glwd-resource-allowed": "Allow resource indicators",
    "mod-glwd-resource-scope": "Resource list by scope",
    "mod-glwd-resource-scope-add": "Add",
    "mod-glwd-resource-scope-urls-ph": "e.g. https://resource.tld/",
    "mod-glwd-resource-scope-and-client-false": "Or",
    "mod-glwd-resource-scope-and-client-true": "And",
    "mod-glwd-resource-client-property": "Client resource list property",
    "mod-glwd-resource-client-property-ph": "e.g. resource",
    "mod-glwd-resource-scope-empty-error": "Resource url list must not be empty",
    "mod-glwd-resource-scope-url-error": "A resource url must be a 'https://' or 'http://localhost' and can't include a fragment",
    "mod-glwd-resource-scope-or-client-error": "You must set at least a resource scope list or set a client resource property",
    "mod-glwd-resource-scope-and-client-error": "You must set a resource scope list and set a client resource property",
    "mod-glwd-oauth-rar-title": "OAuth 2.0 Rich Authorization Requests (Draft 11)",
    "mod-glwd-oauth-rar-allowed": "Allow OAuth 2.0 Rich Authorization Requests",
    "mod-glwd-rar-types-client-property": "Client authorization_details_types property",
    "mod-glwd-rar-types-client-property-ph": "e.g. authorization_details_types",
    "mod-glwd-rar-types-client-property-error": "Client authorization_details_types property is mandatory",
    "mod-glwd-rar-allow-auth-unsigned": "Allow unsigned OAuth 2.0 Rich Authorization Requests",
    "mod-glwd-rar-allow-auth-unencrypted": "Allow unencrypted OAuth 2.0 Rich Authorization Requests",
    "mod-glwd-new-rar-ph": "New type",
    "mod-glwd-new-rar-error": "The type already exists",
    "mod-glwd-new-rar-invalid-char": "The type contains invalid characters",
    "mod-glwd-rar-scope": "Allowed scopes",
    "mod-glwd-rar-description": "Description",
    "mod-glwd-rar-description-ph": "e.g. Account information",
    "mod-glwd-rar-locations": "Allowed locations (optional, one per line)",
    "mod-glwd-rar-locations-ph": "e.g. https://example.com/accounts\nhttps://resource.tld/",
    "mod-glwd-rar-actions": "Allowed actions (optional, one per line)",
    "mod-glwd-rar-actions-ph": "e.g. initiate\nstatus\ncancel",
    "mod-glwd-rar-datatypes": "Allowed datatypes (optional, one per line)",
    "mod-glwd-rar-datatypes-ph": "e.g. account\nbalance",
    "mod-glwd-rar-enriched": "Enriched authorization details - user properties (optional, one per line)",
    "mod-glwd-rar-enriched-ph": "e.g. name\nemail\niban",
    "mod-glwd-rar-privileges": "Privileges",
    "mod-glwd-rar-privileges-ph": "e.g. read\nwrite",
    "mod-glwd-oauth-par-title": "OAuth 2.0 Pushed Authorization Requests (Draft 05)",
    "mod-glwd-oauth-par-allowed": "Allow Pushed Authorization Requests",
    "mod-glwd-oauth-par-required": "Require Pushed Authorization Requests",
    "mod-glwd-oauth-par-request_uri-prefix": "request_uri prefix",
    "mod-glwd-oauth-par-request_uri-prefix-ph": "e.g. urn:ietf:params:oauth:request_uri:",
    "mod-glwd-oauth-par-duration": "request_uri duration (seconds)",
    "mod-glwd-oauth-par-duration-ph": "e.g. 90",
    "mod-glwd-restrict-scope-client-property": "Client restrict-scope property",
    "mod-glwd-restrict-scope-client-property-ph": "e.g. scope",
    "misc-smtp-list-title": "SMTP configurations list",
    "misc-smtp-summary": "Summary",
    "modal-misc-smtp-title": "Edit a SMTP configurations",
    "success-api-set-misc-smtp": "SMTP configurations updated with success",
    "error-api-set-misc-smtp": "Error while updating SMTP configurations",
    "success-api-add-misc-smtp": "SMTP configurations added with success",
    "error-api-add-misc-smtp": "Error while adding SMTP configurations",
    "confirm-remove-misc-smtp-title": "Confirm remove",
    "confirm-remove-misc-smtp-message": "Are you sure you want to remove this SMTP configurations?",
    "success-api-delete-misc-smtp": "Configuration removed",
    "error-api-delete-misc-smtp": "Error while removing SMTP configurations",
    "misc-send-mail-on-new-connexion": "Send an e-mail on a new connection from a new device",
    "modal-misc-mail-on-connexion-title": "E-mail send configuration",
    "smtp-config": "SMTP Configuration",
    "smtp-config-none": "none",
    "mail-on-connexion-title": "New connection",
    "mail-on-connexion-subject-ph": "New connection on your account",
    "mail-on-connexion-body-pattern": "Body: Use variables {USERNAME}, {IP}, {LOCATION}",
    "mail-on-connexion-body-pattern-ph": "Ee.g. New connection with your account '{USERNAME}'\nOrigin: {IP} - {LOCATION}",
    "mail-on-update-password-title": "Password change",
    "mail-on-update-password-subject-ph": "Your password has been changed",
    "mail-on-update-password-body-pattern": "Body: Use variables {USERNAME}, {IP}, {LOCATION}",
    "mail-on-update-password-body-pattern-ph": "Ex: The password for your account '{USERNAME}' has been changed\nOrigin: {IP} - {LOCATION}",
    "mail-on-register-scheme-title": "Authentication scheme registered",
    "mail-on-register-scheme-subject-ph": "Authentication scheme has been changed",
    "mail-on-register-scheme-body-pattern": "Corps: Use variables {USERNAME}, {SCHEME}, {IP}, {LOCATION}",
    "mail-on-register-scheme-body-pattern-ph": "Ex: Authentication scheme {SCHEME} for your account '{USERNAME}' has been changed\nOrigine: {IP} - {LOCATION}",
    "success-api-mail-on-connexion": "Configuration saved",
    "error-api-mail-on-connexion": "Error while saving configuration",
    "misc-ip-geolocation-api": "Use a geolocation API",
    "modal-misc-geolocation-title": "Geolocation API",
    "misc-geolocation-url": "API URL, including {IP}",
    "misc-geolocation-url-ph": "e.g. https://my-geolocation-api.tld/{IP}?API_KEY=abcdxyz1234",
    "misc-geolocation-output-properties": "Properties to use",
    "misc-geolocation-output-properties-ph": "e.g. city, country_name",
    "success-api-ip-geolocation-api": "Configuration saved",
    "error-api-ip-geolocation-api": "Error while saving configuration",
    "misc-geolocation-url-error": "URL is mandatory",
    "misc-geolocation-output-properties-error": "Properties to use are mandatory"
  },
  "profile": {
    "error-credential-message": "Please connect to the application",
    "requires-profile-scope": "Profile scope required",
    "requires-admin-scope": "Admin scope required",
    "menu-title": "Glewlwyd",
    "menu-user": "Personal data",
    "menu-password": "Password",
    "menu-session": "Sessions",
    "menu-session-new": "Add user",
    "menu-reset-credentials-code": "Recover credentials",
    "hello": "Welcome {{- name}}",
    "hello-delegate": "Delegate {{- name}}",
    "save": "Save",
    "delete": "Delete account",
    "save-profile-success": "Profile saved",
    "save-profile-error": "Error while saving profile",
    "delete-profile-title": "Delete account",
    "delete-profile-message": "Are you sure you want to delete the account? This operation is irreversible.",
    "delete-profile-success": "The account has been deleted",
    "delete-profile-error": "Error while deleting the account",
    "password-title": "Change password",
    "password-old-password": "Current password",
    "password-old-password-ph": "e.g. 12345678",
    "password-new-password": "New password",
    "password-new-password-ph": "{{minLength}} characters minimum",
    "password-new-password-confirm": "Confirm new password",
    "password-new-password-confirm-ph": "{{minLength}} characters minimum",
    "password-min-characters": "A password must be at least {{minLength}} characters length",
    "password-not-match": "Passwords don't match",
    "password-invalid": "Password is invalid",
    "password-change-success": "Password has been changed",
    "scheme-not-found": "Scheme {{module}} not found",
    "scheme-mock-title": "Scheme {{module}}/{{name}} configuration",
    "scheme-mock-get-register": "Registration status",
    "scheme-mock-register": "Register scheme",
    "scheme-mock-deregister": "Deregister scheme",
    "scheme-mock-register-status": "Current status:",
    "scheme-mock-register-status-registered": "Registered",
    "scheme-mock-register-status-not-registered": "Not registered",
    "scheme-webauthn-title": "Web Authentication components",
    "scheme-webauthn-disabled": "Webauthn isn't available with your browser",
    "scheme-webauthn-register": "New component",
    "scheme-webauthn-register-title": "Register a new component with your profile",
    "scheme-webauthn-test-registration": "Test",
    "scheme-webauthn-test-registration-title": "Test authentication",
    "scheme-webauthn-register-credential-error": "Error while registering component",
    "scheme-webauthn-register-credential-success": "The new component has been registered",
    "scheme-webauthn-assertion-success": "Authentication succeeded",
    "scheme-webauthn-assertion-error": "Authentication error",
    "scheme-webauthn-table-created_at": "Registration date",
    "scheme-webauthn-table-name": "Device name",
    "scheme-webauthn-table-enabled": "Enabled",
    "scheme-webauthn-btn-edit": "Edit name",
    "scheme-webauthn-btn-switch-on": "Enable",
    "scheme-webauthn-btn-switch-off": "Disable",
    "scheme-webauthn-btn-remove": "Remove",
    "scheme-webauthn-edit-placeholder": "e.g. Yubikey 5",
    "scheme-webauthn-error-assertion": "Authentication error",
    "scheme-webauthn-error-registration": "Registration error",
    "scheme-webauthn-confirm-title": "Remove component",
    "scheme-webauthn-confirm-message": "Do you want to remove this component?",
    "scheme-webauthn-removed": "Component removed",
    "scheme-otp-title": "HOTP/TOTP (One Time Password)",
    "scheme-otp-type": "Type",
    "scheme-otp-type-TOTP": "TOTP",
    "scheme-otp-type-HOTP": "HOTP",
    "scheme-otp-type-NONE": "None",
    "scheme-otp-secret": "Shared secret",
    "scheme-otp-secret-ph": "Must be Base32 encoded",
    "scheme-otp-secret-error": "Shared secret is required",
    "scheme-otp-moving_factor": "Position factor",
    "scheme-otp-moving_factor-ph": "Default 0",
    "scheme-otp-moving_factor-error": "Position factor is required",
    "scheme-otp-time_step_size": "Validity period (seconds)",
    "scheme-otp-time_step_size-ph": "Default 30",
    "scheme-otp-time_step_size-error": "Validity period is required",
    "scheme-otp-save": "Save",
    "scheme-otp-save-ok": "OTP saved",
    "scheme-otp-save-error": "Error while saving OTP",
    "scheme-otp-generate-secret": "Generate",
    "scheme-otp-none-specified": "No OTP specified",
    "scheme-otp-scan-qrcode-message": "You must scan this QRCode or enter the information in your app to use this authentication",
    "session-title": "Sessions and tokens",
    "session-table": "Sessions",
    "session-token-oauth2-table": "Tokens Oauth2 {{name}}",
    "session-token-oidc-table": "Tokens OIDC {{name}}",
    "session-table-last-login": "Last login",
    "session-table-expiration": "Expires on",
    "session-table-client": "Client",
    "session-table-issued-for": "Source address",
    "session-table-user-agent": "User Agent",
    "session-enabled-true": "Enabled",
    "session-enabled-false": "Disabled",
    "session-disabled": "Session disabled",
    "token-disabled": "Token disabled",
    "session-disable-title": "Disable a session",
    "session-disable-message": "Do you want to disable this session?",
    "session-disable-token-title": "Disable a token",
    "session-disable-token-message": "Do you want to disable this token?",
    "session-disable-all-token-message": "Do you want to disable all these token?",
    "scheme-certificate-title": "X509 Certificate authentication",
    "scheme-certificate-table-certificate_dn": "Identifier",
    "scheme-certificate-table-certificate_issuer_dn": "Issuer",
    "scheme-certificate-table-expiration": "Expires",
    "scheme-certificate-table-last_used": "Last used",
    "scheme-certificate-table-last_user_agent": "Last user-agent",
    "scheme-certificate-add-from-file": "Add a certificate from a file",
    "scheme-certificate-add-from-request": "Add current certificate",
    "scheme-certificate-test": "Test current certificate",
    "scheme-certificate-refresh": "Refresh",
    "scheme-certificate-confirm-title": "Delete a certificate",
    "scheme-certificate-confirm-message": "Are you sure you want to delete this certificate?",
    "scheme-certificate-enabled": "Certificate enabled",
    "scheme-certificate-disabled": "Certificate disabled",
    "scheme-certificate-invalid": "Invalid certificate",
    "scheme-certificate-test-valid": "Valid certificate",
    "scheme-certificate-request-new": "Request a certificate to the server",
    "scheme-certificate-p12-file-save": "Save certificate",
    "scheme-certificate-p12-file-password": "Password:",
    "scheme-certificate-p12-file-show-password": "Show password",
    "scheme-certificate-p12-file-hide-password": "Hide password",
    "scheme-certificate-p12-file-copy-password": "Copy to clipboard",
    "scheme-certificate-p12-file-copy-password-success": "Password copied in the clipboard",
    "scheme-certificate-p12-file-copy-password-error": "Error while copying in the clipboard",
    "register-title": "Register a new account",
    "register-username-label": "Enter username",
    "register-username-ph": "e.g. cornholio42",
    "register-username-checking": "Checking",
    "register-username-empty": "Username required",
    "register-username-create": "Create account",
    "register-username-error": "Username unavailable",
    "register-username-valid": "Username available",
    "register-username-suggestion": "Suggestion: {{username}}",
    "register-profile-username-label": "Username",
    "register-name-label": "Full name",
    "register-name-ph": "e.g. Semias from Murias",
    "register-email-label": "E-mail",
    "register-email-ph": "e.g. semias@glewlwyd.tld",
    "register-password-label": "Password",
    "register-password-ph": "Password must have at least {{car}} characters",
    "register-password-set-ph": "Password saved",
    "register-confirm-password-label": "Confirm password",
    "register-confirm-password-ph": "Both passwords must be identical",
    "register-password-error-not-match": "Passwords don't match",
    "register-profile-complete": "Complete registration",
    "register-profile-cancel": "Cancel registration",
    "register-profile-saved": "Profile saved",
    "register-profile-completed": "Profile registration complete",
    "register-profile-complete-message": "Profile registration complete, now you can connect",
    "register-profile-complete-link": "Profile connection",
    "register-profile-complete-steps": "You must complete the following steps:",
    "register-profile-complete-possible": "You can complete the registration",
    "register-profile-complete-step-password": "Enter password",
    "register-profile-complete-step-scheme": "Add a '{{- scheme}}'",
    "register-profile-incomplete": "Unable to complete registration, you must complete all mandatory steps",
    "register-profile-cancelled": "Registration cancelled",
    "register-profile-verify-email": "Verify e-mail address",
    "register-profile-reverify-email": "Resend the e-mail",
    "register-profile-email-invalid": "Invalid e-mail",
    "register-profile-email-sent": "E-mail sent to the address {{email}}",
    "register-email-error": "E-mail address is mandatory",
    "register-profile-verify-code": "Verify code",
    "register-code-label": "Enter received code",
    "register-code-ph": "e.g. 12345678",
    "register-code-error": "Invalid code",
    "register-profile-create": "Create profile",
    "register-profile-created": "Profile created",
    "register-token-invalid": "Invalid token",
    "register-profile-cancel-title": "Cancel a new account",
    "register-profile-cancel-message": "Are you sure you want to cancel this new account? The operation is irreversible",
    "register-invalid-url": "Connection error, invalid URL",
    "register-complete-link": "Connection to your application",
    "register-profile-nav-complete": "Complete",
    "register-profile-nav-incomplete": "Incomplete",
    "scheme-oauth2-title": "Authenticate with an external account",
    "scheme-oauth2-table-name": "Name",
    "scheme-oauth2-table-created_at": "Created at",
    "scheme-oauth2-table-last_session": "Last use",
    "scheme-oauth2-btn-remove": "Remove",
    "scheme-oauth2-btn-add": "Add",
    "scheme-oauth2-confirm-title": "Remove an account",
    "scheme-oauth2-confirm-message": "Are you sure you want to remove the account {{provider}}?",
    "scheme-oauth2-registration-invalid": "Registration invalid",
    "update-email-modal-title": "Update e-mail address",
    "update-email-modal-message": "Please enter new e-mail address",
    "update-email-modal-ph": "e.g. alice@example.com",
    "update-email-modal-complete-message": "A message has been sent to {{email}}, please confirm by clicking on the link en the message",
    "update-email-success": "E-mail address has been updated",
    "reset-credentials-code-reset-title": "Reset credentials - Initialize recovery code",
    "reset-credentials-code-reset-label": "A recovery code allows to change your password or reconfigure your authentication schemes if you have lost or forgot your credentials. A recovery code is good for only one use. Please save your recovery codes in a safe place. You can reset your recovery codes at any time on your profile page, although old codes that are still active will be disabled after a recovery code reset.",
    "reset-credentials-code-reset-button": "Reset recovery codes",
    "reset-credentials-code-reset-label-modal": "Please save the following new recovery codes",
    "reset-credentials-email-token-error": "Invalid token",
    "reset-credentials-hello": "Reset credentials: {{-name}}",
    "reset-credentials-error": "Session error, please reconnect",
    "reset-credentials-complete-message": "After changing your password and/or restoring your credentials, you can reconnect to the application using the following link",
    "session-client-grant-table": "Client grants",
    "session-remove-scope-grant-title": "Remove grant",
    "session-remove-scope-grant-message": "Do you want to remove this grant?",
    "scheme-register-forbidden": "The administrator forbids to register or get the registration of this scheme",
    "ciba-connect-message": "Client {{client}} has a pending authorization",
    "ciba-connect-link": "Click here to connect",
    "ciba-cancel-link": "Click here to cancel"
  },
  "callback": {
    "button-login": "Back to login page",
    "button-profile": "Back to profile page",
    "authentication-success": "Authentication complete",
    "authentication-error": "Authentication error",
    "unknown-error": "Error"
  },
  "modal": {
    "close": "Close",
    "ok": "OK",
    "list-add-placeholder": "Element",
    "list-add-title": "Add an element",
    "pwd-set": "Change",
    "pwd-keep": "Keep",
    "pwd-disabled": "Disable"
  }
}
