globuzma/canaille-globuzma
1
0
Fork 0
forked from Github-Mirrors/canaille
Code Pull requests Activity

Merge branch 'issue-172-doc-translation' into 'main'

Browse source 
documentation translation basic configuration

See merge request yaal/canaille!190
This commit is contained in:
Éloi Rivard 2024-11-22 15:36:53 +00:00
commit 182c167e83
41 changed files with 15966 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
CONTRIBUTING.rst
View file

@ -157,11 +157,6 @@ The dynamical parts of the interface use `htmx <https://htmx.org/>`_.
not depend on jQuery at all.
See the `related issue <https://gitlab.com/yaal/canaille/-/issues/130>`_.
Translations
------------
.. include:: ../../canaille/translations/README.rst
Documentation
-------------
@ -179,6 +174,17 @@ You can also run sphinx by hand, that should be faster since it avoids the tox e
The generated documentation is located at ``build/sphinx/html``.
Code translation
----------------
.. include:: ../../canaille/translations/README.rst
Documentation translation
-------------------------
.. include:: ../locales/readme.rst
Publish a new release
---------------------

5
doc/conf.py
View file

@ -163,3 +163,8 @@ autodoc_pydantic_settings_show_field_summary = False
autodoc_pydantic_settings_signature_prefix = ""
autodoc_pydantic_field_signature_prefix = ""
autodoc_pydantic_field_list_validators = False
# -- Translation options ------------------------------------------------------
# Advised by https://docs.readthedocs.io/en/latest/guides/manage-translations-sphinx.html#create-translatable-files
gettext_uuid = True
gettext_compact = False

2
doc/features.rst
View file

@ -184,7 +184,7 @@ Internationalization
:align: right
:width: 600px
Canaile will display in your :attr:`preferred language <canaille.core.models.User.preferred_language>` if available, or your browser language if available (and if it is not you can :ref:`help us with the translation <development/contributing:Translations>`).
Canaile will display in your :attr:`preferred language <canaille.core.models.User.preferred_language>` if available, or your browser language if available (and if it is not you can :ref:`help us with the translation <development/contributing:Code translation>`).
If you prefer, you can also :attr:`force a language <canaille.core.configuration.CoreSettings.FAVICON>` for every users.
.. _feature_ui:

3
doc/gettext/.gitignore vendored Normal file
View file

@ -0,0 +1,3 @@
*
!.gitignore
!.pot

1712
doc/gettext/development/changelog.pot Normal file
View file

File diff suppressed because it is too large Load diff

400
doc/gettext/development/contributing.pot Normal file
View file

@ -0,0 +1,400 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../../CONTRIBUTING.rst:2
#: 002b7b86e67341a3abe1dc69ec1e6a70
msgid "Contributions"
msgstr ""
#: ../../CONTRIBUTING.rst:4
#: dd19b789311b44ddbfebef856907661f
msgid "Contributions are welcome!"
msgstr ""
#: ../../CONTRIBUTING.rst:6
#: 5a0c060f5510420485f21f180a8d16c8
msgid "The repository is hosted at `gitlab.com/yaal/canaille <https://gitlab.com/yaal/canaille>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:9
#: ba0d490fa2454469b836749c6f260ba3
msgid "Discuss"
msgstr ""
#: ../../CONTRIBUTING.rst:11
#: 5e6f9e2ce04d441c834bd51320b99525
msgid "If you want to implement a feature or a bugfix, please start by discussing it with us on the `bugtracker <https://gitlab.com/yaal/canaille/-/issues>`_ or the `matrix room <https://matrix.to/#/#canaille-discuss:yaal.coop>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:16
#: 0140e772bf834f889e84ec0e993fdb45
msgid "Development environment"
msgstr ""
#: ../../CONTRIBUTING.rst:18
#: fa5a69a308724bcf98d79d3d2e3f28f2
msgid "You can either run the demo locally or with Docker."
msgstr ""
#: ../../CONTRIBUTING.rst:20
#: 0a41b0d076254191ad0614c09d718c96
msgid "The only tool required for local development is `uv`. Make sure to have uv `installed on your computer <https://docs.astral.sh/uv/getting-started/installation/>`_ to be able to hack Canaille."
msgstr ""
#: ../../CONTRIBUTING.rst:24
#: b0c122affe964f63a9d237b87ae8043f
msgid "Initialize your development environment with: - ``uv sync --extra front --extra oidc`` to have a minimal working development environment. This will allow you to run the tests with ``uv pytest --backend memory``. - ``uv sync --extra front --extra oidc --extra sqlite`` to have a minimal working development environment with SQLite backend support. This will allow you to run the tests with ``uv pytest --backend sql``. - ``uv sync --extra front --extra oidc --extra ldap`` to have a minimal working development environment with LDAP backend support. This will allow you to run the tests with ``uv pytest --backend ldap``. - ``uv sync --all-extras`` if you want to have everything at your fingertips. Note that it may compile some Python dependencies that would expect things to be installed on your system; Some dependencies of Canaille might need to be compiled, so you probably want to check that `GCC` and `cargo` are available on your computer."
msgstr ""
#: ../../CONTRIBUTING.rst:31
#: 06d722cef5bf4514bbb820a4d1e43cf3
msgid "After having launched the demo you have access to several services:"
msgstr ""
#: ../../CONTRIBUTING.rst:33
#: ea39f2cd97274d7eb688562b3b05444c
msgid "A canaille server at `localhost:5000 <http://localhost:5000>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:34
#: 880dcaf1bf8e4753bead6e6f5051c8bb
msgid "A dummy client at `localhost:5001 <http://localhost:5001>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:35
#: f0ab0940d9b04b9f91cbb3dcf7953e56
msgid "Another dummy client at `localhost:5002 <http://localhost:5002>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:37
#: 347d5b12d2054eed8ede671233b3ce85
msgid "The canaille server has some default users:"
msgstr ""
#: ../../CONTRIBUTING.rst:39
#: 6323897e96df481db1bdd48ec861915e
msgid "A regular user which login and password are **user**;"
msgstr ""
#: ../../CONTRIBUTING.rst:40
#: b10c66fe4dae4efca925aebcc307439a
msgid "A moderator user which login and password are **moderator**;"
msgstr ""
#: ../../CONTRIBUTING.rst:41
#: 379aa4fc7d7a427ead3a6802bd843c79
msgid "An admin user which admin and password are **admin**;"
msgstr ""
#: ../../CONTRIBUTING.rst:42
#: 17002848baf846bead5f780f81d8f555
msgid "A new user which login is **james**. This user has no password yet, and his first attempt to log-in would result in sending a password initialization email (if a smtp server is configured)."
msgstr ""
#: ../../CONTRIBUTING.rst:47
#: 0fb9b013289d432280da24a3c0b3bd7f
msgid "Backends"
msgstr ""
#: ../../CONTRIBUTING.rst:49
#: 958b994659a74b6d92def6f9eded872f
msgid "Canaille comes with several backends:"
msgstr ""
#: ../../CONTRIBUTING.rst:51
#: 1f1357d0032747dab9f508a4e0a42b8c
msgid "a lightweight test purpose `memory` backend"
msgstr ""
#: ../../CONTRIBUTING.rst:52
#: 1891b9a2fc514712b4adbf69c3ce1c65
msgid "a `sql` backend, based on sqlalchemy"
msgstr ""
#: ../../CONTRIBUTING.rst:53
#: dfe5ba8564c34dd5a5059defdbd7265d
msgid "a production-ready `LDAP` backend"
msgstr ""
#: ../../CONTRIBUTING.rst:56
#: e61ba8769c274e26b93a9379b2318c66
msgid "Docker environment"
msgstr ""
#: ../../CONTRIBUTING.rst:58
#: 789cfcce161041aab0a9ec38e60d1ce3
msgid "If you want to develop with docker, your browser needs to be able to reach the `canaille` container. The docker-compose file exposes the right ports, but front requests are from outside the docker network: the `canaille` url that makes sense for docker, points nowhere from your browser. As exposed ports are on `localhost`, you need to tell your computer that `canaille` url means `localhost`."
msgstr ""
#: ../../CONTRIBUTING.rst:63
#: 243bc254bb984976a9b7a1ebdfb164e9
msgid "To do that, you can add the following line to your `/etc/hosts`:"
msgstr ""
#: ../../CONTRIBUTING.rst:69
#: 4c97cc128cde4bde9a615540fac34a37
msgid "To launch containers, use:"
msgstr ""
#: ../../CONTRIBUTING.rst:84
#: 37903a2ee9264932bfda81ccfc8c2f23
msgid "Local environment"
msgstr ""
#: ../../CONTRIBUTING.rst:98
#: 9fd679598df14c87983d9a3db07c1b14
msgid "If you want to run the demo locally with the LDAP backend, you need to have `OpenLDAP <https://www.openldap.org/>`_ installed on your system. It is generally shipped under the ``slapd`` or ``openldap`` package name."
msgstr ""
#: ../../CONTRIBUTING.rst:103
#: cabb1f62e5ab4f649333fb4bdea44bb7
msgid "On Debian or Ubuntu systems, the OpenLDAP `slapd` binary usage might be restricted by apparmor, and thus makes the tests and the demo fail. This can be mitigated by removing apparmor restrictions on `slapd`."
msgstr ""
#: ../../CONTRIBUTING.rst:113
#: a968344527c248d28ee118a01deac886
msgid "Populate the database"
msgstr ""
#: ../../CONTRIBUTING.rst:115
#: f86dab9375c843329fda042e45a18fad
msgid "The demo database comes populated with some random users and groups. If you need more, you can generate users and groups with the ``populate`` command:"
msgstr ""
#: ../../CONTRIBUTING.rst:126
#: e1c8a2e4f1154d4da564a52eed57bf70
msgid "Adapt to use either the `ldap` or the `sql` configuration file. Note that this will not work with the memory backend."
msgstr ""
#: ../../CONTRIBUTING.rst:129
#: 3f7cb689b8c04892bacc9a1e69369f5a
msgid "Unit tests"
msgstr ""
#: ../../CONTRIBUTING.rst:131
#: 5a55d7ab327844ecb7e5cdfba5692648
msgid "To run the tests, you just can run `uv run pytest` and/or `uv run tox` to test all the supported python environments. Everything must be green before patches get merged."
msgstr ""
#: ../../CONTRIBUTING.rst:134
#: b59e6cc3d02e43cb809a4e917bdc9c9b
msgid "To test a specific backend you can pass ``--backend memory``, ``--backend sql`` or ``--backend ldap`` to pytest and tox."
msgstr ""
#: ../../CONTRIBUTING.rst:136
#: 31a0a090499441cab7c275bced31a11e
msgid "The test coverage is 100%, patches won't be accepted if not entirely covered. You can check the test coverage with ``uv run pytest --cov --cov-report=html`` or ``uv run tox -e coverage -- --cov-report=html``. You can check the HTML coverage report in the newly created `htmlcov` directory."
msgstr ""
#: ../../CONTRIBUTING.rst:141
#: 4cd3c9737c4244de8817eb59ca927124
msgid "Code style"
msgstr ""
#: ../../CONTRIBUTING.rst:143
#: 0f2b878130954759a11524c208e26a5d
msgid "We use `ruff <https://docs.astral.sh/ruff/>`_ along with other tools to format our code. Please run ``uv run tox -e style`` on your patches before submitting them. In order to perform a style check and correction at each commit you can use our `pre-commit <https://pre-commit.com/>`_ configuration with ``uv run pre-commit install``."
msgstr ""
#: ../../CONTRIBUTING.rst:149
#: cba1248331964d159b2b1253ae50634d
msgid "Front"
msgstr ""
#: ../../CONTRIBUTING.rst:151
#: 1bc0bb39fb2b47c2aac56db867fa0d93
msgid "The interface is built upon the `Fomantic UI <https://fomantic-ui.com/>`_ CSS framework. The dynamical parts of the interface use `htmx <https://htmx.org/>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:154
#: b4a85f39680449cf9f911d541d794c6d
msgid "Using Javascript in the interface is tolerated, but the whole website MUST be accessible for browsers without Javascript support, and without any feature loss."
msgstr ""
#: ../../CONTRIBUTING.rst:156
#: cb749cb0196846578e5e04df1df97062
msgid "Because of Fomantic UI we have a dependency to jQuery, however new contributions should not depend on jQuery at all. See the `related issue <https://gitlab.com/yaal/canaille/-/issues/130>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:161
#: deea2dbf6acb42e99b95f661d4a540a5
msgid "Documentation"
msgstr ""
#: ../../CONTRIBUTING.rst:163
#: bde97657892b41d3a44e9c29919882a8
msgid "The documentation is generated when the tests run:"
msgstr ""
#: ../../CONTRIBUTING.rst:169
#: 91d5753457ef4fe08d82c1c03c30a4c6
msgid "You can also run sphinx by hand, that should be faster since it avoids the tox environment initialization:"
msgstr ""
#: ../../CONTRIBUTING.rst:175
#: 84a7965f74c342f4a767d918ec7e7fc8
msgid "The generated documentation is located at ``build/sphinx/html``."
msgstr ""
#: ../../CONTRIBUTING.rst:178
#: 3523b0c7c50544a7ae680fd16c821a28
msgid "Code translation"
msgstr ""
#: ../../canaille/translations/README.rst:1
#: a8f1fb9815754963a29bcfa65855ef88
msgid "Translations are done with `Weblate <https://hosted.weblate.org/projects/canaille/canaille>`_."
msgstr ""
#: ../../canaille/translations/README.rst:3
#: 3d5f471d16f5427dbad3a203cdd90503
msgid "The following commands are there as documentation, only the message extraction is needed for contributors. All the other steps are automatically done with Weblate."
msgstr ""
#: ../../canaille/translations/README.rst:8
#: ../locales/readme.rst:7
#: f11c4c84df6d443190d1b60d4f858fce
#: 7a6d3aff28fe4cf7a4e975ff7935d31e
msgid "Message extraction"
msgstr ""
#: ../../canaille/translations/README.rst:10
#: ../locales/readme.rst:9
#: c7318169ac354feeae24e67436dd1c6b
#: 5830609426e04e7ba3aeea18c413ee2e
msgid "After you have edited translatable strings, you should extract the messages with:"
msgstr ""
#: ../../canaille/translations/README.rst:17
#: ../locales/readme.rst:16
#: 764623358ada4e1684d1b572d61b712e
#: e3af01ce677943feaa7ade5343c8e90a
msgid "Language addition"
msgstr ""
#: ../../canaille/translations/README.rst:19
#: ../locales/readme.rst:18
#: a2b5aff4084044d78c59e0fabc992490
#: 546fd984ffa64b31972b1670b09ca6b3
msgid "You can add a new language manually with the following command, however this should not be needed as Weblate takes car of this:"
msgstr ""
#: ../../canaille/translations/README.rst:26
#: a61a44e0a1914d6c95e4ce4a2fb7ca42
msgid "Catalog update"
msgstr ""
#: ../../canaille/translations/README.rst:28
#: 1c475d88301b4d3aa56d82f20a24cc27
msgid "You can update the catalogs with the following command, however this should not be needed as Weblate automatically update language catalogs when it detects new strings or when someone translate some existing strings. Weblate pushes happen every 24h."
msgstr ""
#: ../../canaille/translations/README.rst:36
#: 4200924e358f45499f460769cc67c6a9
msgid "Catalog compilation"
msgstr ""
#: ../../canaille/translations/README.rst:38
#: 40de58e8a420485eb689e4abb8a4fa5e
msgid "You can compile the catalogs with the following command, however this should not be needed as catalogs are automatically compiled before running the unit tests, before launching the demo and before compiling the Canaille python package:"
msgstr ""
#: ../../CONTRIBUTING.rst:184
#: a168ea61caf74157be0b82d1d9952af6
msgid "Documentation translation"
msgstr ""
#: ../locales/readme.rst:1
#: b466e2381f024d40a12476d4846059f6
msgid "Documentation translation Translations are done with `Weblate <https://hosted.weblate.org/projects/canaille/canaille>`_."
msgstr ""
#: ../locales/readme.rst:4
#: 1294588ccb444efda7d1edc0ac45c573
msgid "The following commands are there as documentation, only the message extraction and the language addition is needed for contributors."
msgstr ""
#: ../locales/readme.rst:25
#: 5574bcc510534444bf74cc4471725689
msgid "Build the documentation in another language"
msgstr ""
#: ../../CONTRIBUTING.rst:189
#: 6215d4058c6b45c9ab9c57244986b560
msgid "Publish a new release"
msgstr ""
#: ../../CONTRIBUTING.rst:191
#: 5c63146cdc484f34a4ac23b3b60f7364
msgid "Check that dependencies are up to date with ``uv sync --all-extras --upgrade`` and update dependencies accordingly in separated commits;"
msgstr ""
#: ../../CONTRIBUTING.rst:192
#: 4d516e6db43048a99f1112b743916559
msgid "Check that tests are still green for every supported python version, and that coverage is still at 100%, by running ``uv run tox``;"
msgstr ""
#: ../../CONTRIBUTING.rst:193
#: 785c12428a4943288820c40c5d0ac261
msgid "Check that the demo environments are still working, both the local and the Docker one;"
msgstr ""
#: ../../CONTRIBUTING.rst:194
#: 0700ba761ff7459b8a1aa7e48afb8da8
msgid "Check that the :ref:`development/changelog:Release notes` section is correctly filled up;"
msgstr ""
#: ../../CONTRIBUTING.rst:195
#: 19f01831d3c04d36b74e4355021cf704
msgid "Increase the version number in ``pyproject.toml``;"
msgstr ""
#: ../../CONTRIBUTING.rst:196
#: 3cc39e4b68bf400292e544a33e9dcda3
msgid "Commit with ``git commit``;"
msgstr ""
#: ../../CONTRIBUTING.rst:197
#: b2f863f911f24805a109793d6806f83d
msgid "Build with ``uv build``;"
msgstr ""
#: ../../CONTRIBUTING.rst:198
#: fc01b4e40b58444391e922a6e8ea9e95
msgid "Publish on test PyPI with ``uv publish --publish-url https://test.pypi.org/legacy/``;"
msgstr ""
#: ../../CONTRIBUTING.rst:199
#: 0c7fbbb63e1e49ea871ca01165cb3b8a
msgid "Install the test package somewhere with ``pip install --extra-index-url https://test.pypi.org/simple --upgrade canaille``. Check that everything looks fine;"
msgstr ""
#: ../../CONTRIBUTING.rst:200
#: e1a8cc289c9040c198eb0f8f8ba502d8
msgid "Publish on production PyPI ``uv publish``;"
msgstr ""
#: ../../CONTRIBUTING.rst:201
#: 572996fb9dae4a3cad4a53104b812f70
msgid "Tag the commit with ``git tag XX.YY.ZZ``;"
msgstr ""
#: ../../CONTRIBUTING.rst:202
#: 91cf66e174e845fbad4201c90209fdad
msgid "Push the release commit and the new tag on the repository with ``git push --tags``."
msgstr ""

22
doc/gettext/development/index.pot Normal file
View file

@ -0,0 +1,22 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../development/index.rst:2
#: f8ef9113aa3f42238460597ae3d0bc4d
msgid "Development"
msgstr ""

542
doc/gettext/development/specifications.pot Normal file
View file

@ -0,0 +1,542 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../development/specifications.rst:2
#: a97a6bb1c237424994246e8e65391683
msgid "Specifications"
msgstr ""
#: ../development/specifications.rst:4
#: 75d7d4c9e1d943c0917c652bdaee5b8e
msgid "This page details which specifications are implemented in Canaille, and compares Canaille with other well-known identity providers."
msgstr ""
#: ../development/specifications.rst:7
#: 11062c45350643188f89a05c46b15be6
msgid "State of the specs in Canaille"
msgstr ""
#: ../development/specifications.rst:10
#: 339273b06e0b4c60ad30a7dedec78d6f
msgid "OAuth2"
msgstr ""
#: ../development/specifications.rst:12
#: f19a30db556b4c489e1cfd34a22d714a
msgid "✅ `RFC6749: OAuth 2.0 Framework <https://tools.ietf.org/html/rfc6749>`_"
msgstr ""
#: ../development/specifications.rst:13
#: 5214108a1c8f4e47ad186ff7715bd304
msgid "✅ `RFC6750: OAuth 2.0 Bearer Tokens <https://tools.ietf.org/html/rfc6750>`_"
msgstr ""
#: ../development/specifications.rst:14
#: 8296b65720114476bd1db0807519889c
msgid "✅ `RFC7009: OAuth 2.0 Token Revocation <https://tools.ietf.org/html/rfc7009>`_"
msgstr ""
#: ../development/specifications.rst:15
#: a7af32f3d44d44af8a37aa6f68b415c4
msgid "❌ `RFC7523: JWT Profile for OAuth 2.0 Client Authentication and Authorization Grants <https://tools.ietf.org/html/rfc7523>`_"
msgstr ""
#: ../development/specifications.rst:16
#: e5f4e81f5a7b4ddb873655612903f3ec
msgid "✅ `RFC7591: OAuth 2.0 Dynamic Client Registration Protocol <https://tools.ietf.org/html/rfc7591>`_"
msgstr ""
#: ../development/specifications.rst:17
#: ea20c5a67bbe4de2a5fd5127e41b0283
msgid "✅ `RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol <https://tools.ietf.org/html/rfc7592>`_"
msgstr ""
#: ../development/specifications.rst:18
#: 14f2599367a94c59abae6c6b67c5fadc
msgid "✅ `RFC7636: Proof Key for Code Exchange by OAuth Public Clients <https://tools.ietf.org/html/rfc7636>`_"
msgstr ""
#: ../development/specifications.rst:19
#: 1121950e20e04c90be2dccaacdd2ecee
msgid "✅ `RFC7662: OAuth 2.0 Token Introspection <https://tools.ietf.org/html/rfc7662>`_"
msgstr ""
#: ../development/specifications.rst:20
#: 0ea4a16217344ff7b5ee6c06927e6556
msgid "✅ `RFC8414: OAuth 2.0 Authorization Server Metadata <https://tools.ietf.org/html/rfc8414>`_"
msgstr ""
#: ../development/specifications.rst:21
#: 949318440bb345acbe0654a797bd07f2
msgid "❌ `RFC8428: OAuth 2.0 Device Authorization Grant <https://tools.ietf.org/html/rfc8428>`_"
msgstr ""
#: ../development/specifications.rst:22
#: ca5d9effb5f04710823144e6425d650b
msgid "❌ `RFC8693: OAuth 2.0 Token Exchange <https://tools.ietf.org/html/rfc8693>`_"
msgstr ""
#: ../development/specifications.rst:23
#: 253eda4c940a4e89a03d4ffd68e9da44
msgid "❌ `RFC8705: OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens <https://tools.ietf.org/html/rfc8705>`_"
msgstr ""
#: ../development/specifications.rst:24
#: 09b81d39ca2f410abf48cb370ecce899
msgid "❌ `RFC8707: Resource Indicators for OAuth 2.0 <https://tools.ietf.org/html/rfc8707>`_"
msgstr ""
#: ../development/specifications.rst:25
#: 9bd8b400a3b14a83915295f5a66cbcbd
msgid "❌ `RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens <https://tools.ietf.org/html/rfc9068>`_"
msgstr ""
#: ../development/specifications.rst:26
#: 46421682784443ea9da95d898c6c3b19
msgid "❌ `RFC9101: OAuth 2.0 JWT-Secured Authorization Request (JAR) <https://tools.ietf.org/html/rfc9101>`_"
msgstr ""
#: ../development/specifications.rst:27
#: 9794b722db5940ec96442e71c3f736ec
msgid "❌ `RFC9126: OAuth 2.0 Pushed Authorization Requests <https://tools.ietf.org/html/rfc9126>`_"
msgstr ""
#: ../development/specifications.rst:28
#: 35e4b73e84dd46ff9748778d150977ef
msgid "❌ `RFC9207: OAuth 2.0 Authorization Server Issuer Identification <https://tools.ietf.org/html/rfc9207>`_"
msgstr ""
#: ../development/specifications.rst:29
#: 390c1264e09543b999c7c6c526ef9506
msgid "❌ `RFC9394: OAuth 2.0 Rich Authorization Requests <https://www.rfc-editor.org/rfc/rfc9396.html>`_"
msgstr ""
#: ../development/specifications.rst:30
#: 9d394579d199448d92824fc5b1615ddb
msgid "❌ `OAuth2 Multiple Response Types <https://openid.net/specs/oauth-v2-multiple-response-types-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:31
#: ec3047a0028240a9a426ed49cd9fbd72
msgid "❌ `OAuth2 Form Post Response Mode <https://openid.net/specs/oauth-v2-form-post-response-mode-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:34
#: ef134aa15cc04f8aa1f66d29af6444db
msgid "OpenID Connect"
msgstr ""
#: ../development/specifications.rst:36
#: 1a4fed4ff22743ac8a6994bb06b64d07
msgid "✅ `OpenID Connect Core <https://openid.net/specs/openid-connect-core-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:37
#: d61d7bd64b024945817c8fb8ff146aa7
msgid "✅ `OpenID Connect Discovery <https://openid.net/specs/openid-connect-discovery-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:38
#: 390181b65f6247988cd1492e1c556053
msgid "✅ `OpenID Connect Dynamic Client Registration <https://openid.net/specs/openid-connect-registration-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:39
#: 714ed86b678e42e9808ef358702430f1
msgid "✅ `OpenID Connect RP Initiated Logout <https://openid.net/specs/openid-connect-rpinitiated-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:40
#: c2152b277d7144bd94ae19ad511f544c
msgid "❌ `OpenID Connect Session Management <https://openid.net/specs/openid-connect-session-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:41
#: 013f8fdab4cd4c8fa7327f9b2a57c1ea
msgid "❌ `OpenID Connect Front Channel Logout <https://openid.net/specs/openid-connect-frontchannel-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:42
#: 6e40e88f49d44d56804247f11335b56a
msgid "❌ `OpenID Connect Back Channel Logout <https://openid.net/specs/openid-connect-backchannel-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:43
#: 3d9b66f66adc4db2bc322fbd831dc655
msgid "❌ `OpenID Connect Back Channel Authentication Flow <https://openid.net/specs/openid-client-initiated-backchannel-authentication-core-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:44
#: edf569cf85144687ab8b11d290278122
msgid "❌ `OpenID Connect Core Error Code unmet_authentication_requirements <https://openid.net/specs/openid-connect-unmet-authentication-requirements-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:45
#: 5eed00445d4b41adaeddd84a90e3125b
msgid "✅ `Initiating User Registration via OpenID Connect 1.0 <https://openid.net/specs/openid-connect-prompt-create-1_0.html>`_"
msgstr ""
#: ../development/specifications.rst:48
#: ../development/specifications.rst:64
#: 8366892620b9425b9681dee3d90902f6
#: 534b14ea707f47d883031ce0c2ad422d
msgid "SCIM"
msgstr ""
#: ../development/specifications.rst:50
#: 7874e3563b874bdea0eddbfd185ebc6e
msgid "❌ `RFC7642: System for Cross-domain Identity Management: Definitions, Overview, Concepts, and Requirements <https://www.rfc-editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../development/specifications.rst:51
#: dc1d0faa287b404e8a9a77b40b8a0217
msgid "❌ `RFC7643: System for Cross-domain Identity Management: Core Schema <https://www.rfc-editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../development/specifications.rst:52
#: 1f08e6eea6024ea0b5c58667c7dbf48a
msgid "❌ `RFC7644: System for Cross-domain Identity Management: Protocol <https://www.rfc-editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../development/specifications.rst:55
#: b0d76f694f054508b87fc7daba711f30
msgid "Comparison with other providers"
msgstr ""
#: ../development/specifications.rst:57
#: 5b284471edaf4fb0a91ee8b75d265d74
msgid "Here is a feature comparison with other OpenID Connect server software."
msgstr ""
#: ../development/specifications.rst:59
#: 1e727634ba574bef9fab355484f4994b
msgid "Canaille voluntarily only implements the OpenID Connect protocol to keep its codebase simple."
msgstr ""
#: ../development/specifications.rst:62
#: 9c600e2a483240c8a166d2465e746dc4
msgid "Software"
msgstr ""
#: ../development/specifications.rst:62
#: 8cdd9df00b754a7ab51faa08ce09b8e2
msgid "Project"
msgstr ""
#: ../development/specifications.rst:62
#: 8d2892100b0f42549279e64ff7a69c13
msgid "Protocols implementations"
msgstr ""
#: ../development/specifications.rst:62
#: 96807e04038b49a2b211721a1e8c1d0d
msgid "Backends"
msgstr ""
#: ../development/specifications.rst:64
#: 7e230f36d1d44b3dbfc66acfea5625ef
msgid "FLOSS"
msgstr ""
#: ../development/specifications.rst:64
#: 0efe70a1d9354b1e96b2679d712419a3
msgid "Language"
msgstr ""
#: ../development/specifications.rst:64
#: f792dfb7f933494088f88be1703218c1
msgid "LOC"
msgstr ""
#: ../development/specifications.rst:64
#: 0abe79cb5e464cb7b8b7bcea5271fed5
msgid "OIDC"
msgstr ""
#: ../development/specifications.rst:64
#: 983adf22c3654f21895cc7ff72d92dc5
msgid "SAML"
msgstr ""
#: ../development/specifications.rst:64
#: 6985f4286f8f4fb7b843ee73e03e8731
msgid "CAS"
msgstr ""
#: ../development/specifications.rst:64
#: fa51f3013aa54f16a2ca358197c08479
msgid "LDAP"
msgstr ""
#: ../development/specifications.rst:64
#: c339c0f461194b9e940042576fda7446
msgid "SQL"
msgstr ""
#: ../development/specifications.rst:66
#: e1646674415744f88024dcbf7cf671ef
msgid "Canaille"
msgstr ""
#: ../development/specifications.rst:66
#: ../development/specifications.rst:68
#: ../development/specifications.rst:70
#: ../development/specifications.rst:72
#: ../development/specifications.rst:74
#: ../development/specifications.rst:76
#: ../development/specifications.rst:78
#: ../development/specifications.rst:80
#: ../development/specifications.rst:82
#: ../development/specifications.rst:84
#: ../development/specifications.rst:86
#: ../development/specifications.rst:88
#: 61fd556cb20d492eb3d00a3f25119922
#: 21b316fd400144b1baf2a84b43b1e91b
#: 081fa6b4e8bc4a2a84c5065be6fc86b2
#: 39da93a684b84957a285d01ff9fc429d
#: 738e75094fd047d8a4c3ededeffd82a5
#: 75f85206ad4a4cf1a2be4eb97392b7f1
#: b4b7dbbf0d18428cab9909f751156c3e
#: e8601f2f08e8478b8e806af474867681
#: 625c279a263645edbd90483e39906b61
#: 3a71fe452de5468e84d63e5e5863df5d
#: 22d33a862ab2488cbd51962fd7f76efb
#: c202d381f1854b949df07f8a6c53fc51
#: 3c29fd50290242c39afabcd83b39be14
#: 8f029b73bc134579ba7aef85b2258bb1
#: 18970336aa81458f83ce8efe2e1cb388
#: 0ff561dcb5a74ea6bc8daa6912eedbf7
#: 512b4f6b8da44ce691b08dd17fccac1c
#: 0353d5d6952e454d92d2714158a3fff7
#: 12ea772de9ed468d820b5cd8b779c63d
#: 9667afb42f474d7890846205b5f12aaf
#: 1c8f030a0ddc425c99b7854c6446152e
#: ceb819004a5949d7a54bb3ae0811fdc3
#: f35d58e2b267437fb658cbd453deb92b
#: 0eb2098ed2ed44fc9e63c65651de75c6
#: 39683a7608824577a002940e9b3caae1
#: 7772e40b9f574ffab4146d1c8181bcae
#: 78f98cf3d58f446b905d6576cdf03dc9
#: fbf1aa18e2e941408b568cc17c93f991
#: a1198553c8cc4e6da83b4721719ba046
#: 98777ff169804c9b8bddae6231196cc1
#: 203d011b336a4eb9be05bba9a11ed653
#: 77d8a7117ad74c24a2a7cd5edf2660f5
#: f01d6c19c10249e7b2ee838617aaa991
#: 2750a5cba5c7462b90f0c0c2c0c641ef
#: 97fed39b6da643aeaea1a3376a6abab7
#: a1bf1f291f7d4825962693679b4d0dda
#: f5c658e8843d4d3fa545b84a59ce5a1b
#: f7aa39787f5041b0982c9b6f8fd7fc21
#: 4ed876d863db4330a3892334c172355d
#: cc0096f4698940d08b82d53cc8152ed5
#: 5547268b704a4692a6123aec3baedf4a
#: 805d4d7d81724af3a7915e29a7a43873
#: 59a184ce7f854fe69d5b0e0f05ac7ac7
#: b1e2d928968147429a235debf80c75b9
#: 9f3b574c47f741dcb447476db7adfa23
#: d15375d26e4d4482baa98ad71d98d56b
#: 5a5847cc16c64f52b0dba5b39082ceb0
#: 6d2ea3bbef584893b186b6eba817d27a
#: c3d89ead25df491da9676ca4ef4efdb2
#: 573b3e570b59475482b3bc67d3b76ece
#: f9ffa865465e46e89841dead35408ad4
#: 1d0b3f93d7624e2995fdd8571d8520a4
#: 1127c63012824b6b9bf9d0671e37f1e4
#: c79b6ee5249e464087b2e98b600d3167
#: bb1245ee01ef49089f893aeca7d1cca5
#: 099c80fc74334fccacdb0f95821ea043
#: 0b1ec06cc91140e2bfd9649af05aca99
#: 44f1951905794391a0239cbc55a73b49
#: 08e5a3acc0a6475ea717b19e33a78de5
#: 1e6802c43e8742a8aba6967c7b58a0ae
#: 4c8d38384fd0454598ce7f55a53c8b90
#: a72be67fc5014d63829596f87977a2c8
#: 072cba535c7d4b07bed0be8adfcb5cec
msgid "✅"
msgstr ""
#: ../development/specifications.rst:66
#: ../development/specifications.rst:72
#: ../development/specifications.rst:74
#: a80c37859bd44e319edadf183220a78f
#: 24b3e50fd6b1448eb430a1d191b5270b
#: 7036e1a28c2145a68d3fc01d990a8dfa
msgid "Python"
msgstr ""
#: ../development/specifications.rst:66
#: 0a7351b6a6b94bb8b27a0bf5551bb52a
msgid "10k"
msgstr ""
#: ../development/specifications.rst:66
#: ../development/specifications.rst:68
#: ../development/specifications.rst:70
#: ../development/specifications.rst:72
#: ../development/specifications.rst:74
#: ../development/specifications.rst:76
#: ../development/specifications.rst:78
#: ../development/specifications.rst:82
#: ../development/specifications.rst:86
#: ../development/specifications.rst:88
#: 6c9a76b2c5de48ecb8f0d21b6852fbe9
#: 010027f0edd9497595f7d90006d01b43
#: 65026d1d5f1b4e44987f53b9dba9003a
#: 91ad0a0db8ec4ea8a621c78384a0b299
#: f0de2f44ad6940ae9cfb9ab991ddf4ac
#: 5cffb63471b8475d88a9f3146629bcf6
#: fd51bae4f61d49a3b58bf37ceffdb9fe
#: c2aa72806e8a46b190a5c995bfe73cb4
#: 5b255e3aecb04129ad44edf63e1db2b9
#: c9f12585f8974aeda0d0da84c3eba2e2
#: 30dc6b38e0214208ae8b8c5bbd581ce7
#: 298aeeb5f2f542a19d340eecf701ac36
#: 764b4774f15b4fa69ebf933067aee70c
#: e7833e50200c42c4a2bb825f333b126f
#: a8d152df986e4418995aac2db1fabe22
#: 3fbd31c8e87845e081a6fd930fcea34a
#: ba29ae1d68e647249a876c7c466140cd
#: eff68ea6bf914e6d9460a75a7b95df1d
#: ee6547c1037c4daa8c7e47d8b293acfe
msgid "❌"
msgstr ""
#: ../development/specifications.rst:68
#: 53518997880f4f07b39da682993af4b6
msgid "`Auth0`_"
msgstr ""
#: ../development/specifications.rst:68
#: ../development/specifications.rst:78
#: ../development/specifications.rst:80
#: ../development/specifications.rst:88
#: 4bb7beffd5744597b06495041c0e9a13
#: 8dc3389193d94a8aac0dd2409f8e3201
#: 36a2e73ac5924e40bd2647085e050940
#: b02e82ee66624ae79ee49a62b551c186
#: 2bcd9ba2cf8e46fc81f6c5dd24c4a9ee
#: 4d3a8010d2334d8096d81a88597449d3
#: df26d18da1524cf49f5f33a2cecb5bf6
#: ec53c642971f4347a16eb6530e5f819e
#: 7a90b30c977242f7aa46a5c08bf9d4b7
msgid "❔"
msgstr ""
#: ../development/specifications.rst:70
#: 9b22b3deecfa4382aaca36cb28817c8e
msgid "`Authelia`_"
msgstr ""
#: ../development/specifications.rst:70
#: ../development/specifications.rst:82
#: da7968f0492b43f4a6665d1b129b2fd5
#: 2d2b51ee61c74a9a90438d276e38c453
msgid "Go"
msgstr ""
#: ../development/specifications.rst:70
#: ../development/specifications.rst:82
#: 8f3b5c500b2544248e05887895e067c9
#: 8dcce8b1981249dab552acdfc8585636
msgid "50k"
msgstr ""
#: ../development/specifications.rst:72
#: c6e613a5ed0b4f649a3a03e43277d21a
msgid "`Authentic2`_"
msgstr ""
#: ../development/specifications.rst:72
#: f614cf3f446640fdb5569df25eab8e77
msgid "65k"
msgstr ""
#: ../development/specifications.rst:74
#: 6c51f85a594948dcbaeb0aad65c1280f
msgid "`Authentik`_"
msgstr ""
#: ../development/specifications.rst:74
#: 9f0ff320b7f84eba92f2ae5ca9f40178
msgid "55k"
msgstr ""
#: ../development/specifications.rst:76
#: 550458f7722d41d79719749d4a064c6e
msgid "`CAS`_"
msgstr ""
#: ../development/specifications.rst:76
#: ../development/specifications.rst:80
#: ../development/specifications.rst:84
#: 0e6eacfcc45b442cbb6565dc427e14ea
#: 5a2c7ddf83984e1091f6da3e4c965269
#: 16b8475565f5425caf749a61ba848778
msgid "Java"
msgstr ""
#: ../development/specifications.rst:76
#: 2226d6eecd7b4afbbc94909f72bbf30a
msgid "360k"
msgstr ""
#: ../development/specifications.rst:78
#: a90c6f2eb82c459baf20398845e55e07
msgid "`Connect2id`_"
msgstr ""
#: ../development/specifications.rst:80
#: d56e5f1e581a4aaa8cbc4ab09c75be81
msgid "`Gluu`_"
msgstr ""
#: ../development/specifications.rst:82
#: b9d37670e26d4e37afba75b9c8c2b870
msgid "`Hydra`_"
msgstr ""
#: ../development/specifications.rst:84
#: e14ff3876fb64d58a512790f856dc7d5
msgid "`Keycloak`_"
msgstr ""
#: ../development/specifications.rst:84
#: d7c0c274ec184995b9b92a268036e7a6
msgid "600k"
msgstr ""
#: ../development/specifications.rst:86
#: f36f2c4254104ba88bfd0b161b743716
msgid "`LemonLDAP`_"
msgstr ""
#: ../development/specifications.rst:86
#: 3cc4eb9ce6ab437aa60d1fe99a9b2c18
msgid "Perl"
msgstr ""
#: ../development/specifications.rst:86
#: 93b87c2ff8884d75b50d71df6807d844
msgid "130k"
msgstr ""
#: ../development/specifications.rst:88
#: e04aea3bf9ec4e5fb14d6b2da908f685
msgid "`Okta`_"
msgstr ""

597
doc/gettext/features.pot Normal file
View file

@ -0,0 +1,597 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../features.rst:9
#: e1788d199fc64e57a43d7ebb153e05c9
msgid "Features"
msgstr ""
#: ../features.rst:11
#: 1e7418cec66f4b2db1f86d4a377f538f
msgid "Here are the different features that Canaille provides. You can enable any of those features with the :doc:`configuration <references/configuration>` to fit any :doc:`use cases <usecases>` you may meet. Check our :ref:`roadmap <features:Roadmap>` to see what is coming next."
msgstr ""
#: ../features.rst:15
#: 4c66277e518f41539dbb0744ba1bfd12
msgid "Users can interact with Canaille through its :ref:`web interface <features:Web interface>` and administrators can also use its :ref:`command line interface <features:Command line interface>`. Canaille can handle data stored in different :ref:`database backends <features:Backends>`."
msgstr ""
#: ../features.rst:19
#: 305bf7e16c4d44c6a18aaa120bb0c8cd
msgid "Web interface"
msgstr ""
#: ../features.rst:21
#: 4089798492e546d1a7bf4606f554bdff
msgid "Canaille web interface can be used either in :doc:`production environments <tutorial/deployment>` or locally for development purposes."
msgstr ""
#: ../features.rst:26
#: 20ae09b8bd004ff68f64f36928c9fc98
msgid "Profile management"
msgstr ""
#: ../features.rst:28
#: ../features.rst:217
#: e24a042cb118431a95add4f478a08262
#: ebcbf54330ab47abb34d392667e229a7
msgid "Profile"
msgstr ""
#: ../features.rst:33
#: 7f9db47436344fe78b21670afaf77a83
msgid "Canaille provides an interface to manage user profiles."
msgstr ""
#: ../features.rst:35
#: 1341d4b0d2e0465cb8e2d0240a5b0f5e
msgid "The exact list of displayed fields, and whether they are :attr:`writable <canaille.core.configuration.ACLSettings.WRITE>` or :attr:`read-only <canaille.core.configuration.ACLSettings.READ>` depends on the user :class:`Access Control List settings (ACL) <canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../features.rst:37
#: 373496bfb0b64f4d89f22ccb1941f998
msgid "Depending on their ACL :class:`permissions <canaille.core.configuration.Permission>`, users can either be allowed to edit their own profile, edit any user profile, or do nothing at all."
msgstr ""
#: ../features.rst:42
#: afa6f6a849a142eca8e02e231505a43a
msgid "Email confirmation"
msgstr ""
#: ../features.rst:44
#: ba3009e49eb64aa483d430202bad3789
msgid "If the :attr:`email confirmation feature <canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION>` is enabled, any modification or addition of a profile email will send a confirmation mail to the new address. The mail will contain a link that users will need to click on to confirm their email address."
msgstr ""
#: ../features.rst:46
#: d58ee1760b684818925e094714dc23cc
msgid "Users with :attr:`user management permission <canaille.core.configuration.Permission.MANAGE_USERS>` can set user emails without confirmation though."
msgstr ""
#: ../features.rst:51
#: c2709b4b2fd24ca1bdf7e7ec2955beb1
msgid "Group management"
msgstr ""
#: ../features.rst:53
#: ../features.rst:140
#: 6c2de058bb824823910158983258f354
#: dccd011cfef14d3eb8980324288a4f62
msgid "Group edition"
msgstr ""
#: ../features.rst:58
#: a44da450bd454e9a99d52eab2a2561c8
msgid "In a similar fashion than :ref:`profile management <feature_profile_management>` Canaille provides an interface to manage user groups."
msgstr ""
#: ../features.rst:60
#: 84ff6fdd31e24c28ba5550a469342c5d
msgid "The group management is quite simple at the moment and consists in a group name and description, and the list of its members. Group membership can be use as :attr:`ACL Filter <canaille.core.configuration.ACLSettings.FILTER>` to define user permissions."
msgstr ""
#: ../features.rst:63
#: ../features.rst:83
#: ../features.rst:149
#: d95e01dbde7c46d597a37d02a4d8b949
#: b14ee30b70144c37981fae3cfd113080
#: 1260c7fd68074c2ebb723a49254df6d0
msgid "Todo"
msgstr ""
#: ../features.rst:64
#: 837aee8e92cf42c08e9f351b89e9995b
msgid "At the moment adding an user to a group can only be achieved by the user settings page, but we are :issue:`working to improve this <192>`."
msgstr ""
#: ../features.rst:66
#: f55808a8891c42e3ba8b16c77b785abf
msgid "Group management can be enable with a :attr:`dedicated user permission <canaille.core.configuration.Permission.MANAGE_GROUPS>`."
msgstr ""
#: ../features.rst:69
#: 16bab4e755fc47c28190b148b60fbd2e
msgid "Due to limitations in the :ref:`LDAP backend <tutorial/databases:LDAP>`, groups must have at least one member. Thus it is not possible to remove the last user of a group without removing the group."
msgstr ""
#: ../features.rst:75
#: fe65b8aafe6b49d0b7ac7564746c8b3a
msgid "User authentication"
msgstr ""
#: ../features.rst:77
#: c9f38668647c46c1a6eddbffc8bf55df
msgid "Unless their account is :ref:`locked <feature_account_locking>`, users can authenticate with a login and a password."
msgstr ""
#: ../features.rst:81
#: 68e57e4ac74a455c96f886ceee02b79e
msgid "For security reasons, it won't be told to users if they try to sign in with an unexisting logging, unless explicitly :attr:`set in the configuration <canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS>`."
msgstr ""
#: ../features.rst:83
#: 5ac48ef797dd43c28e2e49f8eb23b5b2
msgid ":ref:`LDAP backend <tutorial/databases:LDAP>` users can define which :class:`user field <canaille.core.models.User>` should be used as the login (such as :attr:`~canaille.core.models.User.user_name` or :attr:`~canaille.core.models.User.emails`) using a :attr:`configuration parameter <canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER>`, but other backends can only login using :attr:`~canaille.core.models.User.user_name`. We are :issue:`working to improve this <196>`."
msgstr ""
#: ../features.rst:88
#: 87ee6d88dc484fa7b2622e3ebe1445f5
msgid "User registration"
msgstr ""
#: ../features.rst:90
#: 2cd96a46a4df479499728c1bfdd2aba9
msgid "Users can create accounts on Canaille if the feature :attr:`registration feature <canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION>` is enabled. They will be able to fill a registration form with the fields detailed in the default :class:`ACL settings <canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../features.rst:92
#: 457cfe757e81479bab21c3fa83e24be3
msgid "If :attr:`email confirmation <canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION>` is also enabled, users will be sent a confirmation link to their email address, on which they will need to click in order to finalize their registration."
msgstr ""
#: ../features.rst:97
#: ../features.rst:99
#: 745d2713bf794b819c4265b90f54a7fb
#: 3664d4ee087b416692a40457afedb6d7
msgid "User invitation"
msgstr ""
#: ../features.rst:104
#: a1c0482d19ea428e9ace61f8a234f084
msgid "If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is configured, users with :attr:`user management permission <canaille.core.configuration.Permission.MANAGE_USERS>` can create an invitation link for one user."
msgstr ""
#: ../features.rst:106
#: 7ed7614611b24977b4ae04a799244bf6
msgid "The link goes to a registration form, even if regular :ref:`user registration <feature_user_registration>` is disabled."
msgstr ""
#: ../features.rst:108
#: 976b62801cd549748f032bec04f9e261
msgid "It can be automatically sent by email to the new user."
msgstr ""
#: ../features.rst:113
#: f7ea42c01191494185d9f191469aeef9
msgid "Account locking"
msgstr ""
#: ../features.rst:115
#: e2dcd91ac31548fc988012f47e58a595
msgid "If Canaille is plugged to a :ref:`backend <features:Backends>` that supports it, user accounts can be locked by users with :attr:`user management permission <canaille.core.configuration.Permission.MANAGE_USERS>`. The lock date can be set instantly or at a given date in the future."
msgstr ""
#: ../features.rst:118
#: cf42d819d5a547b88f371785e5165f90
msgid "At the moment a user account is locked:"
msgstr ""
#: ../features.rst:120
#: 9b640a69ba9a4c51b60e0f8c286697a4
msgid "their open sessions will be closed;"
msgstr ""
#: ../features.rst:121
#: 3189f0a7d03740a4b4f85cedd2347950
msgid "they won't be able to sign in again;"
msgstr ""
#: ../features.rst:122
#: 7da9546466a94f8a8978716a6d4d208f
msgid "no new OIDC token will be issued;"
msgstr ""
#: ../features.rst:124
#: 024942a1dbc74ab89c267e6caa47ed77
msgid "User accounts must be manually unlocked by an administrator for the users to regain access to those actions."
msgstr ""
#: ../features.rst:129
#: 4a9634c3b1f14180a3c3d7c9b40cb66d
msgid "Account deletion"
msgstr ""
#: ../features.rst:131
#: 8a6acf700c194e67b754ac900d4426b0
msgid "Users with the :attr:`account deletion permission <canaille.core.configuration.Permission.DELETE_ACCOUNT>` are allowed to delete their own account."
msgstr ""
#: ../features.rst:133
#: 8c30253b0d7d4fefa55c6f23ba5dd958
msgid "Users that also have the :attr:`user management permission <canaille.core.configuration.Permission.MANAGE_USERS>` are also allowed to delete other users accounts."
msgstr ""
#: ../features.rst:138
#: 2157cc891ec24dfab2496f60249f124c
msgid "Password recovery"
msgstr ""
#: ../features.rst:145
#: 7b467943f0d74722bcf4dcfc1c2f2631
msgid "If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is configured and the :attr:`password recovery feature <canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_RECOVERY>` is enabled, then users can ask for a password reset email if they cannot remember their password."
msgstr ""
#: ../features.rst:147
#: 5c12793163f64d8fafc24e284e955865
msgid "The email will be sent to the email addresses filled in their profile, and will contain a link that will allow them to choose a new password. ."
msgstr ""
#: ../features.rst:151
#: 467318f9369c4ecabf00c16ee551a46f
msgid "Check that password recovery is disabled on locked accounts."
msgstr ""
#: ../features.rst:156
#: 1880cb31e0894b5cb0ac81c5a8a60ffd
msgid "Password reset"
msgstr ""
#: ../features.rst:158
#: 6f845e2ecc974c26b00126f015f86825
msgid "If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is configured, :attr:`user management permission <canaille.core.configuration.Permission.MANAGE_USERS>` can send password reset mails to users. The mails contains a link that allow users to choose a new password without having to retrieve the old one."
msgstr ""
#: ../features.rst:164
#: fb069d5c78f54166b31db5c9adb512dc
msgid "Password initialization"
msgstr ""
#: ../features.rst:166
#: ea105163dbbd485ea023aae10de2a712
msgid "User :attr:`passwords <canaille.core.models.User.password>` are optional. If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is configured, when users with no password attempt to sign in, they are invited to click a button that will send them a password initialization mail. The mail contains a link that leads to a form that allows users to choose a password."
msgstr ""
#: ../features.rst:173
#: f257819892334c3f81eb1f6ae42f8e60
msgid "Password compromission check"
msgstr ""
#: ../features.rst:175
#: 61d91ab9494a4c0d914e459319a0282c
msgid "If :attr:`password compromission check feature <canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_COMPROMISSION_CHECK>` is enabled, Canaille will check for password compromise on HIBP (https://haveibeenpwned.com/) every time a new password is register. You will need to set an :attr:`admin email <canaille.core.configuration.CoreSettings.ADMIN_EMAIL>`."
msgstr ""
#: ../features.rst:180
#: 29552f6a6ac647cda927893982632593
msgid "Internationalization"
msgstr ""
#: ../features.rst:182
#: 87f1270c1d654364a64698e9ba85f9c8
msgid "Translation state"
msgstr ""
#: ../features.rst:187
#: db80a74dd2374b5ab82acd1395466acb
msgid "Canaile will display in your :attr:`preferred language <canaille.core.models.User.preferred_language>` if available, or your browser language if available (and if it is not you can :ref:`help us with the translation <development/contributing:Code translation>`). If you prefer, you can also :attr:`force a language <canaille.core.configuration.CoreSettings.FAVICON>` for every users."
msgstr ""
#: ../features.rst:193
#: 272a97d52dd94e849318a88f5d291bd3
msgid "Lightweight"
msgstr ""
#: ../features.rst:195
#: cb18163171c94d75a86e3aa050270386
msgid "The web interface is lightweight, so everything should load quickly. There is a few Javascript here and there to smooth the experience, but no Javascript at all is needed to use Canaille."
msgstr ""
#: ../features.rst:199
#: 3e23d82d021240908b93d8411ed1ece3
msgid "Customizable"
msgstr ""
#: ../features.rst:201
#: fd82c1315d864619b45e2be1c39e4ce0
msgid "The default theme should be good enough for most usages. It has a dark theme, display well on mobile, and let you choose a :attr:`logo <canaille.core.configuration.CoreSettings.LOGO>` and a :attr:`favicon <canaille.core.configuration.CoreSettings.FAVICON>`."
msgstr ""
#: ../features.rst:204
#: 7e18858db0a1427985a8846bd9b6c692
msgid "If you need more you can also use a :attr:`custom theme <canaille.core.configuration.CoreSettings.THEME>`."
msgstr ""
#: ../features.rst:209
#: 50efea7d1e594de1bc1d59fadc67fc3a
msgid "OpenID Connect"
msgstr ""
#: ../features.rst:211
#: 34e2ceb8a70d42de83f1a3719ff10df5
msgid "Canaille implements a :ref:`subset<development/specifications:State of the specs in Canaille>` of the OAuth2/OpenID Connect specifications . This allows to provide :abbr:`SSO (Single Sign-On)` and :abbr:`SLO (Single Log-On)` to applications plugged to Canaille."
msgstr ""
#: ../features.rst:215
#: 91e1188aadaf45159560f74f9da4654b
msgid "Consent management"
msgstr ""
#: ../features.rst:223
#: ce4ab8d14f3d44328c3d6738ef4b72b4
msgid "Users can give their consent to application requesting access to their personal information, and then revoke those consent at their will."
msgstr ""
#: ../features.rst:227
#: b743768476604fe29330ceedb3aa147a
msgid "Application management"
msgstr ""
#: ../features.rst:229
#: 3fcb303af84041ab9d762a6a14590fac
msgid "Users with the right :attr:`permission <canaille.core.configuration.Permission.MANAGE_OIDC>` can manager OIDC clients through the web interface."
msgstr ""
#: ../features.rst:231
#: c5352dd05bb5432292db0ce2d16855dd
msgid "In some cases, it might be useful to avoid the consent page for some trusted applications, so clients can be pre-consented."
msgstr ""
#: ../features.rst:234
#: 1fa4e2a5218a42cfbe8d497af109ddd3
msgid "Discovery"
msgstr ""
#: ../features.rst:236
#: 319e92a6c8854c8681f7a0e53828bff5
msgid "Canaille implements the :doc:`Discovery specifications <development/specifications>` so most of the applications plugged to Canaille can auto-configure themselves."
msgstr ""
#: ../features.rst:239
#: 4dac1f51d4404a0ebf8ad2d4dfd0f664
msgid "Dynamic Client Registration"
msgstr ""
#: ../features.rst:241
#: 2e3491e375a4467f871e0de3120711ce
msgid "Canaille implements the :doc:`Dynamic Client Registration specifications <development/specifications>`, so when the :attr:`feature is enabled <canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN>`, clients can register themselves on Canaille without an administrator intervention."
msgstr ""
#: ../features.rst:246
#: 588c18f0f44d4eb5a4c999c5a3db635e
msgid "Command Line Interface"
msgstr ""
#: ../features.rst:248
#: f0fd8f52fb4f477680527412562a2ba6
msgid "Canaille comes with a :abbr:`CLI (Command Line Interface)` to help administrators in hosting and management."
msgstr ""
#: ../features.rst:250
#: 73ac4592e1fe4a51803b75c969304bc9
msgid "There are tools to :ref:`check your configuration <cli_check>` or to :ref:`install missing parts <cli_install>`. You can use the CLI to :ref:`create <cli_create>`, :ref:`read <cli_get>`, :ref:`update <cli_set>` and :ref:`delete <cli_delete>` models such as :class:`users <canaille.core.models.User>`, :class:`groups <canaille.core.models.Group>` or :class:`OIDC clients <canaille.oidc.basemodels.Client>`."
msgstr ""
#: ../features.rst:253
#: 3091d85977eb49449c76e0ae370745e4
msgid "There are also tools to :ref:`fill your database <cli_populate>` with random objects, for tests purpose for instance."
msgstr ""
#: ../features.rst:258
#: 926c15a2beb84a3b9e2030c4bc1a4908
msgid "Backends"
msgstr ""
#: ../features.rst:260
#: 1d759a49a5644275acce4f8db74f9a5e
msgid "Canaille can handle data from the most :ref:`common SQL databases <tutorial/databases:SQL>` such as PostgreSQL, MariaDB or SQLite, as well as :ref:`OpenLDAP <tutorial/databases:LDAP>`. It also comes with a no-dependency :ref:`in-memory database <tutorial/databases:Memory>` that can be used in unit tests suites."
msgstr ""
#: ../features.rst:264
#: 85b359d50f3b45159f1d7176d7014e51
msgid "Miscellaneous"
msgstr ""
#: ../features.rst:269
#: 0d0372c98187494ba9babc558530836c
msgid "Logging"
msgstr ""
#: ../features.rst:271
#: 775c89c8b1c548bdaec973472e999fa4
msgid "Canaille writes :attr:`logs <canaille.core.configuration.CoreSettings.LOGGING>` for every important event happening, to help administrators understand what is going on and debug funky situations."
msgstr ""
#: ../features.rst:273
#: 450c5e7c7d7749e99d9fc3fe74e0ee6e
msgid "The following security events are logged with the tag [SECURITY] for easy retrieval :"
msgstr ""
#: ../features.rst:275
#: 1408c454db794023be5e18cde821cde2
msgid "Authentication attempt"
msgstr ""
#: ../features.rst:276
#: 2a1ab369f4a243e2b2e3463e3326c008
msgid "Password update"
msgstr ""
#: ../features.rst:277
#: b1875faad85842ac9fcc11d2c5c03f4a
msgid "Email update"
msgstr ""
#: ../features.rst:278
#: 0389b72f9c6a4854ab50ba113554be9b
msgid "Forgotten password mail sent to user"
msgstr ""
#: ../features.rst:279
#: 0c919d1f72b04296ac420b405b921b93
msgid "Token emission"
msgstr ""
#: ../features.rst:280
#: 164105d22820445186f8086c1e1ac7c1
msgid "Token refresh"
msgstr ""
#: ../features.rst:281
#: fc590a8611554c04948cc44bbf5b05d4
msgid "Token revokation"
msgstr ""
#: ../features.rst:282
#: f7aa2b3de26a4f63a4c35495a6ee4e6e
msgid "New consent given for client application"
msgstr ""
#: ../features.rst:283
#: 63403d81399c469792d50f1c9790d44e
msgid "Consent revokation"
msgstr ""
#: ../features.rst:288
#: 56e96a06cfbf456fb59d3556217b5e8e
msgid "A tool for your development and tests"
msgstr ""
#: ../features.rst:290
#: 0c7e31abb1c14302a691f26ef8cab38c
msgid "Thanks to its lightweight :ref:`in-memory database <tutorial/databases:Memory>` and its curated :ref:`dependency list <tutorial/install:Get the code>`, Canaille can be used in the unit test suite of your application, so you can check how it behaves against a real world OpenID Connect server. If you work with python you might want to check :doc:`pytest-iam:index`."
msgstr ""
#: ../features.rst:292
#: 963770fd6ca14be884153c0568d614d4
msgid "It can also being launched in your development environment, if you find that launching a Keycloak in a Docker container is too heavy for your little web application."
msgstr ""
#: ../features.rst:294
#: 9d9dafd256e94acaad9ea1108cb891a0
msgid "It also fits well in continuous integration scenarios. Thanks to its :ref:`CLI <feature_cli>`, you can prepare data in Canaille, let your application interact with it, and then check the side effects."
msgstr ""
#: ../features.rst:297
#: 067e9134dbcf4d698f5cc98da46f6b1c
msgid "Roadmap"
msgstr ""
#: ../features.rst:300
#: 765ec40933cd4b418974dd5660825afd
msgid "Bêta version"
msgstr ""
#: ../features.rst:302
#: 44f40979b69f4a0591f095ea5e9ffc60
msgid "To go out of the current Alpha version we want to achieve the following tasks:"
msgstr ""
#: ../features.rst:304
#: 306d82fcd6e34e7e903a3c33b18fa496
msgid ":issue:`Configuration validation using pydantic <138>`"
msgstr ""
#: ../features.rst:307
#: 348486c826e54c7394312f9b65c91ca7
msgid "Stable version"
msgstr ""
#: ../features.rst:309
#: dc50e5b244a54791b0ce5013500f2bdd
msgid "Before we push Canaille in stable version we want to achieve the following tasks:"
msgstr ""
#: ../features.rst:312
#: e88bf894b0e04926a03542e927a1b9ad
msgid "Security"
msgstr ""
#: ../features.rst:314
#: e28ca32444eb44ae9b0a6e59b5d0ac31
msgid ":issue:`Password hashing configuration <175>`"
msgstr ""
#: ../features.rst:315
#: 37dc1f0a3869424ab0d6da0c039f123f
msgid ":issue:`Authentication logging policy <177>`"
msgstr ""
#: ../features.rst:316
#: 28792af06fb34fd5ab534d2d065c2883
msgid ":issue:`Intruder lockout <173>`"
msgstr ""
#: ../features.rst:317
#: 2eb8507407104b29ae8bb00ca646b829
msgid ":issue:`Password expiry policy <176>`"
msgstr ""
#: ../features.rst:318
#: 8999fd2b2d08417aa28414f115d5fda5
msgid ":issue:`Multi-factor authentication: Email <47>`"
msgstr ""
#: ../features.rst:319
#: 76998f3ace9c4c588e795331365c99f2
msgid ":issue:`Multi-factor authentication: SMS <47>`"
msgstr ""
#: ../features.rst:320
#: 8a26920b728649d0a8b9ba9c8f98427f
msgid ":issue:`Multi-factor authentication: OTP <47>`"
msgstr ""
#: ../features.rst:323
#: 1f172cb3b12d4d9ebed5abf0099dcb34
msgid "Packaging"
msgstr ""
#: ../features.rst:325
#: 532f4871f18f4189bc19d70d6729aceb
msgid ":issue:`Nix package <190>`"
msgstr ""
#: ../features.rst:326
#: e8a280bfd47e47baace28606f80d51ba
msgid ":issue:`Docker / OCI package <59>`"
msgstr ""
#: ../features.rst:329
#: 16dd9a8f89b94812b315074f2122bd0d
msgid "And beyond"
msgstr ""
#: ../features.rst:331
#: a25457408aae440384cea5ac85dbf68f
msgid ":issue:`OpenID Connect certification <182>`"
msgstr ""
#: ../features.rst:332
#: c251e6812fbe41daa724a3e41de2795f
msgid ":issue:`SCIM support <116>`"
msgstr ""

97
doc/gettext/index.pot Normal file
View file

@ -0,0 +1,97 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../index.rst:15
#: 73ace75ab0614252bcdf4b38427a6bbe
msgid "Lightweight Identity and Authorization Management"
msgstr ""
#: ../index.rst:19
#: 51406a546f1944abb1f60d21591b8da6
msgid "**Canaille** is a French word meaning *rascal*. It is roughly pronounced **Can I?**, as in *Can I access your data?* Canaille is a lightweight identity and authorization management software. It aims to be very light, simple to install and simple to maintain. Its main features are :"
msgstr ""
#: ../index.rst:27
#: 8ce19e6702f74a9d846822da4e95cd05
msgid "Profile management"
msgstr ""
#: ../index.rst:31
#: 69855370f33846c6beb1d9f8141c9da5
msgid "User profile and groups management, Basic permissions"
msgstr ""
#: ../index.rst:34
#: 76c5bf395a1c4e5d84450804af9408fc
msgid "User authentication"
msgstr ""
#: ../index.rst:38
#: 8482faeb12174d9186e34291c5d03ac9
msgid "Authentication, registration, email confirmation, \"I forgot my password\" emails"
msgstr ""
#: ../index.rst:40
#: 0e50a42ab7744344a33d3dcfac6d8e09
msgid "SSO"
msgstr ""
#: ../index.rst:44
#: 8de8aed898404726ad012faf46986847
msgid "OpenID Connect identity provider"
msgstr ""
#: ../index.rst:46
#: af19bc8e23374e43b47b764ead0e7718
msgid "Multi-database support"
msgstr ""
#: ../index.rst:50
#: 71baa0d1d0fc4c9d9d748133495b0141
msgid "PostgreSQL, Mariadb and OpenLDAP first-class citizenship"
msgstr ""
#: ../index.rst:52
#: 8e0020b8e0324b6fa5728ceac3acad78
msgid "Customization"
msgstr ""
#: ../index.rst:56
#: f324ccfc4a7e4e4dbe6cd7d2fa2dca24
msgid "Put Canaille at yours colors by choosing a logo or use a custom theme!"
msgstr ""
#: ../index.rst:58
#: 9a6d1f33fa9641d7b71944454c84d819
msgid "Developers friendliness"
msgstr ""
#: ../index.rst:62
#: b474739321e84bc684d5fe1cd536d5b8
msgid "Canaille can easily fit in your unit tests suite or in your Continuous Integration."
msgstr ""
#: ../index.rst:66
#: be4a6a405d2b40dc86b55103e99277ba
msgid ":doc:`Full feature list <features>`"
msgstr ""
#: ../index.rst:70
#: 2f91d5ac3db248bd9905419c6ebfee68
msgid "Documentation"
msgstr ""

52
doc/gettext/locales/readme.pot Normal file
View file

@ -0,0 +1,52 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../locales/readme.rst:1
#: 81c6815493714f6a873d6e86dc1a9c63
msgid "Documentation translation Translations are done with `Weblate <https://hosted.weblate.org/projects/canaille/canaille>`_."
msgstr ""
#: ../locales/readme.rst:4
#: 87be09ce203040c2ade86291e682ff90
msgid "The following commands are there as documentation, only the message extraction and the language addition is needed for contributors."
msgstr ""
#: ../locales/readme.rst:7
#: 3bdfd8ba97e8414aa5c6cc81b43178a5
msgid "Message extraction"
msgstr ""
#: ../locales/readme.rst:9
#: 3b8b9e1408da403e9cdd7a3fb0cf90d8
msgid "After you have edited translatable strings, you should extract the messages with:"
msgstr ""
#: ../locales/readme.rst:16
#: b581058879de400ca67dde307da1912a
msgid "Language addition"
msgstr ""
#: ../locales/readme.rst:18
#: dab59f2e8ae44091a03cd2c554501487
msgid "You can add a new language manually with the following command, however this should not be needed as Weblate takes car of this:"
msgstr ""
#: ../locales/readme.rst:25
#: 348dad0adb834ca0a1cf2e7ffea89f8a
msgid "Build the documentation in another language"
msgstr ""

366
doc/gettext/references/commands.pot Normal file
View file

@ -0,0 +1,366 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../references/commands.rst:2
#: 578e5808cb99489e9808bf26f84831ea
msgid "Command Line Interface"
msgstr ""
#: ../references/commands.rst:4
#: 5a95d4c76b7b4692af568a958071ab9d
msgid "Canaille provide several commands to help administrator manage their data."
msgstr ""
#: ../references/commands.rst:6
#: 8f0f875b47a54e6e8911c751fb6872e8
msgid "Generally, some configuration has to be loaded by `Canaille`. This can be achieved by :ref:`configuration loading method<references/configuration:Load the configuration>` available, but most of the time a ``CONFIG`` environment variable is used. For the sake of readability, it is omitted in the following examples."
msgstr ""
#: ../../canaille check:1
#: dd0149729dc94239aed0af8d269dd418
msgid "Test the configuration file."
msgstr ""
#: ../../canaille check:1
#: 64fdd2232e6d405c9adbe11ddda10166
msgid "Attempt to reach the database and the SMTP server with the provided credentials."
msgstr ""
#: ../../canaille clean:1
#: 403b7781c30c4da58642667b26f9da55
msgid "Remove expired tokens and authorization codes."
msgstr ""
#: ../../canaille install:1
#: 9a6a207fe3ed4c7caffaaa4e5842fe02
msgid "Installs canaille elements from the configuration."
msgstr ""
#: ../../canaille install:1
#: 28c0bafefd7a42b7b247fa53ac641d4a
msgid "For instance, depending on the configuration, this can generate OIDC keys or install LDAP schemas."
msgstr ""
#: ../../canaille populate:1
#: 17d8b25dd51b42d5b32e343d1b4b44a9
msgid "Populate the database with generated random data."
msgstr ""
#: ../references/commands.rst:0
#: df7a3b4065244eb985f167583bf79d2c
#: 10cb918ea05043929ba9cd9564ed5f3d
#: aa7d87d3e6f647fa890560fd9096598b
#: 9a2406777231461887cb7e76f3c0d470
#: 84db04b30f9147e19f984bdaa49fe0fd
#: f28f03fb7525446da298d805a01522d1
#: 8506da751b21413fadc94d7bae19e387
#: 1914dd13a47d4a778fb3f7c6d27e9aac
#: d8c57a57c6c34d32a014fa466d8ee489
#: 3059756528734dffb3d53c627edb9437
#: cab60c25e07542a6908f059f31c77482
#: ff6f04fe5ee944febc001fbffb1e5a30
#: f8fe3d8b27884fe0a5b8c68cb3195b97
#: 9b1086b74f9f4f15aae8f7174cc82fc4
#: 00701bc7173f421aafe574606d46691e
#: 5e7e4cdd8d664830a6d158e240b545c2
#: 08bf63ad7771452cb070d2c2c7b8b568
#: d71b61d168d443ac94f30e1aaf07e55f
#: 93f79c7403074b0aac095f59df49b451
#: bd21ceb952184931b1e198854fe9b031
msgid "Options"
msgstr ""
#: ../../canaille populate:1
#: a5bbf04166c049b3b9c315b02e311d6c
msgid "Number of items to create"
msgstr ""
#: ../../canaille populate groups:1
#: fa0ab4817a63487b929828c2e97373c1
msgid "Populate the database with generated random groups."
msgstr ""
#: ../../canaille populate groups:1
#: 5e6f489028a4446a8b507e422646fee8
msgid "The maximum number of users that will randomly be affected in the group"
msgstr ""
#: ../../canaille populate users:1
#: b0ccb196ccc549c7a57e03466d184b1b
msgid "Populate the database with generated random users."
msgstr ""
#: ../../canaille get:1
#: 37a97a0a6d98414e930446cfce3fefd0
msgid "Read information about models."
msgstr ""
#: ../../canaille get:1
#: 2fdd2c44ff8342c5b9dc3a122fc56d32
msgid "Options can be used to filter models::"
msgstr ""
#: ../../canaille get:1
#: 3466ddbfd1264c01a53a83d711a66146
msgid "Displays the matching models in JSON format in the standard output."
msgstr ""
#: ../../canaille get authorizationcode:1
#: 9475ba0522be4715ba147caf0e0debd8
msgid "Search for authorizationcodes and display the matching models as JSON."
msgstr ""
#: ../../canaille get client:1
#: 31b8bbe27ff64f0da9e1684d3f048472
msgid "Search for clients and display the matching models as JSON."
msgstr ""
#: ../../canaille get consent:1
#: 0be75cef5f6448ee81cfa44b378517ce
msgid "Search for consents and display the matching models as JSON."
msgstr ""
#: ../../canaille get group:1
#: 9544c3af476441398e9a7dcbfd0d9c7a
msgid "Search for groups and display the matching models as JSON."
msgstr ""
#: ../../canaille get token:1
#: 030ae9dcd3a143e9b1b19397c35d8b2f
msgid "Search for tokens and display the matching models as JSON."
msgstr ""
#: ../../canaille get user:1
#: 44dbe3502761468e8d2e29fa7f10f0d6
msgid "Search for users and display the matching models as JSON."
msgstr ""
#: ../../canaille set:1
#: 0af6277cc0874cefbd5fb0182d80d396
msgid "Update models."
msgstr ""
#: ../../canaille set:1
#: 72e13923d1454286b7367854fbec4e35
msgid "The command takes an model ID and edit one or several attributes::"
msgstr ""
#: ../../canaille set:1
#: d4f17ca6c53b40afb034134ffc118361
msgid "Displays the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille set authorizationcode:1
#: 4a23a7b2d8be45658f2eed6017194fba
msgid "Update a authorizationcode and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete authorizationcode:1
#: ../../canaille set authorizationcode:1
#: 1bbb5cada3624f8aa2922939002323ae
#: 5609a4557fff4e54a9fccabfddf5826e
msgid "IDENTIFIER should be a authorizationcode id or authorization_code_id"
msgstr ""
#: ../references/commands.rst:0
#: de8b06da947f4e23ba6727914cad6bb1
#: fd47034cde92425f9f8bdb2393bf5460
#: f8406bb87a054f629fd7cf5b07e9c3b6
#: fdcf900e6c864eb4820f880f881a8b4f
#: f524d61a7560403fa67d84b521b5420c
#: 18b42ed5ae9b4a1b898866ba3cd7c098
#: 7cbe82d6bd5b46919644b6d71984dc97
#: 60e9504afe9e4c78b4181fd5481122c6
#: 0dceb5df88e34fbc8332c8d8f641ab21
#: d8105a54c6bf4353b614c9fd73859d45
#: b6820eac28db47ab99be5b1ba431fa33
#: d5fbab6b8b134648bcfa3ef1ac71ecc5
msgid "Arguments"
msgstr ""
#: ../../canaille delete authorizationcode:1
#: ../../canaille delete client:1
#: ../../canaille delete consent:1
#: ../../canaille delete group:1
#: ../../canaille delete token:1
#: ../../canaille delete user:1
#: ../../canaille set authorizationcode:1
#: ../../canaille set client:1
#: ../../canaille set consent:1
#: ../../canaille set group:1
#: ../../canaille set token:1
#: ../../canaille set user:1
#: 6fa9d671478f4b0cb6a4335319aff6bc
#: a4d8ffc45b5d455baa74d311e77cb0cc
#: 06fdebc0ceaf42158ac034ba2f1fd5d5
#: 821e6c57ca8a4c4b9543e569188ea90b
#: ab251b3b601749e5ba8b449fa1f14e63
#: e55c02eadb204bb9a9c03a8a1e37c0e0
#: f3944ed8e87b432ca151e011c9eb2220
#: 8aa832eba5aa4098ade467d1ffd2ea6d
#: 91880f396bf64569ac8c1f4f3f2aca0f
#: a2797259ebe548ee9f8d4528edfcef44
#: 9cdac19055ca44318c473fa3bc620a43
#: 217ddbe62c8c48a49ec792c9581b548d
msgid "Required argument"
msgstr ""
#: ../../canaille set client:1
#: c6fb20a6a9b04bb9ae7fa6930bd0e428
msgid "Update a client and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete client:1
#: ../../canaille set client:1
#: a80bc63347194218987d36e8f7d79e40
#: d219305e46a444f0b731ad5b73e79f2d
msgid "IDENTIFIER should be a client id or client_id"
msgstr ""
#: ../../canaille set consent:1
#: a651d44dec284d32b9e11bca8c0082be
msgid "Update a consent and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete consent:1
#: ../../canaille set consent:1
#: 69e2a6ee623f45c1a39b0fbdf948e15f
#: 6ba4152a82744f9b808e9947a943103f
msgid "IDENTIFIER should be a consent id or consent_id"
msgstr ""
#: ../../canaille set group:1
#: 7c9d22883354416a85d50f7410327d4f
msgid "Update a group and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete group:1
#: ../../canaille set group:1
#: 9003e3f7ae3249ecb5084845becb33f2
#: 31af71d5aaf74cb7b660614b3e1682ef
msgid "IDENTIFIER should be a group id or display_name"
msgstr ""
#: ../../canaille set token:1
#: deae6ee4325d4a99809f77fc2436562a
msgid "Update a token and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete token:1
#: ../../canaille set token:1
#: 990488adf77741cbadcbea5c85e6741c
#: 42483c1821a14a178b105f181946e188
msgid "IDENTIFIER should be a token id or token_id"
msgstr ""
#: ../../canaille set user:1
#: 5a2cf62efa9747429cfa9bf1cdf25b58
msgid "Update a user and display the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete user:1
#: ../../canaille set user:1
#: c8550e9dc18646d294c8d797cb5d166d
#: 9d649644572049378cd901b26b4b42f3
msgid "IDENTIFIER should be a user id or user_name"
msgstr ""
#: ../../canaille create:1
#: 876b9c46071040a083e7720fd1030ab9
msgid "Create models."
msgstr ""
#: ../../canaille create:1
#: 3b4c98b2ff45430f916dcaf1bd54da4c
msgid "The model attributes can be passed as command options::"
msgstr ""
#: ../../canaille create:1
#: 2ff64e0da89645b1820fba732d6098c9
msgid "Displays the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create authorizationcode:1
#: a4a59533bbb141cb9c8cebd78f71ab9d
msgid "Create a new authorizationcode and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create client:1
#: c2df315512ed4bc994164ce5283e17a0
msgid "Create a new client and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create consent:1
#: 4d1193abf1814ba48fdb0c6ab1a7ed32
msgid "Create a new consent and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create group:1
#: 2e32891340704090850f8f169b142aae
msgid "Create a new group and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create token:1
#: 3a965857a34e4c89b46f554d42e0ce5b
msgid "Create a new token and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille create user:1
#: 9e30ed9353764ad986f7009e352a4e23
msgid "Create a new user and display the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille delete:1
#: 73aa4dc76f2d4b558bef94fb74c89926
msgid "Delete models."
msgstr ""
#: ../../canaille delete:1
#: 4e8dfe57593e4037a3af361c27a3fe2c
msgid "The command takes a model ID and deletes it::"
msgstr ""
#: ../../canaille delete authorizationcode:1
#: e252f5665c1d4beeadbc8e02a5616c52
msgid "Delete a authorizationcode."
msgstr ""
#: ../../canaille delete client:1
#: 9289cd0e6ea7448ea6d79efd656f4c93
msgid "Delete a client."
msgstr ""
#: ../../canaille delete consent:1
#: d2daf152e4a24521bbbd75a6cc2377ca
msgid "Delete a consent."
msgstr ""
#: ../../canaille delete group:1
#: 2e8bfb99cf0c48beb2da339112cef4c4
msgid "Delete a group."
msgstr ""
#: ../../canaille delete token:1
#: 0752e5025f47410bbd89191f2acb59c8
msgid "Delete a token."
msgstr ""
#: ../../canaille delete user:1
#: 7f1e103d1a9947949c4e310bbec9d067
msgid "Delete a user."
msgstr ""

743
doc/gettext/references/configuration.pot Normal file
View file

@ -0,0 +1,743 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../references/configuration.rst:2
#: 07e02385c0d6432ab9c14b6e4f337af8
msgid "Configuration"
msgstr ""
#: ../references/configuration.rst:5
#: a1053f4eb992434b84a915715996fa05
msgid "Load the configuration"
msgstr ""
#: ../references/configuration.rst:7
#: afb6641a9aa244af864832fe5e28377a
msgid "Canaille can be configured either by a environment variables, environment file, or by a configuration file."
msgstr ""
#: ../references/configuration.rst:10
#: 64f630215963443eb439fc9555170837
msgid "Configuration file"
msgstr ""
#: ../references/configuration.rst:12
#: 4dec0a2c267d431d983bff67a10565eb
msgid "The configuration can be written in `toml` configuration file which path is passed in the :envvar:`CONFIG` environment variable."
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:11
#: ../references/configuration.rst:14
#: ../references/configuration.rst:85
#: a2f425a7d72f45cfbd6a46b4dd8a9f9f
#: 1af4b0570ada4659b6cef8e0fde5913b
#: 262461d38ee1406cabdcb7c057b886ab
msgid "config.toml"
msgstr ""
#: ../references/configuration.rst:26
#: d3f0be05e30a46249a2a9b6e35010ab7
msgid "You can have a look at the :ref:`example file <references/configuration:Example file>` for inspiration."
msgstr ""
#: ../references/configuration.rst:29
#: 167c6ee110d3498dbcff07e2fb461fa1
msgid "Environment variables"
msgstr ""
#: ../references/configuration.rst:31
#: 96c443e1ad6d4387afb03fbc61cd40cf
msgid "In addition, parameters that have not been set in the configuration file can be read from environment variables. The way environment variables are parsed can be read from the `pydantic-settings documentation <https://docs.pydantic.dev/latest/concepts/pydantic_settings/#parsing-environment-variable-values>`_."
msgstr ""
#: ../references/configuration.rst:36
#: 22ef6ff87d78491e815bb3549e2cac1b
msgid "For environment vars, the separator between sections and variables is a double underscore: ``__``. For instance, the ``NAME`` var in the ``CANAILLE`` section shown above is ``CANAILLE__NAME``."
msgstr ""
#: ../references/configuration.rst:40
#: 01f42d420c644add8307d0eef66d0930
msgid "Environment file"
msgstr ""
#: ../references/configuration.rst:42
#: 3b0b1ca1d349437c8652af2378bf18d4
msgid "Any environment variable can also be written in a ``.env``, and will be read if present."
msgstr ""
#: ../references/configuration.rst:44
#: 8e6ba368bac9448a9a26b32cbc2b98d3
msgid ".env"
msgstr ""
#: ../references/configuration.rst:62
#: e8919384d11b4689b474121852d7691f
msgid "Parameters"
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:1
#: 486ab8655b5948d38adcda288a2ccc35
msgid "The top-level namespace contains holds the configuration settings unrelated to Canaille."
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:4
#: c2e98629ddfc4697971e8726fced5051
msgid "The configuration paramateres from the following libraries can be used:"
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:6
#: 926489c26ef44fc1a362cf34b981ff23
msgid ":doc:`Flask <flask:config>`"
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:7
#: 3d608d07342849cd91a9314c0e91ee06
msgid ":doc:`Flask-WTF <flask-wtf:config>`"
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:8
#: e3a176d61a77455898beeb2176f6e4bf
msgid ":doc:`Flask-Babel <flask-babel:index>`"
msgstr ""
#: ../../canaille/app/configuration.py:docstring of canaille.app.configuration.RootSettings:9
#: 2722a53bf45f40e68c55ce195bd2a92c
msgid ":doc:`Authlib <authlib:flask/2/authorization-server>`"
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.DEBUG:1
#: 71da9dadc99c484ca0930e47d422852f
msgid "The Flask :external:py:data:`DEBUG` configuration setting."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.DEBUG:3
#: 8e020bed08534b899eeb1976a43677d8
msgid "This enables debug options."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.DEBUG:7
#: b1e842b72e524591b8d841a758be14a3
msgid "This is useful for development but should be absolutely avoided in production environments."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.PREFERRED_URL_SCHEME:1
#: a7a884840e804de2934fc1794b5f9916
msgid "The Flask :external:py:data:`PREFERRED_URL_SCHEME` configuration setting."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.PREFERRED_URL_SCHEME:4
#: a75e96a48e0e41fb975f903ea3dbaf93
msgid "This sets the url scheme by which canaille will be served."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.SECRET_KEY:1
#: a51da4634d924fcc8edb45332152d161
msgid "The Flask :external:py:data:`SECRET_KEY` configuration setting."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.SECRET_KEY:3
#: c3b465a2b6d440298f71736437ad5ef5
msgid "You MUST change this."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.SERVER_NAME:1
#: d5faf5b872ed40a794d5046c51fcfbd0
msgid "The Flask :external:py:data:`SERVER_NAME` configuration setting."
msgstr ""
#: ../../docstring of canaille.app.configuration.RootSettings.SERVER_NAME:3
#: ebffd9c94a524950abb6b711884ed64d
msgid "This sets domain name on which canaille will be served."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.CoreSettings:1
#: cb519bb5488c429888c104503c3ad3e4
msgid "The settings from the ``CANAILLE`` namespace."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.CoreSettings:3
#: 2739711892104e328cad1e98ae48d4b8
msgid "Those are all the configuration parameters that controls the behavior of Canaille."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ACL:1
#: 29bfd1d0d0284b4287b9e7b5f9c36b74
msgid "Mapping of permission groups. See :class:`ACLSettings` for more details."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ACL:3
#: 578bb4e7e6674f7e88646e839112a01e
msgid "The ACL name can be freely chosen. For example::"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ADMIN_EMAIL:1
#: 8ee064e1a1194fa8982d08ef227da8dc
msgid "Administration email contact."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ADMIN_EMAIL:3
#: 9820352fe91c4aae840232df61d25857
msgid "In certain special cases (example : questioning about password corruption), it is necessary to provide an administration contact email."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION:1
#: 2fceb1c9ec9842158c9b9b7f1fa09168
msgid "If :py:data:`True`, users will need to click on a confirmation link sent by email when they want to add a new email."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION:4
#: 4b471ce1ba674ea8b77f29cdf45f4b2c
msgid "By default, this is true if ``SMTP`` is configured, else this is false. If explicitly set to true and ``SMTP`` is disabled, the email field will be read-only."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_COMPROMISSION_CHECK:1
#: bc1661ce2f9e4fe2b493c625841fece8
msgid "If :py:data:`True`, Canaille will check if passwords appears in compromission databases such as `HIBP <https://haveibeenpwned.com>`_ when users choose a new one."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_RECOVERY:1
#: e5b04d013a764712abc3a03e249e70ad
msgid "If :py:data:`False`, then users cannot ask for a password recovery link by email."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION:1
#: 1a86268c22bd4e6fa5d5d01d9333c389
msgid "If :py:data:`True`, then users can freely create an account at this instance."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION:4
#: 9ec23021f8bb46b1a76163da8353864a
msgid "If email verification is available, users must confirm their email before the account is created."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.FAVICON:1
#: 050e680da1dd409ba5611b49d388c236
msgid "You favicon."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.FAVICON:3
#: 44351f8a0aad4103877a89b3d773da1e
msgid "If unset and :attr:`LOGO` is set, then the logo will be used."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS:1
#: e5d3da93787741b498df2c84a4708195
msgid "If :py:data:`True`, when users try to sign in with an invalid login, a message is shown indicating that the password is wrong, but does not give a clue whether the login exists or not."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS:5
#: f1c78673ee1745279f8ec42cdff93cac
msgid "If :py:data:`False`, when a user tries to sign in with an invalid login, a message is shown indicating that the login does not exist."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.HTMX:1
#: 404e51ae5209412c97dc6fa6dea57e3c
msgid "Accelerates webpages loading with asynchronous requests."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.INVITATION_EXPIRATION:1
#: 6dba3015fe70429d9ba1bbda15533973
msgid "The validity duration of registration invitations, in seconds."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.INVITATION_EXPIRATION:3
#: b0c02fcd815f422f9c9acd2612c97346
msgid "Defaults to 2 days."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.JAVASCRIPT:1
#: 5802b46432cd48f6a66f5b1512d7b6e8
msgid "Enables Javascript to smooth the user experience."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LANGUAGE:1
#: 142e35437b3748f8b3ac8f6b8e7240a6
msgid "If a language code is set, it will be used for every user."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LANGUAGE:3
#: e338715fd61143e2a1b537adf9947e7f
msgid "If unset, the language is guessed according to the users browser."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGGING:1
#: f1b6ffe918904a7e8f12478e9777189e
msgid "Configures the logging output using the python logging configuration format:"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGGING:3
#: adf30d64e31649c993f97ee0f0526e50
msgid "if :py:data:`None`, everything is logged in the standard error output the log level is :py:data:`~logging.DEBUG` if the :attr:`~canaille.app.configuration.RootSettings.DEBUG` setting is :py:data:`True`, else this is :py:data:`~logging.INFO`"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGGING:6
#: 947c4f81681a421ab19405abe2bcd041
msgid "if this is a :class:`dict`, it is passed to :func:`logging.config.dictConfig`:"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGGING:7
#: 6cd1d5c423754618965278773dea5dff
msgid "if this is a :class:`str`, it is expected to be a file path that will be passed to :func:`logging.config.fileConfig`"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGGING:10
#: 6bf518e7d17d40c885ae66018ba85818
msgid "For example::"
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.LOGO:1
#: 1ad6c44c92f6404fa900222ae71404fd
msgid "The logo of your organization, this is useful to make your organization recognizable on login screens."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.MAX_PASSWORD_LENGTH:1
#: 3915ce88d08d469a8797d9ac7b9e76bb
msgid "Maximum length for user password."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.MAX_PASSWORD_LENGTH:3
#: e56397580fdc4ef9856be66e9afcd944
msgid "There is a technical limit with passlib used by sql database of 4096 characters. If the value entered is 0 or None, or greater than 4096, then 4096 will be retained."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.MIN_PASSWORD_LENGTH:1
#: 382c57f189834a5dafe4e6a7dafac059
msgid "Minimum length for user password."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.MIN_PASSWORD_LENGTH:3
#: 242b94d8ebc74169838056a41b468bb0
msgid "It is possible not to set a minimum, by entering None or 0."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.NAME:1
#: d685099921b749dabfa7766ab83cd899
msgid "Your organization name."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.NAME:3
#: c0b11619f38147c38e45c33bb95130cd
msgid "Used for display purpose."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.PASSWORD_COMPROMISSION_CHECK_API_URL:1
#: 13d7b717443d4d7f8072c052e77fb9a1
msgid "Have i been pwned api url for compromission checks."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.SENTRY_DSN:1
#: 5ace1a77e6844217a9a525ba89fca4ac
msgid "A `Sentry <https://sentry.io>`_ DSN to collect the exceptions."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.SENTRY_DSN:3
#: eb2487e49bcb4c06b4b072c1bffd1b35
msgid "This is useful for tracking errors in test and production environments."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.SMTP:1
#: a380618f79db467497998c14d0479bb5
msgid "The settings related to SMTP and mail configuration."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.SMTP:3
#: 4e7cc4129a664eab896700ae2a531a85
msgid "If unset, mail-related features like password recovery won't be enabled."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.THEME:1
#: 8e154507bca34a2da6fd956bb5a4be7a
msgid "The name of a theme in the 'theme' directory, or a path to a theme."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.THEME:3
#: 1c6f63e8169d4d39b90cd03d21240d57
msgid "Defaults to ``default``. Theming is done with `flask-themer <https://github.com/tktech/flask-themer>`_."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.TIMEZONE:1
#: 64d6f680335c4994a06052b1e8926707
msgid "The timezone in which datetimes will be displayed to the users (e.g. ``CEST``)."
msgstr ""
#: ../../docstring of canaille.core.configuration.CoreSettings.TIMEZONE:4
#: 7fb3171a6fbd4688b6a1d5fec23ecdd6
msgid "If unset, the server timezone will be used."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.SMTPSettings:1
#: b4724fa923b043ad93559be1154655e7
msgid "The SMTP configuration. Belong in the ``CANAILLE.SMTP`` namespace. If unset, mail related features will be disabled, such as mail verification or password recovery emails."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.SMTPSettings:5
#: 347fd2955c774b188997a442e55f5c7c
msgid "By default, Canaille will try to send mails from localhost without authentication."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.FROM_ADDR:1
#: 9423c5190b184836a8e0562f59e17cb0
msgid "The sender for Canaille mails."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.FROM_ADDR:3
#: 5f9fe89512184352bf83dd9dc13cb400
msgid "Some mail provider might require a valid sender address."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.HOST:1
#: a71c5983a93846dea4f2af605ceb2964
msgid "The SMTP host."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.LOGIN:1
#: 09dcbcac25bd4ae4903e446424664181
msgid "The SMTP login."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.PASSWORD:1
#: 8ca2a76f50d94448abf6fd29360b224b
msgid "The SMTP password."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.PORT:1
#: bb71e9c748e54024891e1120144ecd60
msgid "The SMTP port."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.SSL:1
#: a1979063c4674a2d8a2c8d552096949f
msgid "Whether to use SSL to connect to the SMTP server."
msgstr ""
#: ../../docstring of canaille.core.configuration.SMTPSettings.TLS:1
#: 1c5218d536e04654a21231a7f66ca17f
msgid "Whether to use TLS to connect to the SMTP server."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.ACLSettings:1
#: 71a851e0084748b7866328b368c1e71a
msgid "Access Control List settings. Belong in the ``CANAILLE.ACL`` namespace."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.ACLSettings:3
#: 02255fc1a04d4b8192d5a3b1b43d1908
msgid "You can define access controls that define what users can do on canaille An access control consists in a :attr:`FILTER` to match users, a list of :attr:`PERMISSIONS` matched users will be able to perform, and fields users will be able to :attr:`READ` and :attr:`WRITE`. Users matching several filters will cumulate permissions."
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.FILTER:1
#: 8da16abfa50940b999a4d5f409e58d74
msgid ":attr:`FILTER` can be:"
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.FILTER:3
#: d4138506b0e4483abd40a4e95406094c
msgid ":py:data:`None`, in which case all the users will match this access control"
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.FILTER:4
#: 1abd6284f39f45a492767464191f5187
msgid "a mapping where keys are user attributes name and the values those user attribute values. All the values must be matched for the user to be part of the access control."
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.FILTER:7
#: 6ba9c1bc84f04f8882ed58940ad15b0e
msgid "a list of those mappings. If a user values match at least one mapping, then the user will be part of the access control"
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.FILTER:10
#: 23744c24632a4d168f8ec678e1a3bf5d
msgid "Here are some examples::"
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.PERMISSIONS:1
#: 4078af0ed93b47c49ca31792ac5b97c5
msgid "A list of :class:`Permission` users in the access control will be able to manage. For example::"
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.READ:1
#: 73365747e42042caa220e123de8845d4
msgid "A list of :class:`~canaille.core.models.User` attributes that users in the ACL will be able to read."
msgstr ""
#: ../../docstring of canaille.core.configuration.ACLSettings.WRITE:1
#: bd69e48c329248e69a6852bbd6a73d08
msgid "A list of :class:`~canaille.core.models.User` attributes that users in the ACL will be able to edit."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.Permission:1
#: 66b3d6aa06174799a1e83949b252b22b
msgid "The permissions that can be assigned to users."
msgstr ""
#: ../../canaille/core/configuration.py:docstring of canaille.core.configuration.Permission:3
#: d2e7535abbbc43d2ad09d62291a30297
msgid "The permissions are intended to be used in :attr:`ACLSettings <canaille.core.configuration.ACLSettings.PERMISSIONS>`."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.DELETE_ACCOUNT:1
#: bf8bae1371be4200b76be25da42673fa
msgid "Allows users to delete their account."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.DELETE_ACCOUNT:3
#: 8da238231ec845cc82ed303bc585edc0
msgid "If used with :attr:`~canaille.core.configuration.Permission.MANAGE_USERS`, users can delete any account."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.EDIT_SELF:1
#: 39bc9c236e2d43568deca0a4d8863c0e
msgid "Allows users to edit their own profile."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.IMPERSONATE_USERS:1
#: eb90e06ddce8426a87f4a877427b7411
msgid "Allows users to take the identity of another user."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.MANAGE_GROUPS:1
#: 4ce3c4ee68704259b6bfc08335c381a6
msgid "Allows group edition and creation."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.MANAGE_OIDC:1
#: ec06504cced4488d8ffd138e5119a370
msgid "Allows OpenID Connect client managements."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.MANAGE_USERS:1
#: a15d00d9eb474b1491db47819306715c
msgid "Allows other users management."
msgstr ""
#: ../../docstring of canaille.core.configuration.Permission.USE_OIDC:1
#: f48a8f942231472ea57ad0634ef23ab4
msgid "Allows OpenID Connect authentication."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.OIDCSettings:1
#: 1cf02f0bdf124960b8cb0d8741b19077
msgid "OpenID Connect settings."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.OIDCSettings:3
#: f81414e07e2b40379d4a869caa971765
msgid "Belong in the ``CANAILLE_OIDC`` namespace."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN:1
#: b385519bdeb94fc1b0c241a26ffa10b4
msgid "Whether a token is needed for the RFC7591 dynamical client registration."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN:3
#: 1394e8b1482d48eb83e3b83d0c9fedd6
msgid "If :py:data:`True`, no token is needed to register a client. If :py:data:`False`, dynamical client registration needs a token defined in :attr:`DYNAMIC_CLIENT_REGISTRATION_TOKENS`."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_TOKENS:1
#: 7066265898154e20a5b50d8fba161b04
msgid "A list of tokens that can be used for dynamic client registration."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.JWT:1
#: d629635ccc9c4e0099fe8cbec07df497
msgid "JSON Web Token settings."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.REQUIRE_NONCE:1
#: 44bed0d7fc604d6bb0797836f3a28d63
msgid "Force the nonce exchange during the authentication flows."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.OIDCSettings.REQUIRE_NONCE:3
#: 894924bff0764b1e9aed9f5399d32fd9
msgid "This adds security but may not be supported by all clients."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.JWTSettings:1
#: 923a6ec2411143d08c5502134f1622de
msgid "JSON Web Token settings. Belong in the ``CANAILLE_OIDC.JWT`` namespace."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.JWTSettings:3
#: 2c22c86a44084df0889ccb862da2c593
msgid "You can generate a RSA keypair with::"
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.ALG:1
#: a39536bb26fc47d688e2a8f58b2b9b34
msgid "The key algorithm."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.EXP:1
#: c2101e05e83740f58d59dbadb3190147
msgid "The time the JWT will be valid, in seconds."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.ISS:1
#: d05b86845777404cac5d7e25f6b4fd7a
msgid "The URI of the identity provider."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.KTY:1
#: 978dc3cd74ed41d380ef579824b768d3
msgid "The key type."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.PRIVATE_KEY:1
#: b07fad4012c04549b9014376e8973080
msgid "The private key."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.PRIVATE_KEY:3
#: ../../docstring of canaille.oidc.configuration.JWTSettings.PUBLIC_KEY:3
#: 11bc180445ad4c9e83ad18ee61b19b5b
#: f647de58457043d6bf1254041b232459
msgid "If :py:data:`None` and debug mode is enabled, then an in-memory key will be used."
msgstr ""
#: ../../docstring of canaille.oidc.configuration.JWTSettings.PUBLIC_KEY:1
#: ea693f1143e346b5a1707e501b4612c1
msgid "The public key."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.JWTMappingSettings:1
#: 3f37afeb4ba944f1893abd9a4bf24c82
msgid "Mapping between the user model and the JWT fields."
msgstr ""
#: ../../canaille/oidc/configuration.py:docstring of canaille.oidc.configuration.JWTMappingSettings:3
#: d6d5e13e76374c7c91fad5594b994abe
msgid "Fields are evaluated with jinja. A ``user`` var is available."
msgstr ""
#: ../../canaille/backends/sql/configuration.py:docstring of canaille.backends.sql.configuration.SQLSettings:1
#: 18dbb46c974e490da7044bb55c57a8b4
msgid "Settings related to the SQL backend."
msgstr ""
#: ../../canaille/backends/sql/configuration.py:docstring of canaille.backends.sql.configuration.SQLSettings:3
#: ac8f095c73d94a9eb610a6a877f56323
msgid "Belong in the ``CANAILLE_SQL`` namespace."
msgstr ""
#: ../../docstring of canaille.backends.sql.configuration.SQLSettings.DATABASE_URI:1
#: 657ca5834898413aada92c21e870127b
msgid "The SQL server URI. For example::"
msgstr ""
#: ../../canaille/backends/ldap/configuration.py:docstring of canaille.backends.ldap.configuration.LDAPSettings:1
#: eb2efa5097154602b3712c16331eb618
msgid "Settings related to the LDAP backend."
msgstr ""
#: ../../canaille/backends/ldap/configuration.py:docstring of canaille.backends.ldap.configuration.LDAPSettings:3
#: b9b407b8429e4c6db8ff909834398889
msgid "Belong in the ``CANAILLE_LDAP`` namespace."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.BIND_DN:1
#: 73e722b3fe3740e2bb04a67dd1396814
msgid "The LDAP bind DN."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.BIND_PW:1
#: 06730a32df8d44f2a1708565fd514032
msgid "The LDAP bind password."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.GROUP_BASE:1
#: ccd8fe02e0da48349bc7c22960ab400a
msgid "The LDAP node under which groups will be looked for and saved."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.GROUP_BASE:3
#: f5e60ac6241b4d988e17fb66c5ed8fa8
msgid "For instance `\"ou=groups,dc=mydomain,dc=tld\"`."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.GROUP_CLASS:1
#: df9cbdb25acd4c6cb9b940028c470f70
msgid "The object class to use for creating new groups."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.GROUP_NAME_ATTRIBUTE:1
#: cd8d5769aea049e9a097a71d8e78705b
msgid "The attribute to use to identify a group."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.GROUP_RDN:1
#: bbdd9122975a422d97bbb1124775f483
msgid "The attribute to identify an object in the Group DN."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.ROOT_DN:1
#: 9ec0421dc6d146aa9deb878b8b74c310
msgid "The LDAP root DN."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.TIMEOUT:1
#: 18aa1e3fda9044ffb3ec7c5b66eb927f
msgid "The LDAP connection timeout."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.URI:1
#: 5e5f46a65b914960bee9cab8c1ed8295
msgid "The LDAP server URI."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_BASE:1
#: 37e84f4b6c9a4f2aac524b211eec92a2
msgid "The LDAP node under which users will be looked for and saved."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_BASE:3
#: 865d8a39af0c4081a0e5efbdb093e64d
msgid "For instance `ou=users,dc=mydomain,dc=tld`."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_CLASS:1
#: f2a1aa79a096443b82bf75ffed902328
msgid "The object class to use for creating new users."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER:1
#: d2867ad1a2cf42b6834d173c1596fb11
msgid "Filter to match users on sign in."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER:3
#: 7eb49bc6bd41495cb8703166a9142961
msgid "For instance ``(|(uid={{ login }})(mail={{ login }}))``. Jinja syntax is supported and a ``login`` variable is available, containing the value passed in the login field."
msgstr ""
#: ../../docstring of canaille.backends.ldap.configuration.LDAPSettings.USER_RDN:1
#: 1b1a300a828f46248b0c26e37cc00c26
msgid "The attribute to identify an object in the User DN."
msgstr ""
#: ../references/configuration.rst:81
#: 6a9df3aff9164276819573e73de3cf28
msgid "Example file"
msgstr ""
#: ../references/configuration.rst:83
#: 9f661407953e4eceaf59f39040594f94
msgid "Here is a configuration file example:"
msgstr ""

22
doc/gettext/references/index.pot Normal file
View file

@ -0,0 +1,22 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../references/index.rst:2
#: 7e0a9ca5df284cb4aefaaa69849afa67
msgid "References"
msgstr ""

632
doc/gettext/references/models.pot Normal file
View file

@ -0,0 +1,632 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../references/models.rst:2
#: 41a7dc7b250e480db46d41e3aee22ad1
msgid "Data models"
msgstr ""
#: ../references/models.rst:4
#: 1b1a39298a8748d695327d8c3205861e
msgid "This reference details the data models used by Canaille. This is mostly useful for developers."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.BackendModel:1
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.Model:1
#: 5dfedb2673a34cffab2636c959e69517
#: 180db8c2a5484efcaaedab0d0259893c
msgid "Bases: :py:class:`object`"
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.BackendModel:1
#: 054dc8cb64204518901c6f741d0a78db
msgid "The backend model abstract class."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.BackendModel:3
#: d5425365fe8544d99d250bc36f79a9b9
msgid "It details all the methods and attributes that are expected to be implemented for every model and for every backend."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.Model:1
#: eed98eef84344fa8a1dfa96630a2308d
msgid "The model abstract class."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.Model:3
#: e45bdfd99f954f4c8fc3dc213443ff33
msgid "It details all the common attributes shared by every models."
msgstr ""
#: ../../docstring of canaille.backends.models.Model.created:1
#: 499d3761712a4423ada0b6c9e7336b9d
msgid "The :class:`~datetime.datetime` that the resource was added to the service provider."
msgstr ""
#: ../../docstring of canaille.backends.models.Model.id:1
#: eb26542ddccf459bbd8179d12e546226
msgid "A unique identifier for a SCIM resource as defined by the service provider. Id will be :py:data:`None` until the :meth:`~canaille.backends.models.BackendModel.save` method is called."
msgstr ""
#: ../../docstring of canaille.backends.models.Model.id:5
#: 99a3ebf8e2f0425f8f6b2cb0fd43b1aa
msgid "Each representation of the resource MUST include a non-empty \"id\" value. This identifier MUST be unique across the SCIM service provider's entire set of resources. It MUST be a stable, non- reassignable identifier that does not change when the same resource is returned in subsequent requests. The value of the \"id\" attribute is always issued by the service provider and MUST NOT be specified by the client. The string \"bulkId\" is a reserved keyword and MUST NOT be used within any unique identifier value. The attribute characteristics are \"caseExact\" as \"true\", a mutability of \"readOnly\", and a \"returned\" characteristic of \"always\". See Section 9 for additional considerations regarding privacy."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.Model.identifier:1
#: d3ab1a41021449649f7fc65d7faa4b5a
msgid "Returns a unique value that will be used to identify the model instance."
msgstr ""
#: ../../canaille/backends/models.py:docstring of canaille.backends.models.Model.identifier:4
#: 730b5beedf3345e7a1f3c9152b471d76
msgid "This value will be used in URLs in canaille, so it should be unique and short."
msgstr ""
#: ../../docstring of canaille.backends.models.Model.last_modified:1
#: 6654492d947545cf99532d0bc78c607d
msgid "The most recent :class:`~datetime.datetime` that the details of this resource were updated at the service provider."
msgstr ""
#: ../../docstring of canaille.backends.models.Model.last_modified:4
#: a06610bf90c745bf97d7332606ee3e14
msgid "If this resource has never been modified since its initial creation, the value MUST be the same as the value of :attr:`~canaille.backends.models.Model.created`."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.Group:1
#: ../../canaille/core/models.py:docstring of canaille.core.models.User:1
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.AuthorizationCode:1
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Client:1
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Consent:1
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Token:1
#: 25aac7c6a4de47149abecdba2643cf16
#: 2fcb719579614323832335e883920d06
#: 9fcbd7a341574bb0a12735c80577678c
#: e686b323e13d49108d090d0ccec91b95
#: a2f9ebd1047445d68a4211e9f7e7939d
#: 474767a737ea4abeb51431231c5eeecd
msgid "Bases: :py:class:`~canaille.backends.models.Model`"
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.Group:1
#: 75d84fdf9b3e4d40a7388fde78daf7d4
msgid "User model, based on the `SCIM Group schema <https://datatracker.ietf.org/doc/html/rfc7643#section-4.2>`_."
msgstr ""
#: ../../docstring of canaille.core.models.Group.display_name:1
#: b34781220a204e858e24409b1a1059c7
msgid "A human-readable name for the Group."
msgstr ""
#: ../../docstring of canaille.core.models.Group.display_name:3
#: ../../docstring of canaille.oidc.basemodels.Client.client_id:1
#: 08b43e57fa894ae3b6317cc37297342c
#: 48449512919d4b3ab2aa12fe6c48a3f4
msgid "REQUIRED."
msgstr ""
#: ../../docstring of canaille.core.models.Group.members:1
#: 6028207848c745e381bd6946ce2d276d
msgid "A list of members of the Group."
msgstr ""
#: ../../docstring of canaille.core.models.Group.members:3
#: f75ea88690b0435a917de111ae26b22b
msgid "While values MAY be added or removed, sub-attributes of members are \"immutable\". The \"value\" sub-attribute contains the value of an \"id\" attribute of a SCIM resource, and the \"$ref\" sub-attribute must be the URI of a SCIM resource such as a \"User\", or a \"Group\". The intention of the \"Group\" type is to allow the service provider to support nested groups. Service providers MAY require clients to provide a non-empty value by setting the \"required\" attribute characteristic of a sub-attribute of the \"members\" attribute in the \"Group\" resource schema."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User:1
#: 539d0e7b4b0143c39c76c5e9ef16bd86
msgid "User model, based on the `SCIM User schema <https://datatracker.ietf.org/doc/html/rfc7643#section-4.1>`_, `Entreprise User Schema Extension <https://datatracker.ietf.org/doc/html/rfc7643#section-4.3>`_ and `SCIM Password Management Extension <https://datatracker.ietf.org/doc/html/draft-hunt-scim-password-mgmt-00.html>`_ draft. Attribute description is based on SCIM and put there for information purpose. The description may not fit the current implementation in Canaille."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.can:1
#: 87eda29a61a745199883fc289a13c314
msgid "Whether or not the user has the :class:`~canaille.core.configuration.Permission` according to the :class:`configuration <canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../../docstring of canaille.core.models.User.department:1
#: c2e676f9335f408ab8318ffd79b0aa8a
msgid "Identifies the name of a department."
msgstr ""
#: ../../docstring of canaille.core.models.User.display_name:1
#: 5881ae5858d447058eca54d075e1799a
msgid "The name of the user, suitable for display to end-users."
msgstr ""
#: ../../docstring of canaille.core.models.User.display_name:3
#: 270a39dc6d7f49b49f5e21b2048c6c9a
msgid "Each user returned MAY include a non-empty displayName value. The name SHOULD be the full name of the User being described, if known (e.g., \"Babs Jensen\" or \"Ms. Barbara J Jensen, III\") but MAY be a username or handle, if that is all that is available (e.g., \"bjensen\"). The value provided SHOULD be the primary textual label by which this User is normally displayed by the service provider when presenting it to end-users."
msgstr ""
#: ../../docstring of canaille.core.models.User.emails:1
#: 8cb604df1a19481284ee1359685e6af0
msgid "Email addresses for the User."
msgstr ""
#: ../../docstring of canaille.core.models.User.emails:3
#: cf1562e8f9334a6f9f9d1d8ed7fad99f
msgid "The value SHOULD be specified according to [RFC5321]. Service providers SHOULD canonicalize the value according to [RFC5321], e.g., \"bjensen@example.com\" instead of \"bjensen@EXAMPLE.COM\". The \"display\" sub-attribute MAY be used to return the canonicalized representation of the email value. The \"type\" sub-attribute is used to provide a classification meaningful to the (human) user. The user interface should encourage the use of basic values of \"work\", \"home\", and \"other\" and MAY allow additional type values to be used at the discretion of SCIM clients."
msgstr ""
#: ../../docstring of canaille.core.models.User.employee_number:1
#: 636ed55260c74feeacbf312e64f05846
msgid "A string identifier, typically numeric or alphanumeric, assigned to a person, typically based on order of hire or association with an organization."
msgstr ""
#: ../../docstring of canaille.core.models.User.family_name:1
#: 64675e899765403b9e7f5f7e20b6a4d4
msgid "The family name of the User, or last name in most Western languages (e.g., \"Jensen\" given the full name \"Ms. Barbara Jane Jensen, III\")."
msgstr ""
#: ../../docstring of canaille.core.models.User.formatted_address:1
#: d7bc625574aa4a92922b80a678dd2603
msgid "The full mailing address, formatted for display or use with a mailing label."
msgstr ""
#: ../../docstring of canaille.core.models.User.formatted_address:4
#: 7b5cfe72fe824e41acc01e5b12836c38
msgid "This attribute MAY contain newlines."
msgstr ""
#: ../../docstring of canaille.core.models.User.formatted_name:1
#: 3a0ffada2e8445b28acbba22cc25b66c
msgid "The full name, including all middle names, titles, and suffixes as appropriate, formatted for display (e.g., \"Ms. Barbara Jane Jensen, III\")."
msgstr ""
#: ../../docstring of canaille.core.models.User.given_name:1
#: 61ce490296b54da7ae1b542c1f705d86
msgid "The given name of the User, or first name in most Western languages (e.g., \"Barbara\" given the full name \"Ms. Barbara Jane Jensen, III\")."
msgstr ""
#: ../../docstring of canaille.core.models.User.groups:1
#: 690f1b154c004cd4b73b9f3942abe467
msgid "A list of groups to which the user belongs, either through direct membership, through nested groups, or dynamically calculated."
msgstr ""
#: ../../docstring of canaille.core.models.User.groups:4
#: 2eb7b172e9b244b784e9be7ae251f62c
msgid "The values are meant to enable expression of common group-based or role-based access control models, although no explicit authorization model is defined. It is intended that the semantics of group membership and any behavior or authorization granted as a result of membership are defined by the service provider. The canonical types \"direct\" and \"indirect\" are defined to describe how the group membership was derived. Direct group membership indicates that the user is directly associated with the group and SHOULD indicate that clients may modify membership through the \"Group\" resource. Indirect membership indicates that user membership is transitive or dynamic and implies that clients cannot modify indirect group membership through the \"Group\" resource but MAY modify direct group membership through the \"Group\" resource, which may influence indirect memberships. If the SCIM service provider exposes a \"Group\" resource, the \"value\" sub-attribute MUST be the \"id\", and the \"$ref\" sub-attribute must be the URI of the corresponding \"Group\" resources to which the user belongs. Since this attribute has a mutability of \"readOnly\", group membership changes MUST be applied via the \"Group\" Resource (Section 4.2). This attribute has a mutability of \"readOnly\"."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.has_password:1
#: 40ee4db8c45f4003bb48204deb440d98
msgid "Check whether a password has been set for the user."
msgstr ""
#: ../../docstring of canaille.core.models.User.locality:1
#: 3512695046244d34b61291df0b2982f7
msgid "The city or locality component."
msgstr ""
#: ../../docstring of canaille.core.models.User.lock_date:1
#: 31216009e3274f90bb09e07a3c667ccd
msgid "A DateTime indicating when the resource was locked."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.locked:1
#: 1c62d35ba0c44d53870acd58383ae845
msgid "Whether the user account has been locked or has expired."
msgstr ""
#: ../../docstring of canaille.core.models.User.organization:1
#: 9e66d1ff732c4c9498199b3cd30133c2
msgid "Identifies the name of an organization."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:1
#: dc7683784aaf49ad82908015dddc3327
msgid "This attribute is intended to be used as a means to set, replace, or compare (i.e., filter for equality) a password. The cleartext value or the hashed value of a password SHALL NOT be returnable by a service provider. If a service provider holds the value locally, the value SHOULD be hashed. When a password is set or changed by the client, the cleartext password SHOULD be processed by the service provider as follows:"
msgstr ""
#: ../../docstring of canaille.core.models.User.password:9
#: 75d933d5170e459d871c082acdc18867
msgid "Prepare the cleartext value for international language comparison. See Section 7.8 of [RFC7644]."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:12
#: 8448f08bb8d94e489d01759c44573b27
msgid "Validate the value against server password policy. Note: The definition and enforcement of password policy are beyond the scope of this document."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:16
#: c21e45acd3eb4c948f20fad79c2589fb
msgid "Ensure that the value is encrypted (e.g., hashed). See Section 9.2 for acceptable hashing and encryption handling when storing or persisting for provisioning workflow reasons."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:20
#: 71a63d1b1da4473aab7849d83bae865d
msgid "A service provider that immediately passes the cleartext value on to another system or programming interface MUST pass the value directly over a secured connection (e.g., Transport Layer Security (TLS)). If the value needs to be temporarily persisted for a period of time (e.g., because of a workflow) before provisioning, then the value MUST be protected by some method, such as encryption."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:28
#: 6e667adf52f041cd91027ad22ec29e79
msgid "Testing for an equality match MAY be supported if there is an existing stored hashed value. When testing for equality, the service provider:"
msgstr ""
#: ../../docstring of canaille.core.models.User.password:32
#: c5b24096ff7b4a70982efaf2b4a590a0
msgid "Prepares the filter value for international language comparison. See Section 7.8 of [RFC7644]."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:35
#: a01917d7f406402aae04d9fab29cce1f
msgid "Generates the salted hash of the filter value and tests for a match with the locally held value."
msgstr ""
#: ../../docstring of canaille.core.models.User.password:38
#: d014072927a8489c959cf01f30a02e52
msgid "The mutability of the password attribute is \"writeOnly\", indicating that the value MUST NOT be returned by a service provider in any form (the attribute characteristic \"returned\" is \"never\")."
msgstr ""
#: ../../docstring of canaille.core.models.User.phone_numbers:1
#: 22dabe92b12f42999acc57125936d9a4
msgid "Phone numbers for the user."
msgstr ""
#: ../../docstring of canaille.core.models.User.phone_numbers:3
#: 4e9f962969504e419f1ee1e42018b7e3
msgid "The value SHOULD be specified according to the format defined in [RFC3966], e.g., 'tel:+1-201-555-0123'. Service providers SHOULD canonicalize the value according to [RFC3966] format, when appropriate. The \"display\" sub-attribute MAY be used to return the canonicalized representation of the phone number value. The sub- attribute \"type\" often has typical values of \"work\", \"home\", \"mobile\", \"fax\", \"pager\", and \"other\" and MAY allow more types to be defined by the SCIM clients."
msgstr ""
#: ../../docstring of canaille.core.models.User.photo:1
#: 8a1be24639d748fbb92e9026057c6108
msgid "A URI that is a uniform resource locator (as defined in Section 1.1.3 of [RFC3986]) that points to a resource location representing the user's image."
msgstr ""
#: ../../docstring of canaille.core.models.User.photo:5
#: 3c9a2c89c2e144e4a8e3a549099a0afc
msgid "The resource MUST be a file (e.g., a GIF, JPEG, or PNG image file) rather than a web page containing an image. Service providers MAY return the same image in different sizes, although it is recognized that no standard for describing images of various sizes currently exists. Note that this attribute SHOULD NOT be used to send down arbitrary photos taken by this user; instead, profile photos of the user that are suitable for display when describing the user should be sent. Instead of the standard canonical values for type, this attribute defines the following canonical values to represent popular photo sizes: \"photo\" and \"thumbnail\"."
msgstr ""
#: ../../docstring of canaille.core.models.User.postal_code:1
#: b8fd039fd49448fb8a1f2602864cdb31
msgid "The zip code or postal code component."
msgstr ""
#: ../../docstring of canaille.core.models.User.preferred_language:1
#: 78cc188b2ee94614ab5e68931c93b5e4
msgid "Indicates the user's preferred written or spoken languages and is generally used for selecting a localized user interface."
msgstr ""
#: ../../docstring of canaille.core.models.User.preferred_language:4
#: e957b1c5b5a0404d887870c7cb30361e
msgid "The value indicates the set of natural languages that are preferred. The format of the value is the same as the HTTP Accept-Language header field (not including \"Accept-Language:\") and is specified in Section 5.3.5 of [RFC7231]. The intent of this value is to enable cloud applications to perform matching of language tags [RFC4647] to the user's language preferences, regardless of what may be indicated by a user agent (which might be shared), or in an interaction that does not involve a user (such as in a delegated OAuth 2.0 [RFC6749] style interaction) where normal HTTP Accept-Language header negotiation cannot take place."
msgstr ""
#: ../../docstring of canaille.core.models.User.profile_url:1
#: 076f48982818474ca185bbb7ecc083bf
msgid "A URI that is a uniform resource locator (as defined in Section 1.1.3 of [RFC3986]) and that points to a location representing the user's online profile (e.g., a web page)."
msgstr ""
#: ../../docstring of canaille.core.models.User.profile_url:5
#: 850461e9fb3b4d709fcf76dd09c142b0
msgid "URIs are canonicalized per Section 6.2 of [RFC3986]."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.readable_fields:1
#: b97df5cf09a748e79ea9971b8dba39d1
msgid "The fields the user can read according to the :class:`configuration <canaille.core.configuration.ACLSettings>` configuration."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.readable_fields:4
#: b76c15b84378406fbc1249573072e5ca
msgid "This does not include the :attr:`writable <canaille.core.models.User.writable_fields>` fields."
msgstr ""
#: ../../docstring of canaille.core.models.User.region:1
#: 082b19222f8f4e25a4aa0aa0ecba0929
msgid "The state or region component."
msgstr ""
#: ../../docstring of canaille.core.models.User.street:1
#: 2c8f12c4f115443998f8cd1e22299be9
msgid "The full street address component, which may include house number, street name, P.O."
msgstr ""
#: ../../docstring of canaille.core.models.User.street:4
#: aba448bfd8da42758924353149dadc87
msgid "box, and multi-line extended street address information. This attribute MAY contain newlines."
msgstr ""
#: ../../docstring of canaille.core.models.User.title:1
#: 62e0f8e9c68a4ecfac80add78ccd7142
msgid "The user's title, such as \"Vice President\"."
msgstr ""
#: ../../docstring of canaille.core.models.User.user_name:1
#: 293d739a09e94a099259ed4650bae8ac
msgid "A service provider's unique identifier for the user, typically used by the user to directly authenticate to the service provider."
msgstr ""
#: ../../docstring of canaille.core.models.User.user_name:4
#: c13edd0588bc4f9d991306cdfd54d80a
msgid "Often displayed to the user as their unique identifier within the system (as opposed to \"id\" or \"externalId\", which are generally opaque and not user-friendly identifiers). Each User MUST include a non-empty userName value. This identifier MUST be unique across the service provider's entire set of Users. This attribute is REQUIRED and is case insensitive."
msgstr ""
#: ../../canaille/core/models.py:docstring of canaille.core.models.User.writable_fields:1
#: bce25550d966456fb325f488d3989446
msgid "The fields the user can write according to the :class:`configuration <canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.AuthorizationCode:1
#: edd3de5bfc4d4ae881494d6ba9e94342
msgid "OpenID Connect temporary authorization code definition."
msgstr ""
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Client:1
#: 8e9b301343f149de94a1d40e8b591125
msgid "OpenID Connect client definition, based on the `OAuth 2.0 Dynamic Client Registration protocols <https://datatracker.ietf.org/doc/html/rfc7591.html>`_ and the `OpenID Connect RP-Initiated Logout <https://openid.net/specs/openid-connect-rpinitiated-1_0.html>`_ specifications."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_id:3
#: e45f4fee2fdb46e7bb31460fddf3400a
msgid "OAuth 2.0 client identifier string. It SHOULD NOT be currently valid for any other registered client, though an authorization server MAY issue the same client identifier to multiple instances of a registered client at its discretion."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_id_issued_at:1
#: ../../docstring of canaille.oidc.basemodels.Client.client_secret:1
#: ../../docstring of canaille.oidc.basemodels.Client.post_logout_redirect_uris:1
#: c9328ff136fb490cb6810fd738cd32c3
#: 7e4168f5eef24ce7a0fdfcd1a34ac0b1
#: 1ea64fb459e343a58a8c09ffb8fb046c
msgid "OPTIONAL."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_id_issued_at:3
#: 673ada2798054ac5aaceccb2e11fa62c
msgid "Time at which the client identifier was issued. The time is represented as the number of seconds from 1970-01-01T00:00:00Z as measured in UTC until the date/time of issuance."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_name:1
#: 884645dd183e4deaacd7b26efbeae4b0
msgid "Human-readable string name of the client to be presented to the end-user during authorization."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_name:4
#: e71d8bfba20a4451bf78c67859250e85
msgid "If omitted, the authorization server MAY display the raw \"client_id\" value to the end-user instead. It is RECOMMENDED that clients always send this field. The value of this field MAY be internationalized, as described in Section 2.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_secret:3
#: 317b9d7d12754d8e81ccdbdbb69027a3
msgid "OAuth 2.0 client secret string. If issued, this MUST be unique for each \"client_id\" and SHOULD be unique for multiple instances of a client using the same \"client_id\". This value is used by confidential clients to authenticate to the token endpoint, as described in OAuth 2.0 [RFC6749], Section 2.3.1."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_secret_expires_at:1
#: 4e7d6ee56b7d4f3ba2bdda60e9a8428c
msgid "REQUIRED if \"client_secret\" is issued."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_secret_expires_at:3
#: 7eff790c6fed4a40b4afbf0c48e8f9b7
msgid "Time at which the client secret will expire or 0 if it will not expire. The time is represented as the number of seconds from 1970-01-01T00:00:00Z as measured in UTC until the date/time of expiration."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_uri:1
#: c808c4be36474628b978c4f87622d9bb
msgid "URL string of a web page providing information about the client."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.client_uri:3
#: eadc2f25087d476fb020f699c9f630c0
msgid "If present, the server SHOULD display this URL to the end-user in a clickable fashion. It is RECOMMENDED that clients always send this field. The value of this field MUST point to a valid web page. The value of this field MAY be internationalized, as described in Section 2.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.contacts:1
#: b2ba960845ec4d37955854ef04ff3439
msgid "Array of strings representing ways to contact people responsible for this client, typically email addresses."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.contacts:4
#: f16aba83e47541b9a0a1b9fb36d5ebbd
msgid "The authorization server MAY make these contact addresses available to end-users for support requests for the client. See Section 6 for information on Privacy Considerations."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:1
#: 9279cc2620e247239620ce27cc3f25be
msgid "Array of OAuth 2.0 grant type strings that the client can use at the token endpoint. These grant types are defined as follows:"
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:4
#: 3531d80222174772b72c7d0365ae585b
msgid "\"authorization_code\": The authorization code grant type defined in OAuth 2.0, Section 4.1."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:7
#: 700823977a854c0ab4b31683d3537526
msgid "\"implicit\": The implicit grant type defined in OAuth 2.0, Section 4.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:10
#: 9edafc4daf7d495d91ad5c3e3945373f
msgid "\"password\": The resource owner password credentials grant type defined in OAuth 2.0, Section 4.3."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:13
#: 606dd7b652ee432db4df96731cb74c83
msgid "\"client_credentials\": The client credentials grant type defined in OAuth 2.0, Section 4.4."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:16
#: e89ed9beba1c4bad87c8debcb3a6f7ea
msgid "\"refresh_token\": The refresh token grant type defined in OAuth 2.0, Section 6."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:19
#: 278f7b5438fc4abba32e99a2cfd051e0
msgid "\"urn:ietf:params:oauth:grant-type:jwt-bearer\": The JWT Bearer Token Grant Type defined in OAuth JWT Bearer Token Profiles [RFC7523]."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:23
#: f6d6e6c6e6fd4d059f4414322c5b2816
msgid "\"urn:ietf:params:oauth:grant-type:saml2-bearer\": The SAML 2.0 Bearer Assertion Grant defined in OAuth SAML 2 Bearer Token Profiles [RFC7522]."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.grant_types:27
#: df3a20a122e44a0f85ff153097c75299
msgid "If the token endpoint is used in the grant type, the value of this parameter MUST be the same as the value of the \"grant_type\" parameter passed to the token endpoint defined in the grant type definition. Authorization servers MAY allow for other values as defined in the grant type extension process described in OAuth 2.0, Section 4.5. If omitted, the default behavior is that the client will use only the \"authorization_code\" Grant Type."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.jwk:1
#: b28be1904349499bbb8a81a044e4d67d
msgid "Client's JSON Web Key Set [RFC7517] document value, which contains the client's public keys."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.jwk:4
#: f70ddda717154155a67fd9257f4e2a29
msgid "The value of this field MUST be a JSON object containing a valid JWK Set. These keys can be used by higher-level protocols that use signing or encryption. This parameter is intended to be used by clients that cannot use the \"jwks_uri\" parameter, such as native clients that cannot host public URLs. The \"jwks_uri\" and \"jwks\" parameters MUST NOT both be present in the same request or response."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.jwks_uri:1
#: e77c6d704ba34b1a8ae9191a549fc105
msgid "URL string referencing the client's JSON Web Key (JWK) Set [RFC7517] document, which contains the client's public keys."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.jwks_uri:4
#: 07c3977b5cc6478582c40bfda3818dca
msgid "The value of this field MUST point to a valid JWK Set document. These keys can be used by higher-level protocols that use signing or encryption. For instance, these keys might be used by some applications for validating signed requests made to the token endpoint when using JWTs for client authentication [RFC7523]. Use of this parameter is preferred over the \"jwks\" parameter, as it allows for easier key rotation. The \"jwks_uri\" and \"jwks\" parameters MUST NOT both be present in the same request or response."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.logo_uri:1
#: 1e78b0b24ba74fce9796a178d03f9a68
msgid "URL string that references a logo for the client."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.logo_uri:3
#: 8047900a37a946c5819126e4d5b1a6f2
msgid "If present, the server SHOULD display this image to the end-user during approval. The value of this field MUST point to a valid image file. The value of this field MAY be internationalized, as described in Section 2.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.policy_uri:1
#: 196ad277ca0d48e39e3b050fbd6c7420
msgid "URL string that points to a human-readable privacy policy document that describes how the deployment organization collects, uses, retains, and discloses personal data."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.policy_uri:5
#: ../../docstring of canaille.oidc.basemodels.Client.tos_uri:5
#: 44ffb5b8755147ffa444c857bb4cb9d7
#: ccc2d89b967b4e17a53b8ac2c26b263f
msgid "The authorization server SHOULD display this URL to the end-user if it is provided. The value of this field MUST point to a valid web page. The value of this field MAY be internationalized, as described in Section 2.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.post_logout_redirect_uris:3
#: 40a2fe5d5daf49c184873ddddffa1893
msgid "Array of URLs supplied by the RP to which it MAY request that the End-User's User Agent be redirected using the post_logout_redirect_uri parameter after a logout has been performed. These URLs SHOULD use the https scheme and MAY contain port, path, and query parameter components; however, they MAY use the http scheme, provided that the Client Type is confidential, as defined in Section 2.1 of OAuth 2.0 [RFC6749], and provided the OP allows the use of http RP URIs."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.redirect_uris:1
#: 9a28211e567845cbba7ac1bee6666f4a
msgid "Array of redirection URI strings for use in redirect-based flows such as the authorization code and implicit flows."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.redirect_uris:4
#: 2afba64218f040f1989433931c19d5e1
msgid "As required by Section 2 of OAuth 2.0 [RFC6749], clients using flows with redirection MUST register their redirection URI values. Authorization servers that support dynamic registration for redirect-based flows MUST implement support for this metadata value."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.response_types:1
#: 89ed3097a94f43dc83b564e94b3179f7
msgid "Array of the OAuth 2.0 response type strings that the client can use at the authorization endpoint. These response types are defined as follows:"
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.response_types:5
#: f58fbc4e912f4a07910f7dde4deb4886
msgid "\"code\": The authorization code response type defined in OAuth 2.0, Section 4.1."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.response_types:8
#: ea813f0274b44fe2a03e1215606dcca0
msgid "\"token\": The implicit response type defined in OAuth 2.0, Section 4.2."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.response_types:11
#: e855edc4d7984aa68dd8bd2609bd4925
msgid "If the authorization endpoint is used by the grant type, the value of this parameter MUST be the same as the value of the \"response_type\" parameter passed to the authorization endpoint defined in the grant type definition. Authorization servers MAY allow for other values as defined in the grant type extension process is described in OAuth 2.0, Section 4.5. If omitted, the default is that the client will use only the \"code\" response type."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.scope:1
#: 203b6265a65f43678bd3525158d35ed5
msgid "String containing a space-separated list of scope values (as described in Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when requesting access tokens."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.scope:5
#: ccb3e8902413435da8ef2b347ee6f524
msgid "The semantics of values in this list are service specific. If omitted, an authorization server MAY register a client with a default set of scopes."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.software_id:1
#: 1c3a6b1855e6484286e2a7ead64545ca
msgid "A unique identifier string (e.g., a Universally Unique Identifier (UUID)) assigned by the client developer or software publisher used by registration endpoints to identify the client software to be dynamically registered."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.software_id:6
#: 92bca122a33f4ad2aa156a357d7abbc9
msgid "Unlike \"client_id\", which is issued by the authorization server and SHOULD vary between instances, the \"software_id\" SHOULD remain the same for all instances of the client software. The \"software_id\" SHOULD remain the same across multiple updates or versions of the same piece of software. The value of this field is not intended to be human readable and is usually opaque to the client and authorization server."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.software_version:1
#: 7b41f56df51642a99f7bdbaf40269981
msgid "A version identifier string for the client software identified by \"software_id\"."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.software_version:4
#: 02558244f5a141e193400a177f45b84e
msgid "The value of the \"software_version\" SHOULD change on any update to the client software identified by the same \"software_id\". The value of this field is intended to be compared using string equality matching and no other comparison semantics are defined by this specification. The value of this field is outside the scope of this specification, but it is not intended to be human readable and is usually opaque to the client and authorization server. The definition of what constitutes an update to client software that would trigger a change to this value is specific to the software itself and is outside the scope of this specification."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.token_endpoint_auth_method:1
#: e508c45da1ae48f19b7ee8441976c669
msgid "String indicator of the requested authentication method for the token endpoint. Values defined by this specification are:"
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.token_endpoint_auth_method:4
#: 8a3f3b84f62b4438a5ed5fbb9e98bef5
msgid "\"none\": The client is a public client as defined in OAuth 2.0, Section 2.1, and does not have a client secret."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.token_endpoint_auth_method:7
#: 0a2a945397264911947f1eb4e8591bbf
msgid "\"client_secret_post\": The client uses the HTTP POST parameters as defined in OAuth 2.0, Section 2.3.1."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.token_endpoint_auth_method:10
#: 3852640761c84dbfb1e94502c59cd753
msgid "\"client_secret_basic\": The client uses HTTP Basic as defined in OAuth 2.0, Section 2.3.1."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.token_endpoint_auth_method:13
#: e1a40f43702c4916bcfa4584c26611ea
msgid "Additional values can be defined via the IANA \"OAuth Token Endpoint Authentication Methods\" registry established in Section 4.2. Absolute URIs can also be used as values for this parameter without being registered. If unspecified or omitted, the default is \"client_secret_basic\", denoting the HTTP Basic authentication scheme as specified in Section 2.3.1 of OAuth 2.0."
msgstr ""
#: ../../docstring of canaille.oidc.basemodels.Client.tos_uri:1
#: a6cd2971183b42bcbb8e50649d19fc7e
msgid "URL string that points to a human-readable terms of service document for the client that describes a contractual relationship between the end-user and the client that the end-user accepts when authorizing the client."
msgstr ""
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Consent:1
#: 5b6f0884f0fa40aa8a74cc3a3553d88f
msgid "Long-term user consent to an application."
msgstr ""
#: ../../canaille/oidc/basemodels.py:docstring of canaille.oidc.basemodels.Token:1
#: 0536543f92654e49b7a69b057d076a38
msgid "OpenID Connect token definition."
msgstr ""

153
doc/gettext/tutorial/databases.pot Normal file
View file

@ -0,0 +1,153 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../tutorial/databases.rst:2
#: 527d8f3cbe0a441abe4e66c3c3a8e45b
msgid "Databases"
msgstr ""
#: ../tutorial/databases.rst:4
#: 7ba0b9a14fce436595c5ebde78aae946
msgid "Canaille can read and save data in different databases. This page presents the different database backends and their specificities:"
msgstr ""
#: ../tutorial/databases.rst:8
#: 79cee50c147545ce9bdac814bcfe8609
msgid "Memory"
msgstr ""
#: ../tutorial/databases.rst:10
#: e3f9746afd40417e9b6324eb9feed900
msgid "Canaille comes with a lightweight inmemory backend by default. It is used when no other backend has been configured."
msgstr ""
#: ../tutorial/databases.rst:13
#: c99976af30a84dd88144af1f94fa4f1f
msgid "This backend is only for test purpose and should not be used in production environments."
msgstr ""
#: ../tutorial/databases.rst:16
#: 2cc56bb5b80e44acbf72f33c06b160ac
msgid "SQL"
msgstr ""
#: ../tutorial/databases.rst:18
#: 810f5fc5e5c44da2aeed71b98964cdb5
msgid "Canaille can use any database supported by `SQLAlchemy <https://www.sqlalchemy.org/>`_, such as sqlite, postgresql or mariadb."
msgstr ""
#: ../tutorial/databases.rst:21
#: 2bc43b31141a40ee931dd4dccb78072b
msgid "It is used when the ``CANAILLE_SQL`` configuration parameter is defined. For instance:"
msgstr ""
#: ../tutorial/databases.rst:23
#: ../tutorial/databases.rst:37
#: 4c8504504a3647198afac5c8d87813f7
#: 196b09a796c04d4b9066bd463f5e239b
msgid "config.toml"
msgstr ""
#: ../tutorial/databases.rst:29
#: 05c9a85af5f04ad08741ff83efa7a3a0
msgid "You can find more details on the SQL configuration in the :class:`dedicated section <canaille.backends.sql.configuration.SQLSettings>`."
msgstr ""
#: ../tutorial/databases.rst:32
#: 91a683cbbdc745549e37499598c1aa4a
msgid "LDAP"
msgstr ""
#: ../tutorial/databases.rst:34
#: 0dcba883340c4f67b21d69b9f9078c48
msgid "Canaille can use OpenLDAP as its main database. It is used when the ``CANAILLE_LDAP`` configuration parameter is defined. For instance:"
msgstr ""
#: ../tutorial/databases.rst:52
#: 90ed3908de454594b1e76e5725056c81
msgid "You can find more details on the LDAP configuration in the :class:`dedicated section <canaille.backends.ldap.configuration.LDAPSettings>`."
msgstr ""
#: ../tutorial/databases.rst:55
#: 2c43e9f79276492c84248e35508188a9
msgid "Currently, only the ``inetOrgPerson`` and ``groupOfNames`` schemas have been tested. If you want to use different schemas or LDAP servers, adaptations may be needed. Patches are welcome."
msgstr ""
#: ../tutorial/databases.rst:60
#: ad13059a843e41ceb3d105e609722063
msgid "OpenLDAP overlays integration"
msgstr ""
#: ../tutorial/databases.rst:62
#: 4574a3d570f04d96a49722ff77c2695a
msgid "Canaille can integrate with several OpenLDAP overlays:"
msgstr ""
#: ../tutorial/databases.rst:65
#: 4dd1354faaac48559deae338b4f090b5
msgid "memberof / refint"
msgstr ""
#: ../tutorial/databases.rst:67
#: 0439ad64ecb844fdaa1737a3c9e473cc
msgid "`memberof <https://www.openldap.org/doc/admin26/overlays.html#Reverse%20Group%20Membership%20Maintenance>`_ and `refint <https://www.openldap.org/doc/admin26/overlays.html#Referential%20Integrity>`_ overlays are needed for the Canaille group membership to work correctly."
msgstr ""
#: ../tutorial/databases.rst:71
#: ../tutorial/databases.rst:94
#: faa33ea8871f4e34ac2c64cc72fdf812
#: 06709ee4d5f844568221f14c64b5c30b
msgid "Here is a configuration example compatible with canaille:"
msgstr ""
#: ../tutorial/databases.rst:73
#: ebbf217acbd74c889aa84489628bae35
msgid "memberof-config.ldif"
msgstr ""
#: ../tutorial/databases.rst:77
#: 6b433a46ef87490bbaba6472563969c4
msgid "refint-config.ldif"
msgstr ""
#: ../tutorial/databases.rst:81
#: ../tutorial/databases.rst:104
#: 861e354e7cfb47049661986cb4e35787
#: b8ccf6ef78aa471ead32733e0381b055
msgid "You can adapt and load those configuration files with:"
msgstr ""
#: ../tutorial/databases.rst:90
#: 3a182ba0d6784956b95eaf634a6fc06f
msgid "ppolicy"
msgstr ""
#: ../tutorial/databases.rst:92
#: 83a2d62977b045ad8abe86ccc98759cb
msgid "If the `ppolicy <https://www.ietf.org/archive/id/draft-behera-ldap-password-policy-11.html>`_ overlay is configured and the ``pwdEndTime`` attribute is available (since OpenLDAP 2.6), then account locking support will be enabled in canaille. To allow users to manage account expiration, they need to have a *write* permission on the :attr:`~canaille.core.models.User.lock_date` attribute."
msgstr ""
#: ../tutorial/databases.rst:96
#: 791a6d05f787498487e083e108ce34de
msgid "ppolicy-config.ldif"
msgstr ""
#: ../tutorial/databases.rst:100
#: 0f9d8b20ec7f4043b83d6312b1058939
msgid "ppolicy.ldif"
msgstr ""

122
doc/gettext/tutorial/deployment.pot Normal file
View file

@ -0,0 +1,122 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../tutorial/deployment.rst:2
#: eeee7ba0fc3d44e7ad224ef2b2aad5d0
msgid "Deployment"
msgstr ""
#: ../tutorial/deployment.rst:5
#: e9ce862abbc94cd280400ab2e3b54839
msgid "Application service"
msgstr ""
#: ../tutorial/deployment.rst:7
#: 433485ad5c09467dafdf34069fca8cf7
msgid "After having finished Canaille installation you have to run it in a WSGI application server. Here are some WSGI server configuration examples you can pick. Do not forget to update the paths."
msgstr ""
#: ../tutorial/deployment.rst:11
#: b95ad5bdf60a4fa38668de444a350143
msgid "gunicorn"
msgstr ""
#: ../tutorial/deployment.rst:13
#: 71031d675d424a039075b7010b6aecaa
msgid "Todo"
msgstr ""
#: ../tutorial/deployment.rst:15
#: b4cd24e95f8649feb0bccc4077c530cc
msgid "Write a gunicorn configuration sample file."
msgstr ""
#: ../tutorial/deployment.rst:18
#: 1035487ff04444699065497aa5c27428
msgid "uwsgi"
msgstr ""
#: ../tutorial/deployment.rst:42
#: 99cd8ef482f84cbb9a924a9a3fef3f8f
msgid "Webserver"
msgstr ""
#: ../tutorial/deployment.rst:44
#: 123b2a6d36ba426cb333611e82f4b49f
msgid "Now you have to plug your WSGI application server to your webserver so it is accessible on the internet. Here are some webserver configuration examples you can pick:"
msgstr ""
#: ../tutorial/deployment.rst:48
#: a4206d1009c949e1aa406adc1e6f37a0
msgid "Nginx"
msgstr ""
#: ../tutorial/deployment.rst:114
#: 15b5ad9ca9d3428f889b223b0ffb58c7
msgid "Apache"
msgstr ""
#: ../tutorial/deployment.rst:153
#: fb75b2d60ce34f30a23ebcb46860c0b4
msgid "Recurrent jobs"
msgstr ""
#: ../tutorial/deployment.rst:155
#: 7f2c34b8393547c3ae17c156d98e0080
msgid "You might want to clean up your database to avoid it growing too much. You can regularly delete expired tokens and authorization codes with:"
msgstr ""
#: ../tutorial/deployment.rst:164
#: 0189b125934b4accb96c2ac6431dda33
msgid "Webfinger"
msgstr ""
#: ../tutorial/deployment.rst:166
#: 2fb122255bb94ea38ac3fe43bc6ee696
msgid "You may want to configure a `WebFinger`_ endpoint on your main website to allow the automatic discovery of your Canaille installation based on the account name of one of your users. For instance, suppose your domain is ``mydomain.example`` and your Canaille domain is ``auth.mydomain.example`` and there is a user ``john.doe``. A third-party application could require to authenticate the user and ask them for a user account. The user would give their account ``john.doe@mydomain.example``, then the application would perform a WebFinger request at ``https://mydomain.example/.well-known/webfinger`` and the response would contain the address of the authentication server ``https://auth.mydomain.example``. With this information the third party application can redirect the user to the Canaille authentication page."
msgstr ""
#: ../tutorial/deployment.rst:168
#: 2d0d75109fc0461282d6917878208cea
msgid "The difficulty here is that the WebFinger endpoint must be hosted at the top-level domain (i.e. ``mydomain.example``) while the authentication server might be hosted on a sublevel (i.e. ``auth.mydomain.example``). Canaille provides a WebFinger endpoint, but if it is not hosted at the top-level domain, a web redirection is required on the ``/.well-known/webfinger`` path."
msgstr ""
#: ../tutorial/deployment.rst:170
#: 82732f3561f44bba97416ecd74352d0e
msgid "Here are configuration examples for Nginx or Apache:"
msgstr ""
#: ../tutorial/deployment.rst:172
#: b9f6e24c2e3b4b3c8ba3e8a7c225d03c
msgid "Nginx webfinger configuration for a top level domain"
msgstr ""
#: ../tutorial/deployment.rst:181
#: 6613fc5b59614b38b1a967034e5ba97e
msgid "Apache webfinger configuration for a top level domain"
msgstr ""
#: ../tutorial/deployment.rst:191
#: c8e3fbc8941d4a40861b215a2e7fb645
msgid "Create the first user"
msgstr ""
#: ../tutorial/deployment.rst:193
#: c96af5c60d2b4472ac220cde78341607
msgid "Once canaille is installed, soon enough you will need to add users. To create your first user you can use the :ref:`canaille create <cli_create>` CLI."
msgstr ""

22
doc/gettext/tutorial/index.pot Normal file
View file

@ -0,0 +1,22 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../tutorial/index.rst:2
#: c7edcdeccf6f40c388fc80d827c09096
msgid "Tutorial"
msgstr ""

132
doc/gettext/tutorial/install.pot Normal file
View file

@ -0,0 +1,132 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../tutorial/install.rst:2
#: 3461075d4b16480d9daabb8d1d789005
msgid "Installation"
msgstr ""
#: ../tutorial/install.rst:6
#: 8def0eb60a6747fe917c611b88e4671b
msgid "Canaille is under heavy development and may not fit a production environment yet."
msgstr ""
#: ../tutorial/install.rst:8
#: 1d89fce4c8e741b28fea91ad93806d31
msgid "The installation of canaille consist in several steps, some of which you can do manually or with command line tool:"
msgstr ""
#: ../tutorial/install.rst:11
#: f36a9eed165f438199b75da27df7c168
msgid "Get the code"
msgstr ""
#: ../tutorial/install.rst:13
#: ccb1d89539184e6ea49b201aeadd4ca0
msgid "As the moment there is no distribution package for canaille. However, it can be installed with the ``pip`` package manager. Let us choose a place for the canaille environment, like ``/opt/canaille/env``."
msgstr ""
#: ../tutorial/install.rst:24
#: bbce9cea800b4f43b5438ad52438b744
msgid "Extras"
msgstr ""
#: ../tutorial/install.rst:26
#: 99d5dad5e3db42e188605845597aade5
msgid "Canaille provides different package options:"
msgstr ""
#: ../tutorial/install.rst:28
#: 9f420ef948f842f580648d92b8df7905
msgid "`front` provides all the things needed to produce the user interface;"
msgstr ""
#: ../tutorial/install.rst:29
#: d8e6f9d5f7f44b66b1e8cba275ad5ee3
msgid "`oidc` provides the dependencies to perform OAuth2/OIDC authentication;"
msgstr ""
#: ../tutorial/install.rst:30
#: 5c3be3c28af94a87bdbc7a45f64533a2
msgid "`ldap` provides the dependencies to enable the LDAP backend;"
msgstr ""
#: ../tutorial/install.rst:31
#: e33c8883f49846b1b821424dbf8f07e1
msgid "`sqlite` provides the dependencies to enable the SQLite backend;"
msgstr ""
#: ../tutorial/install.rst:32
#: 38f9ec9aa2f842f5b1b7bdf330080037
msgid "`postgresql` provides the dependencies to enable the PostgreSQL backend;"
msgstr ""
#: ../tutorial/install.rst:33
#: 9ca2ef4d86c54b3badef060b2973b9e4
msgid "`mysql` provides the dependencies to enable the MySQL backend;"
msgstr ""
#: ../tutorial/install.rst:34
#: f814e1792e0241558307dbccf11edbce
msgid "`sentry` provides sentry integration to watch Canaille exceptions;"
msgstr ""
#: ../tutorial/install.rst:35
#: 116fca1cb69748238bc82a0f37310059
msgid "`all` provides all the extras above."
msgstr ""
#: ../tutorial/install.rst:37
#: 48e42538a8604a87be1b3c65e21efd82
msgid "They can be installed with:"
msgstr ""
#: ../tutorial/install.rst:44
#: 992c7266ab8a417bb15541cf159b1402
msgid "Configure"
msgstr ""
#: ../tutorial/install.rst:46
#: 245524dcf0c84750b2e48712ce6f03e7
msgid "Choose a path where to store your configuration file. You can pass any configuration path with the ``CONFIG`` environment variable."
msgstr ""
#: ../tutorial/install.rst:54
#: bdf30558d57c43c5a47552341bb537e1
msgid "You should then edit your configuration file to adapt the values to your needs. Look at the configuration details in the :doc:`configuration <../references/configuration>` page."
msgstr ""
#: ../tutorial/install.rst:57
#: de2f194462264504aa4590443184e4c7
msgid "Install"
msgstr ""
#: ../tutorial/install.rst:59
#: fe3a5ed380e14ea0bbc9d43035e4157a
msgid "The :ref:`install command <cli_install>` will apply most of the things needed to get Canaille working. Depending on the configured :doc:`database <databases>` it will create the SQL tables, or install the LDAP schemas for instance."
msgstr ""
#: ../tutorial/install.rst:68
#: ca9856eb1ee74dc7830a408ed12fd806
msgid "Check"
msgstr ""
#: ../tutorial/install.rst:70
#: 976deff22c0c4ddb871dbe4b8c3f2fa4
msgid "After a manual installation, you can check your configuration file using the :ref:`check command <cli_install>`:"
msgstr ""

92
doc/gettext/tutorial/troubleshooting.pot Normal file
View file

@ -0,0 +1,92 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, YEAR.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 16:20+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: LANGUAGE <LL@li.org>\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
#: ../tutorial/troubleshooting.rst:2
#: a7d8552e4975449789812d67b23b345f
msgid "Troubleshooting"
msgstr ""
#: ../tutorial/troubleshooting.rst:5
#: 00bfa2fa35ff434fae80081ae567520b
msgid "The web interface throws useless error messages"
msgstr ""
#: ../tutorial/troubleshooting.rst:7
#: ec56d81e02e049808b5aa5d51d4b0c40
msgid "Unless the current user has admin :class:`permissions <canaille.core.configuration.Permission>`, or the installation is in :attr:`~canaille.app.configuration.RootSettings.DEBUG` mode, error messages won't be too technical. For instance, you can see *The request you made is invalid*. To enable detailed error messages, you can **temporarily** enable the :attr:`~canaille.app.configuration.RootSettings.DEBUG` configuration parameter."
msgstr ""
#: ../tutorial/troubleshooting.rst:12
#: 6cd00bba302b4ac7a814318fff5f1d98
msgid "How to manually install LDAP schemas?"
msgstr ""
#: ../tutorial/troubleshooting.rst:16
#: 383bf19fef474ad0bfcd432537867b7d
msgid "Schema installation can be automatically done using the :ref:`install command <cli_install>`."
msgstr ""
#: ../tutorial/troubleshooting.rst:18
#: cfce89f0ed5141699a0b428579e47d58
msgid "As of OpenLDAP 2.4, two configuration methods are available:"
msgstr ""
#: ../tutorial/troubleshooting.rst:20
#: f025a0ef2a9042cc82640e1686ca12ff
msgid "The `deprecated <https://www.openldap.org/doc/admin26/slapdconf2.html>`_ one, based on a configuration file (generally ``/etc/ldap/slapd.conf``);"
msgstr ""
#: ../tutorial/troubleshooting.rst:21
#: a096f639d51d4f6fb17bb854d6afd1d7
msgid "The new one, based on a configuration directory (generally ``/etc/ldap/slapd.d``)."
msgstr ""
#: ../tutorial/troubleshooting.rst:23
#: 87e24d478fbd4509bf4651ad0be9726f
msgid "Depending on the configuration method you use with your OpenLDAP installation, you need to chose how to add the canaille schemas:"
msgstr ""
#: ../tutorial/troubleshooting.rst:26
#: e0948dcef218449b91b5908a0c030dc5
msgid "Old fashion: Copy the schemas in your filesystem"
msgstr ""
#: ../tutorial/troubleshooting.rst:35
#: ff09602b1964432ca92439fcaab6c199
msgid "New fashion: Use slapadd to add the schemas"
msgstr ""
#: ../tutorial/troubleshooting.rst:37
#: 6b3246d97f7744b19c937e63c4e0c223
msgid "Be careful to stop your ldap server before running ``slapadd``"
msgstr ""
#: ../tutorial/troubleshooting.rst:46
#: c5be7d8dd34e4f36a0a4fb76f00bea5f
msgid "How to manually generate the OIDC keypair?"
msgstr ""
#: ../tutorial/troubleshooting.rst:50
#: d73bed635d4748789de6ede7f53cc73d
msgid "The keypair generation can be automatically done using the :ref:`install command <cli_install>`."
msgstr ""
#: ../tutorial/troubleshooting.rst:52
#: 0b9b5fcf3a594f0baaddf334e7880455
msgid "Canaille needs a key pair to sign OIDC tokens. You can customize those commands, as long as they match the ``JWT`` section of your configuration file."
msgstr ""

2152
doc/locales/fr_FR/LC_MESSAGES/development.po Normal file
View file

File diff suppressed because it is too large Load diff

1392
doc/locales/fr_FR/LC_MESSAGES/development/changelog.po Normal file
View file

File diff suppressed because it is too large Load diff

406
doc/locales/fr_FR/LC_MESSAGES/development/contributing.po Normal file
View file

@ -0,0 +1,406 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../CONTRIBUTING.rst:2 7c1ab3305147436fb9421dffeac09375
msgid "Contributions"
msgstr ""
#: ../../CONTRIBUTING.rst:4 a73a38a924914b208c350201b99ade0c
msgid "Contributions are welcome!"
msgstr ""
#: ../../CONTRIBUTING.rst:6 bb5639fbdf6c49bfa96bf0a26b42ee2a
msgid ""
"The repository is hosted at `gitlab.com/yaal/canaille "
"<https://gitlab.com/yaal/canaille>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:9 e35b3518080c4b3ea444a26c2b7d821f
msgid "Discuss"
msgstr ""
#: ../../CONTRIBUTING.rst:11 ddfd8d963ac7421baad588afafd95029
msgid ""
"If you want to implement a feature or a bugfix, please start by "
"discussing it with us on the `bugtracker "
"<https://gitlab.com/yaal/canaille/-/issues>`_ or the `matrix room "
"<https://matrix.to/#/#canaille-discuss:yaal.coop>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:16 f13a93bafe4542cbbdfb561e66869288
msgid "Development environment"
msgstr ""
#: ../../CONTRIBUTING.rst:18 146597b6b8d04f248ea98191137a6bcb
msgid "You can either run the demo locally or with Docker."
msgstr ""
#: ../../CONTRIBUTING.rst:20 9b1b9c06d6f640d3baab2194d63c2ca6
msgid ""
"The only tool required for local development is `uv`. Make sure to have "
"uv `installed on your computer <https://docs.astral.sh/uv/getting-"
"started/installation/>`_ to be able to hack Canaille."
msgstr ""
#: ../../CONTRIBUTING.rst:24 6b736387b592498d83c96dfef8a38832
msgid ""
"Initialize your development environment with: - ``uv sync --extra front "
"--extra oidc`` to have a minimal working development environment. This "
"will allow you to run the tests with ``uv pytest --backend memory``. - "
"``uv sync --extra front --extra oidc --extra sqlite`` to have a minimal "
"working development environment with SQLite backend support. This will "
"allow you to run the tests with ``uv pytest --backend sql``. - ``uv sync "
"--extra front --extra oidc --extra ldap`` to have a minimal working "
"development environment with LDAP backend support. This will allow you to"
" run the tests with ``uv pytest --backend ldap``. - ``uv sync --all-"
"extras`` if you want to have everything at your fingertips. Note that it "
"may compile some Python dependencies that would expect things to be "
"installed on your system; Some dependencies of Canaille might need to be "
"compiled, so you probably want to check that `GCC` and `cargo` are "
"available on your computer."
msgstr ""
#: ../../CONTRIBUTING.rst:31 3ab70f5ffe36465a9be5ef3edfe0cb57
msgid "After having launched the demo you have access to several services:"
msgstr ""
#: ../../CONTRIBUTING.rst:33 eab681954d7a4656bbaec53d33c0ecd0
msgid "A canaille server at `localhost:5000 <http://localhost:5000>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:34 f2dfbb5dbad74f6792f869598373fe7c
msgid "A dummy client at `localhost:5001 <http://localhost:5001>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:35 c26dbc13ffea4e578d5cbed572cf01f4
msgid "Another dummy client at `localhost:5002 <http://localhost:5002>`_"
msgstr ""
#: ../../CONTRIBUTING.rst:37 643fc1a38e8c482faf9bb03f95b2a62c
msgid "The canaille server has some default users:"
msgstr ""
#: ../../CONTRIBUTING.rst:39 9eb743b3da3f4eb0903ae5ef0a992566
msgid "A regular user which login and password are **user**;"
msgstr ""
#: ../../CONTRIBUTING.rst:40 c4143060eb304659ae704ec6cba281de
msgid "A moderator user which login and password are **moderator**;"
msgstr ""
#: ../../CONTRIBUTING.rst:41 411281aded7e464f87f1f8950e6c890c
msgid "An admin user which admin and password are **admin**;"
msgstr ""
#: ../../CONTRIBUTING.rst:42 fe28d3c09b174c6fb5c9661c3bc6ca67
msgid ""
"A new user which login is **james**. This user has no password yet, and "
"his first attempt to log-in would result in sending a password "
"initialization email (if a smtp server is configured)."
msgstr ""
#: ../../CONTRIBUTING.rst:47 b9f8753db1754411a6ddd40bee7fbffb
msgid "Backends"
msgstr ""
#: ../../CONTRIBUTING.rst:49 881e10750d914144be34fb6f03ef7a9f
msgid "Canaille comes with several backends:"
msgstr ""
#: ../../CONTRIBUTING.rst:51 285507e6da6b4af1a7b874ce68117d2e
msgid "a lightweight test purpose `memory` backend"
msgstr ""
#: ../../CONTRIBUTING.rst:52 240e509e162041698e7f88044e704d04
msgid "a `sql` backend, based on sqlalchemy"
msgstr ""
#: ../../CONTRIBUTING.rst:53 3d2495a25cec49e3b62f2c5514b380a6
msgid "a production-ready `LDAP` backend"
msgstr ""
#: ../../CONTRIBUTING.rst:56 1637387b09f845958e4268668f7ce5a8
msgid "Docker environment"
msgstr ""
#: ../../CONTRIBUTING.rst:58 5ce6e05911244aca97cc1405dc319d54
msgid ""
"If you want to develop with docker, your browser needs to be able to "
"reach the `canaille` container. The docker-compose file exposes the right"
" ports, but front requests are from outside the docker network: the "
"`canaille` url that makes sense for docker, points nowhere from your "
"browser. As exposed ports are on `localhost`, you need to tell your "
"computer that `canaille` url means `localhost`."
msgstr ""
#: ../../CONTRIBUTING.rst:63 23ce3f6f5ea44fe6ba4029203add5a27
msgid "To do that, you can add the following line to your `/etc/hosts`:"
msgstr ""
#: ../../CONTRIBUTING.rst:69 9cd73a71e5fa41a3a2f4f80c0408c4ba
msgid "To launch containers, use:"
msgstr ""
#: ../../CONTRIBUTING.rst:84 8cb412e1ce584a78b6a16c189480ab98
msgid "Local environment"
msgstr ""
#: ../../CONTRIBUTING.rst:98 901a414c94e5400391f9dfe67b452e6f
msgid ""
"If you want to run the demo locally with the LDAP backend, you need to "
"have `OpenLDAP <https://www.openldap.org/>`_ installed on your system. It"
" is generally shipped under the ``slapd`` or ``openldap`` package name."
msgstr ""
#: ../../CONTRIBUTING.rst:103 0c71c9d15abd4e128ecf38e66dccd052
msgid ""
"On Debian or Ubuntu systems, the OpenLDAP `slapd` binary usage might be "
"restricted by apparmor, and thus makes the tests and the demo fail. This "
"can be mitigated by removing apparmor restrictions on `slapd`."
msgstr ""
#: ../../CONTRIBUTING.rst:113 d78b3b0b3f3e49f1b2991c7f953bfd51
msgid "Populate the database"
msgstr ""
#: ../../CONTRIBUTING.rst:115 937755ec4cd44d28a300cfb31f4bdab0
msgid ""
"The demo database comes populated with some random users and groups. If "
"you need more, you can generate users and groups with the ``populate`` "
"command:"
msgstr ""
#: ../../CONTRIBUTING.rst:126 e6478d79102a420cb29373814615483c
msgid ""
"Adapt to use either the `ldap` or the `sql` configuration file. Note that"
" this will not work with the memory backend."
msgstr ""
#: ../../CONTRIBUTING.rst:129 8388b3135a7744cc9395de2be0754b97
msgid "Unit tests"
msgstr ""
#: ../../CONTRIBUTING.rst:131 c0beac52adbd4f8cab1b1b2b3a685b5b
msgid ""
"To run the tests, you just can run `uv run pytest` and/or `uv run tox` to"
" test all the supported python environments. Everything must be green "
"before patches get merged."
msgstr ""
#: ../../CONTRIBUTING.rst:134 087b9f6006f3453baffe1c6eb074925a
msgid ""
"To test a specific backend you can pass ``--backend memory``, ``--backend"
" sql`` or ``--backend ldap`` to pytest and tox."
msgstr ""
#: ../../CONTRIBUTING.rst:136 fb19a1dd39b94166861307d05981764c
msgid ""
"The test coverage is 100%, patches won't be accepted if not entirely "
"covered. You can check the test coverage with ``uv run pytest --cov "
"--cov-report=html`` or ``uv run tox -e coverage -- --cov-report=html``. "
"You can check the HTML coverage report in the newly created `htmlcov` "
"directory."
msgstr ""
#: ../../CONTRIBUTING.rst:141 c529a55523124f2e89397fbc60ac0f7b
msgid "Code style"
msgstr ""
#: ../../CONTRIBUTING.rst:143 925f6ac68525496584f01467bea4ad2d
msgid ""
"We use `ruff <https://docs.astral.sh/ruff/>`_ along with other tools to "
"format our code. Please run ``uv run tox -e style`` on your patches "
"before submitting them. In order to perform a style check and correction "
"at each commit you can use our `pre-commit <https://pre-commit.com/>`_ "
"configuration with ``uv run pre-commit install``."
msgstr ""
#: ../../CONTRIBUTING.rst:149 db166a2976184377ab59ce537418ecbf
msgid "Front"
msgstr ""
#: ../../CONTRIBUTING.rst:151 d25881c0189747eeabc777c2929c7008
msgid ""
"The interface is built upon the `Fomantic UI <https://fomantic-ui.com/>`_"
" CSS framework. The dynamical parts of the interface use `htmx "
"<https://htmx.org/>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:154 86502939ce9d443c86df95720e667a91
msgid ""
"Using Javascript in the interface is tolerated, but the whole website "
"MUST be accessible for browsers without Javascript support, and without "
"any feature loss."
msgstr ""
#: ../../CONTRIBUTING.rst:156 1c42dcc54b6743a0821f42046438066b
msgid ""
"Because of Fomantic UI we have a dependency to jQuery, however new "
"contributions should not depend on jQuery at all. See the `related issue "
"<https://gitlab.com/yaal/canaille/-/issues/130>`_."
msgstr ""
#: ../../CONTRIBUTING.rst:161 52abf5adbe644c6b82b87f4e5d2c5ebb
msgid "Translations"
msgstr ""
#: ../../canaille/translations/README.rst:1 b1a8c4be2efd43c1a4e2282711ffbb63
msgid ""
"Translations are done with `Weblate "
"<https://hosted.weblate.org/projects/canaille/canaille>`_."
msgstr ""
#: ../../canaille/translations/README.rst:3 1d4332b3eebd48fc98d28507c9be30a5
msgid ""
"The following commands are there as documentation, only the message "
"extraction is needed for contributors. All the other steps are "
"automatically done with Weblate."
msgstr ""
#: ../../canaille/translations/README.rst:8 111a6826ce7d4666aebf19ee04e5750c
msgid "Message extraction"
msgstr ""
#: ../../canaille/translations/README.rst:10 2bf701d1dcb441938142ee5e9b03bd31
msgid ""
"After you have edited translatable strings, you should extract the "
"messages with:"
msgstr ""
#: ../../canaille/translations/README.rst:17 424082dd69bc448bb50126f5e590f70c
msgid "Language addition"
msgstr ""
#: ../../canaille/translations/README.rst:19 5be588cfe676499f8294cc593075c1ad
msgid ""
"You can add a new language manually with the following command, however "
"this should not be needed as Weblate takes car of this:"
msgstr ""
#: ../../canaille/translations/README.rst:26 7db4259cd8504c73afa7b99db81efd41
msgid "Catalog update"
msgstr ""
#: ../../canaille/translations/README.rst:28 71bb011a076146f5baf4e3279f6c4b7e
msgid ""
"You can update the catalogs with the following command, however this "
"should not be needed as Weblate automatically update language catalogs "
"when it detects new strings or when someone translate some existing "
"strings. Weblate pushes happen every 24h."
msgstr ""
#: ../../canaille/translations/README.rst:36 a296f2a2cbf649299d5fec0f520614d3
msgid "Catalog compilation"
msgstr ""
#: ../../canaille/translations/README.rst:38 c13b3771cd5b45b4884744fad24b900f
msgid ""
"You can compile the catalogs with the following command, however this "
"should not be needed as catalogs are automatically compiled before "
"running the unit tests, before launching the demo and before compiling "
"the Canaille python package:"
msgstr ""
#: ../../CONTRIBUTING.rst:166 39b97e4fee6749c79486c19e617657ef
msgid "Documentation"
msgstr ""
#: ../../CONTRIBUTING.rst:168 0d41272738f94ced892295701150d998
msgid "The documentation is generated when the tests run:"
msgstr ""
#: ../../CONTRIBUTING.rst:174 3e7a8bb825c64e9291ef2d77b3932f98
msgid ""
"You can also run sphinx by hand, that should be faster since it avoids "
"the tox environment initialization:"
msgstr ""
#: ../../CONTRIBUTING.rst:180 1ea17b9131f04d71b48b7c3c61f50983
msgid "The generated documentation is located at ``build/sphinx/html``."
msgstr ""
#: ../../CONTRIBUTING.rst:183 79f5374feb714359a960e5cae638c231
msgid "Publish a new release"
msgstr ""
#: ../../CONTRIBUTING.rst:185 2be83e33a90a4c7aac1dc519fe172e51
msgid ""
"Check that dependencies are up to date with ``uv sync --all-extras "
"--upgrade`` and update dependencies accordingly in separated commits;"
msgstr ""
#: ../../CONTRIBUTING.rst:186 1abd3d600ac0411fb999b304cb13e51e
msgid ""
"Check that tests are still green for every supported python version, and "
"that coverage is still at 100%, by running ``uv run tox``;"
msgstr ""
#: ../../CONTRIBUTING.rst:187 88370dc2d9c94d559e8abe1068bfeba6
msgid ""
"Check that the demo environments are still working, both the local and "
"the Docker one;"
msgstr ""
#: ../../CONTRIBUTING.rst:188 bd8ff970e1424dd38acf71ccfb62487c
msgid ""
"Check that the :ref:`development/changelog:Release notes` section is "
"correctly filled up;"
msgstr ""
#: ../../CONTRIBUTING.rst:189 b04308c3c9df45e0b23f2da5c5dc3ef3
msgid "Increase the version number in ``pyproject.toml``;"
msgstr ""
#: ../../CONTRIBUTING.rst:190 ebaff21b4fe04971885873f4401a38e9
msgid "Commit with ``git commit``;"
msgstr ""
#: ../../CONTRIBUTING.rst:191 5e75ca58d33e45d8b0035b7f1a293346
msgid "Build with ``uv build``;"
msgstr ""
#: ../../CONTRIBUTING.rst:192 3cc2fb6a7cc745cea14593e07ce87228
msgid ""
"Publish on test PyPI with ``uv publish --publish-url "
"https://test.pypi.org/legacy/``;"
msgstr ""
#: ../../CONTRIBUTING.rst:193 7090fbe6930449f78048558eb4be201b
msgid ""
"Install the test package somewhere with ``pip install --extra-index-url "
"https://test.pypi.org/simple --upgrade canaille``. Check that everything "
"looks fine;"
msgstr ""
#: ../../CONTRIBUTING.rst:194 03da5714d2994f5ea82a0c7764e27d72
msgid "Publish on production PyPI ``uv publish``;"
msgstr ""
#: ../../CONTRIBUTING.rst:195 8635aa0c6a154b02b4f1b5e4558433f0
msgid "Tag the commit with ``git tag XX.YY.ZZ``;"
msgstr ""
#: ../../CONTRIBUTING.rst:196 bce1c91d899e43858a763368a8877cfc
msgid ""
"Push the release commit and the new tag on the repository with ``git push"
" --tags``."
msgstr ""

25
doc/locales/fr_FR/LC_MESSAGES/development/index.po Normal file
View file

@ -0,0 +1,25 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/development/index.rst:2 15f05d4dbb7d48148dfddc6d8a44131c
msgid "Development"
msgstr ""

491
doc/locales/fr_FR/LC_MESSAGES/development/specifications.po Normal file
View file

@ -0,0 +1,491 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/development/specifications.rst:2 51c59cc44a2c41e5b41657630b0f0294
msgid "Specifications"
msgstr ""
#: ../../doc/development/specifications.rst:4 a7ce3c060d6843c58af29aa75bef3528
msgid ""
"This page details which specifications are implemented in Canaille, and "
"compares Canaille with other well-known identity providers."
msgstr ""
#: ../../doc/development/specifications.rst:7 9693a4b998134bc08184a485a6a85b08
msgid "State of the specs in Canaille"
msgstr ""
#: ../../doc/development/specifications.rst:10 f8563fa341304001ba3c2c550055a0e4
msgid "OAuth2"
msgstr ""
#: ../../doc/development/specifications.rst:12 b901b23486424b70ab53ad600c552405
msgid "✅ `RFC6749: OAuth 2.0 Framework <https://tools.ietf.org/html/rfc6749>`_"
msgstr ""
#: ../../doc/development/specifications.rst:13 93b26d88ddfb4c24a975c86fafdca3f9
msgid ""
"✅ `RFC6750: OAuth 2.0 Bearer Tokens "
"<https://tools.ietf.org/html/rfc6750>`_"
msgstr ""
#: ../../doc/development/specifications.rst:14 8d4d4d01ff5843faa2bb7c6da2d5a43e
msgid ""
"✅ `RFC7009: OAuth 2.0 Token Revocation "
"<https://tools.ietf.org/html/rfc7009>`_"
msgstr ""
#: ../../doc/development/specifications.rst:15 3bf9581f076d491baa8e2c23f3e1d39c
msgid ""
"❌ `RFC7523: JWT Profile for OAuth 2.0 Client Authentication and "
"Authorization Grants <https://tools.ietf.org/html/rfc7523>`_"
msgstr ""
#: ../../doc/development/specifications.rst:16 6ae1c3b70dfa4a10805ed2d7a7acda83
msgid ""
"✅ `RFC7591: OAuth 2.0 Dynamic Client Registration Protocol "
"<https://tools.ietf.org/html/rfc7591>`_"
msgstr ""
#: ../../doc/development/specifications.rst:17 9ccadb41365c46cb815b73b88fdc8fc3
msgid ""
"✅ `RFC7592: OAuth 2.0 Dynamic Client Registration Management Protocol "
"<https://tools.ietf.org/html/rfc7592>`_"
msgstr ""
#: ../../doc/development/specifications.rst:18 fbbef7cd04a04efe8daa71b13569dfd6
msgid ""
"✅ `RFC7636: Proof Key for Code Exchange by OAuth Public Clients "
"<https://tools.ietf.org/html/rfc7636>`_"
msgstr ""
#: ../../doc/development/specifications.rst:19 54a6ec4e30b94788a749bcfcd52149ab
msgid ""
"✅ `RFC7662: OAuth 2.0 Token Introspection "
"<https://tools.ietf.org/html/rfc7662>`_"
msgstr ""
#: ../../doc/development/specifications.rst:20 9829a6dc3aca4e2589ce52b529e26208
msgid ""
"✅ `RFC8414: OAuth 2.0 Authorization Server Metadata "
"<https://tools.ietf.org/html/rfc8414>`_"
msgstr ""
#: ../../doc/development/specifications.rst:21 c4f9b42536a94adfab90da79ef7ec77e
msgid ""
"❌ `RFC8428: OAuth 2.0 Device Authorization Grant "
"<https://tools.ietf.org/html/rfc8428>`_"
msgstr ""
#: ../../doc/development/specifications.rst:22 b46f678389a140d28f571fa65ef508c0
msgid ""
"❌ `RFC8693: OAuth 2.0 Token Exchange "
"<https://tools.ietf.org/html/rfc8693>`_"
msgstr ""
#: ../../doc/development/specifications.rst:23 762b143d7a3343ea96d19d65b5d20d33
msgid ""
"❌ `RFC8705: OAuth 2.0 Mutual-TLS Client Authentication and Certificate-"
"Bound Access Tokens <https://tools.ietf.org/html/rfc8705>`_"
msgstr ""
#: ../../doc/development/specifications.rst:24 b0149247e739412db12e27f13ff03105
msgid ""
"❌ `RFC8707: Resource Indicators for OAuth 2.0 "
"<https://tools.ietf.org/html/rfc8707>`_"
msgstr ""
#: ../../doc/development/specifications.rst:25 343ed4b6215343d9a44d5807c6d6b1a7
msgid ""
"❌ `RFC9068: JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens "
"<https://tools.ietf.org/html/rfc9068>`_"
msgstr ""
#: ../../doc/development/specifications.rst:26 a6e3b2cb30c94a5f9922b7a184a36847
msgid ""
"❌ `RFC9101: OAuth 2.0 JWT-Secured Authorization Request (JAR) "
"<https://tools.ietf.org/html/rfc9101>`_"
msgstr ""
#: ../../doc/development/specifications.rst:27 f971ecf0bf144571891910d1f2437c6e
msgid ""
"❌ `RFC9126: OAuth 2.0 Pushed Authorization Requests "
"<https://tools.ietf.org/html/rfc9126>`_"
msgstr ""
#: ../../doc/development/specifications.rst:28 fc3312ad72d24fbdbc4bc3bdc41f4975
msgid ""
"❌ `RFC9207: OAuth 2.0 Authorization Server Issuer Identification "
"<https://tools.ietf.org/html/rfc9207>`_"
msgstr ""
#: ../../doc/development/specifications.rst:29 6ea9045b875440f0b158c45cfbbb5da3
msgid ""
"❌ `RFC9394: OAuth 2.0 Rich Authorization Requests <https://www.rfc-"
"editor.org/rfc/rfc9396.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:30 6e9ed12e1d5f4cee9063c63f16639809
msgid ""
"❌ `OAuth2 Multiple Response Types <https://openid.net/specs/oauth-v2"
"-multiple-response-types-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:31 c179be51a4324be6b1822dc762c64017
msgid ""
"❌ `OAuth2 Form Post Response Mode <https://openid.net/specs/oauth-v2"
"-form-post-response-mode-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:34 c4536360f9c34e52bc7c196ca083864c
msgid "OpenID Connect"
msgstr ""
#: ../../doc/development/specifications.rst:36 1bac333e62e748228f06d4cd4b3f79cd
msgid ""
"✅ `OpenID Connect Core <https://openid.net/specs/openid-connect-"
"core-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:37 177f627cd2c844afab7f72adc78309fe
msgid ""
"✅ `OpenID Connect Discovery <https://openid.net/specs/openid-connect-"
"discovery-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:38 46d6426d7eb845aea7af55e24b5cbfde
msgid ""
"✅ `OpenID Connect Dynamic Client Registration <https://openid.net/specs"
"/openid-connect-registration-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:39 a38ba47e2d234fc588e8515e052117d5
msgid ""
"✅ `OpenID Connect RP Initiated Logout <https://openid.net/specs/openid-"
"connect-rpinitiated-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:40 12b246f565674f6d8a709b119eaa077e
msgid ""
"❌ `OpenID Connect Session Management <https://openid.net/specs/openid-"
"connect-session-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:41 244a1b92839c4b30b556b2d5eb88a8c4
msgid ""
"❌ `OpenID Connect Front Channel Logout <https://openid.net/specs/openid-"
"connect-frontchannel-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:42 32210e35cc3644d88a7d6b8088b82665
msgid ""
"❌ `OpenID Connect Back Channel Logout <https://openid.net/specs/openid-"
"connect-backchannel-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:43 9bb794d88635474291dd79ab7f85184c
msgid ""
"❌ `OpenID Connect Back Channel Authentication Flow "
"<https://openid.net/specs/openid-client-initiated-backchannel-"
"authentication-core-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:44 729d88fd26854bc8a0f1458669120be0
msgid ""
"❌ `OpenID Connect Core Error Code unmet_authentication_requirements "
"<https://openid.net/specs/openid-connect-unmet-authentication-"
"requirements-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:45 e9353600371c470f8a92e7b50c324427
msgid ""
"✅ `Initiating User Registration via OpenID Connect 1.0 "
"<https://openid.net/specs/openid-connect-prompt-create-1_0.html>`_"
msgstr ""
#: ../../doc/development/specifications.rst:48
#: ../../doc/development/specifications.rst:64 9786673925304d99b1e09ab9fb786761
#: e5c086aeada14b3fbd12df6a3150ddf7
msgid "SCIM"
msgstr ""
#: ../../doc/development/specifications.rst:50 cdaeb22c0b254f32be04c950554ddcf2
msgid ""
"❌ `RFC7642: System for Cross-domain Identity Management: Definitions, "
"Overview, Concepts, and Requirements <https://www.rfc-"
"editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../../doc/development/specifications.rst:51 1d65726f19194dcfb004e9d50c72164c
msgid ""
"❌ `RFC7643: System for Cross-domain Identity Management: Core Schema "
"<https://www.rfc-editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../../doc/development/specifications.rst:52 fb0be7fecb5f467f9162dd9eec3f0e1a
msgid ""
"❌ `RFC7644: System for Cross-domain Identity Management: Protocol "
"<https://www.rfc-editor.org/rfc/rfc7642>`_"
msgstr ""
#: ../../doc/development/specifications.rst:55 dc882e47451d47009071e021bce6d0ae
msgid "Comparison with other providers"
msgstr ""
#: ../../doc/development/specifications.rst:57 367a086f3b274c379d00b9d3f7451c10
msgid "Here is a feature comparison with other OpenID Connect server software."
msgstr ""
#: ../../doc/development/specifications.rst:59 6d484ee0fa4f45e18d14992b444b5da4
msgid ""
"Canaille voluntarily only implements the OpenID Connect protocol to keep "
"its codebase simple."
msgstr ""
#: ../../doc/development/specifications.rst:62 4fdd66f3032141698f64213f7f9184ae
msgid "Software"
msgstr ""
#: ../../doc/development/specifications.rst:62 5e6caeffa6a44dfebe3eaba4d692f509
msgid "Project"
msgstr ""
#: ../../doc/development/specifications.rst:62 5fb63fe0df34482fb1cf4148afb11b4e
msgid "Protocols implementations"
msgstr ""
#: ../../doc/development/specifications.rst:62 b542f41780b54cddbcaa336caef7399b
msgid "Backends"
msgstr ""
#: ../../doc/development/specifications.rst:64 355f58ee2ecb43ea94091562af7d74cd
msgid "FLOSS"
msgstr ""
#: ../../doc/development/specifications.rst:64 86dc1e42e8ee4cbcacd8d8cb43b6a08a
msgid "Language"
msgstr ""
#: ../../doc/development/specifications.rst:64 a1da5f980cb349e6b6d4ce525b8931cd
msgid "LOC"
msgstr ""
#: ../../doc/development/specifications.rst:64 6860a212b6b040d889bc0e351071b7d4
msgid "OIDC"
msgstr ""
#: ../../doc/development/specifications.rst:64 ef9c2076ea46467aad1d9ca648f7f111
msgid "SAML"
msgstr ""
#: ../../doc/development/specifications.rst:64 01c4b6fc96cf430f8932876fca8122fc
msgid "CAS"
msgstr ""
#: ../../doc/development/specifications.rst:64 ab7b125e263945e38b55ab23a5c48b03
msgid "LDAP"
msgstr ""
#: ../../doc/development/specifications.rst:64 eed21c65e10546848ea44ae9c158b17c
msgid "SQL"
msgstr ""
#: ../../doc/development/specifications.rst:66 4646c46739f74295bb793fa497beac7f
msgid "Canaille"
msgstr ""
#: ../../doc/development/specifications.rst:66
#: ../../doc/development/specifications.rst:68
#: ../../doc/development/specifications.rst:70
#: ../../doc/development/specifications.rst:72
#: ../../doc/development/specifications.rst:74
#: ../../doc/development/specifications.rst:76
#: ../../doc/development/specifications.rst:78
#: ../../doc/development/specifications.rst:80
#: ../../doc/development/specifications.rst:82
#: ../../doc/development/specifications.rst:84
#: ../../doc/development/specifications.rst:86
#: ../../doc/development/specifications.rst:88 00293b6e57934791a96bb65ea530e7e3
#: 01dbc5d8500441ae826f7bb6c44184ee 0e45c0b5fb8a455b825489ef91815aab
#: 1883b31912d845d780648dad9f2c7d5f 1b5972edea444b8f96e3c0e500ec6ed3
#: 2357097a3ffd43a5857e088ea7621fd7 24962f9ba6f94d71a57951f93da5c6ab
#: 26a2bac48d6241d7b32da47d9cb0fd03 278244ffdee941dc805168676ef552c8
#: 2e5c12b7d21547b8804d029415b457c8 2f277618e8ec414aa45d8106e488681a
#: 2fdeb6b4b44349ddb453bc46b19c83a6 36975ba3452146d1bc37fe93b1d60a06
#: 3c6cbfc7fc814259b1a9e713d9a28fa2 440ad3e13b164b1283d4dddd77b8a83f
#: 4717b3efb8374abe81b40288d6723d91 4b4d576e661e470e925471981828e3f4
#: 4de9003654ed4009a37269e47f9fc650 5157da20dfe7472d924b475d0bc6ef00
#: 58462071871e4a508c73293cb88ddba0 5e8e224f803942c2b777233d3460002f
#: 6481d1cbfbda4977a528e311cdb6e45a 64b1ba5f02d949e18e5e50ba43a565cf
#: 680ea8f447ca46bbb03083506be230d3 6a2575788fbc4d8bb4401d564c8b29de
#: 6def3fc95d7749e68dee237357a6520d 6e247f54da384c19af348447c679a0a4
#: 76a44c050d7f452088ec710c29f9468a 77dd41e02a5d4991ad02046266c3da94
#: 7cabbe22b77e416aaa0ebaa6515d6826 7f43f9c1d41b4b47840621d27460386b
#: 80f4793cb22b4d498847a665504c28d4 87f39b103616430298baa9af6b1271bf
#: 8c1ee96d1d4d4f7881ecf966281e95df 8e6cbb670d1848cca11a08071f5506ad
#: 979bc49081c3450b810383be914dfa0f 98a3414fac4845c7855b49beaf1269b3
#: a03168cd752049cbb5a68f0773c27829 a66547d346ad4979bc23767ec423f3ca
#: aa29a491f5f1472587243f1b902dfef1 abfe8861b9734fe7a0168ce8bcbe0747
#: ac5d1add8dd2470298644d9d0fc90b71 b095dbb17ffb4397839efb52dbb87144
#: b429c62a736943a4966d5ae9be588be0 b8ba6e7a47584a4e81a3f4329bbfad6d
#: b8d6c565a4334f2ea9a6bae0529571ea be6cb24ed08c40c485299d3ca1055164
#: c51b21470fab4ab085f54916088046d1 c9e8569829e94b5781080d8ccb76dfaa
#: ce8c0c10adea474692578f0a43b0ce44 ce9ff7f88334402bbdf2209311c57ac0
#: d3c8bf29f67348bda1b295eee5389554 d72946d0f55e40cc9114dd63fb5562ff
#: d8009cabba824e8a95aafa929a92f89f de9e4a16c0eb40139020df82932fc8e0
#: e0047cbe13924a94aed567b6df998bcd e67ac152809e4b41904a0ace000bd468
#: e7fb6b76aba4412d90acee023ea0dcad ee37067b5b034fe88895e5d4172fd357
#: f4424c75ebf5412db2f9821ff0865a36 f5d1cd95ba594da083656eeb12708d54
#: f681b918be214fd7ae82f55767672a84 f937b44ef8484c7d8b5343d6097e1827
msgid "✅"
msgstr ""
#: ../../doc/development/specifications.rst:66
#: ../../doc/development/specifications.rst:72
#: ../../doc/development/specifications.rst:74 3ccef219dd8c477b83d63ac89a4628e8
#: 53af1c5800bf4065ae54d6d3fed76f74 e675a5e8ceb145cd95b802b537a7e503
msgid "Python"
msgstr ""
#: ../../doc/development/specifications.rst:66 55d8af1bbebd4ef9b87c918cbe6c63c0
msgid "10k"
msgstr ""
#: ../../doc/development/specifications.rst:66
#: ../../doc/development/specifications.rst:68
#: ../../doc/development/specifications.rst:70
#: ../../doc/development/specifications.rst:72
#: ../../doc/development/specifications.rst:74
#: ../../doc/development/specifications.rst:76
#: ../../doc/development/specifications.rst:78
#: ../../doc/development/specifications.rst:82
#: ../../doc/development/specifications.rst:86
#: ../../doc/development/specifications.rst:88 0ca4ec4e0e36486597b620c01710ede2
#: 0d8be7ed0dd04e7aacdab8c88bbde44f 10d4091b215047ec8ac2fe800c138bc2
#: 23374fd3c7854a519ec633a63306212f 271a7490fdb548d2bed49a96984704ba
#: 28b95cc1d4b54403beb65719a6a0a44d 2d146d48e0b54a28ad1950749bd515b7
#: 45a986934d4d492b9dfa18a4127d6ef9 4d851a9f3cbd43beb53c65b8ff05baee
#: 50f6ec62752848868fcb308ab63cc924 7af084bb69fa4edcaa102e20f361e23b
#: 833072d393d04be79950691b5f124d3f 8638185efb444679ab524a599085007e
#: 9deb93b33a6c4bf68fec09cfc0703a79 b1bd472561e14226bc0d15889e2ee0cf
#: b4668a65b4af46e198f3765ef1c43102 b5e6ca29e6334015bf61656c832464c2
#: c0dece63fd6f49039a7a522f81d417c0 ec8938b15b76427eaf45b604c4e966ee
msgid "❌"
msgstr ""
#: ../../doc/development/specifications.rst:68 174c40b07c47456cbfcecc5f1aaa7aa3
msgid "`Auth0`_"
msgstr ""
#: ../../doc/development/specifications.rst:68
#: ../../doc/development/specifications.rst:78
#: ../../doc/development/specifications.rst:80
#: ../../doc/development/specifications.rst:88 10089c17dd034fdabaf398ab5d8b0dd4
#: 15817ce6f87540a19809b41de19081e4 3cc58548a2c3408384b260f3ebc1f4b2
#: 490c945f86a449019cb6426b6d6ef8ac 59a7c804697644d7aa483f4964bde66b
#: 7a560e268e94470387a5a260c87d709e 92e1fd71f69d44819434698949a46567
#: 9fa9ffd2119844f085e9fa700f58be6c c15a675d112448f496bf71ad7d1cfcb5
msgid "❔"
msgstr ""
#: ../../doc/development/specifications.rst:70 697388cfa36a4b208c5a2099201b5452
msgid "`Authelia`_"
msgstr ""
#: ../../doc/development/specifications.rst:70
#: ../../doc/development/specifications.rst:82 3cbf4ade038d48d8bf888c2aa06bce50
#: 4b4504f562e44862900606dbb8915b0c
msgid "Go"
msgstr ""
#: ../../doc/development/specifications.rst:70
#: ../../doc/development/specifications.rst:82 19b7f1f58631476c9cbbd616ab8ac70b
#: d493f60bd51c493b852256574a34b5f2
msgid "50k"
msgstr ""
#: ../../doc/development/specifications.rst:72 b836b3e6fd19456f956d1b547f0de413
msgid "`Authentic2`_"
msgstr ""
#: ../../doc/development/specifications.rst:72 f37a11dc4f5a40f78f60d69c27a0dc4d
msgid "65k"
msgstr ""
#: ../../doc/development/specifications.rst:74 8a058ec3fd37473fb49a681ff210a6a2
msgid "`Authentik`_"
msgstr ""
#: ../../doc/development/specifications.rst:74 2bcb15a8634f49a9bd61534d212878b0
msgid "55k"
msgstr ""
#: ../../doc/development/specifications.rst:76 2210617edefe419f9cb47dc6b57920b6
msgid "`CAS`_"
msgstr ""
#: ../../doc/development/specifications.rst:76
#: ../../doc/development/specifications.rst:80
#: ../../doc/development/specifications.rst:84 4230943e8b00424ca185ec2dfc44a471
#: 71af08dffe3e4b06ab43a5a7babb784b 9e72b5d3fb9640e2b5369ec4fa8d0a78
msgid "Java"
msgstr ""
#: ../../doc/development/specifications.rst:76 ff56d27fde11433b982d1a133c733e85
msgid "360k"
msgstr ""
#: ../../doc/development/specifications.rst:78 46b4a92a2c564ee6a3a1fc2487b23d1f
msgid "`Connect2id`_"
msgstr ""
#: ../../doc/development/specifications.rst:80 b1faedc73a864d72b858c85a712322f0
msgid "`Gluu`_"
msgstr ""
#: ../../doc/development/specifications.rst:82 7f52b801d5dd4d4f8d9d62c18b595d47
msgid "`Hydra`_"
msgstr ""
#: ../../doc/development/specifications.rst:84 349f9919048b4d9da7a72a321c10f9f7
msgid "`Keycloak`_"
msgstr ""
#: ../../doc/development/specifications.rst:84 6aae961ac7d14623b453e34e0a3ec1f1
msgid "600k"
msgstr ""
#: ../../doc/development/specifications.rst:86 2d37d2699f7a4b63bc98b3ff41b0642e
msgid "`LemonLDAP`_"
msgstr ""
#: ../../doc/development/specifications.rst:86 eb1b85f500ff47a3b20ec299df109168
msgid "Perl"
msgstr ""
#: ../../doc/development/specifications.rst:86 59be9d49572942058056ceb2588ce133
msgid "130k"
msgstr ""
#: ../../doc/development/specifications.rst:88 5350f918d9c54b7f87b2134183072fd7
msgid "`Okta`_"
msgstr ""

664
doc/locales/fr_FR/LC_MESSAGES/features.po Normal file
View file

@ -0,0 +1,664 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/features.rst:9 4fb1af73d4c74a84b97fb07d0872616c
msgid "Features"
msgstr ""
#: ../../doc/features.rst:11 f533903320bb40bcb2e70ec742e83995
msgid ""
"Here are the different features that Canaille provides. You can enable "
"any of those features with the :doc:`configuration "
"<references/configuration>` to fit any :doc:`use cases <usecases>` you "
"may meet. Check our :ref:`roadmap <features:Roadmap>` to see what is "
"coming next."
msgstr ""
#: ../../doc/features.rst:15 01c0632f78e54464941ef63a9602dc60
msgid ""
"Users can interact with Canaille through its :ref:`web interface "
"<features:Web interface>` and administrators can also use its "
":ref:`command line interface <features:Command line interface>`. Canaille"
" can handle data stored in different :ref:`database backends "
"<features:Backends>`."
msgstr ""
#: ../../doc/features.rst:19 64941cdc6da64c95b29a81989ccb229f
msgid "Web interface"
msgstr ""
#: ../../doc/features.rst:21 29bcaee093ff460a9cc3810663a729ba
msgid ""
"Canaille web interface can be used either in :doc:`production "
"environments <tutorial/deployment>` or locally for development purposes."
msgstr ""
#: ../../doc/features.rst:26 294fd4be22454d63bf11372353b61b6b
msgid "Profile management"
msgstr ""
#: ../../doc/features.rst:28 ../../doc/features.rst:217
#: 25fc422a39a14e1792ec6cd7fe264186 45e94f3a06424a1f9e6d70aa2caae471
msgid "Profile"
msgstr ""
#: ../../doc/features.rst:33 0f6f25e5ba824a089c29ffc189e3d9fa
msgid "Canaille provides an interface to manage user profiles."
msgstr ""
#: ../../doc/features.rst:35 a9d65d4febee4017b66ba6bb0625cc56
msgid ""
"The exact list of displayed fields, and whether they are :attr:`writable "
"<canaille.core.configuration.ACLSettings.WRITE>` or :attr:`read-only "
"<canaille.core.configuration.ACLSettings.READ>` depends on the user "
":class:`Access Control List settings (ACL) "
"<canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../../doc/features.rst:37 a484e00099a34cb392f066e6ecf7b4da
msgid ""
"Depending on their ACL :class:`permissions "
"<canaille.core.configuration.Permission>`, users can either be allowed to"
" edit their own profile, edit any user profile, or do nothing at all."
msgstr ""
#: ../../doc/features.rst:42 17a358cc687f40baa93945f60bf2450c
msgid "Email confirmation"
msgstr ""
#: ../../doc/features.rst:44 80e5ef23503145249170a2e3a625bbd7
msgid ""
"If the :attr:`email confirmation feature "
"<canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION>` is "
"enabled, any modification or addition of a profile email will send a "
"confirmation mail to the new address. The mail will contain a link that "
"users will need to click on to confirm their email address."
msgstr ""
#: ../../doc/features.rst:46 ccaf12399e2c40ce9220365c17d74104
msgid ""
"Users with :attr:`user management permission "
"<canaille.core.configuration.Permission.MANAGE_USERS>` can set user "
"emails without confirmation though."
msgstr ""
#: ../../doc/features.rst:51 7116048766294e9abe6bf44cbe2f45f9
msgid "Group management"
msgstr ""
#: ../../doc/features.rst:53 ../../doc/features.rst:140
#: 2582411685fc4e3e805cb77dd0463798 df947bdf6ba344d38f554bef593d3741
msgid "Group edition"
msgstr ""
#: ../../doc/features.rst:58 11e72b5c82144b689b036ace6700843c
msgid ""
"In a similar fashion than :ref:`profile management "
"<feature_profile_management>` Canaille provides an interface to manage "
"user groups."
msgstr ""
#: ../../doc/features.rst:60 d11e558897b04ffababb10318a6b5f2b
msgid ""
"The group management is quite simple at the moment and consists in a "
"group name and description, and the list of its members. Group membership"
" can be use as :attr:`ACL Filter "
"<canaille.core.configuration.ACLSettings.FILTER>` to define user "
"permissions."
msgstr ""
#: ../../doc/features.rst:63 ../../doc/features.rst:83
#: ../../doc/features.rst:149 452843219c6c46e9bacd90e4adb242b7
#: 7780e9f22e1e43ab910c74b8966cb7a7 d11cd0241ede4993b6af5a5310a2950b
msgid "Todo"
msgstr ""
#: ../../doc/features.rst:64 a7c91346331a4c6d8d406559aee9e4ad
msgid ""
"At the moment adding an user to a group can only be achieved by the user "
"settings page, but we are :issue:`working to improve this <192>`."
msgstr ""
#: ../../doc/features.rst:66 ddac4f63bacf466da3c81a45deed362b
msgid ""
"Group management can be enable with a :attr:`dedicated user permission "
"<canaille.core.configuration.Permission.MANAGE_GROUPS>`."
msgstr ""
#: ../../doc/features.rst:69 02fc1852031348109c514910af49d79d
msgid ""
"Due to limitations in the :ref:`LDAP backend <tutorial/databases:LDAP>`, "
"groups must have at least one member. Thus it is not possible to remove "
"the last user of a group without removing the group."
msgstr ""
#: ../../doc/features.rst:75 9138d2dc221e48a89db82c2f90cb6004
msgid "User authentication"
msgstr ""
#: ../../doc/features.rst:77 599f5b4f86fc4bfa8a2f74c091509be6
msgid ""
"Unless their account is :ref:`locked <feature_account_locking>`, users "
"can authenticate with a login and a password."
msgstr ""
#: ../../doc/features.rst:81 fc9cfcefd5b04ed9979f03f7b23f599a
msgid ""
"For security reasons, it won't be told to users if they try to sign in "
"with an unexisting logging, unless explicitly :attr:`set in the "
"configuration "
"<canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS>`."
msgstr ""
#: ../../doc/features.rst:83 560da801dd7148caa69f2890c7edb1ad
msgid ""
":ref:`LDAP backend <tutorial/databases:LDAP>` users can define which "
":class:`user field <canaille.core.models.User>` should be used as the "
"login (such as :attr:`~canaille.core.models.User.user_name` or "
":attr:`~canaille.core.models.User.emails`) using a :attr:`configuration "
"parameter "
"<canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER>`, but "
"other backends can only login using "
":attr:`~canaille.core.models.User.user_name`. We are :issue:`working to "
"improve this <196>`."
msgstr ""
#: ../../doc/features.rst:88 15d60dc74987433abaa7715bc2a8b1e8
msgid "User registration"
msgstr ""
#: ../../doc/features.rst:90 c75a651a12fb4c40b52dbd5f329b410a
msgid ""
"Users can create accounts on Canaille if the feature :attr:`registration "
"feature <canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION>` "
"is enabled. They will be able to fill a registration form with the fields"
" detailed in the default :class:`ACL settings "
"<canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../../doc/features.rst:92 e519d1c77da3425f9b295f18c14992c6
msgid ""
"If :attr:`email confirmation "
"<canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION>` is also "
"enabled, users will be sent a confirmation link to their email address, "
"on which they will need to click in order to finalize their registration."
msgstr ""
#: ../../doc/features.rst:97 ../../doc/features.rst:99
#: 59c5b1831e6e459a8172647afa544c70 994ef18eb3c541db872d00f1dc525459
msgid "User invitation"
msgstr ""
#: ../../doc/features.rst:104 38af20e16103418995dc773d712f3a42
msgid ""
"If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is "
"configured, users with :attr:`user management permission "
"<canaille.core.configuration.Permission.MANAGE_USERS>` can create an "
"invitation link for one user."
msgstr ""
#: ../../doc/features.rst:106 cb210bc27c7242418d4e32754a9ec962
msgid ""
"The link goes to a registration form, even if regular :ref:`user "
"registration <feature_user_registration>` is disabled."
msgstr ""
#: ../../doc/features.rst:108 ea267ce493e7490cb3eba5254f5cacdb
msgid "It can be automatically sent by email to the new user."
msgstr ""
#: ../../doc/features.rst:113 2bcaa899d56a477bbd3d74aeb27c9c80
msgid "Account locking"
msgstr ""
#: ../../doc/features.rst:115 ccb64741bf69439baf2151d317752457
msgid ""
"If Canaille is plugged to a :ref:`backend <features:Backends>` that "
"supports it, user accounts can be locked by users with :attr:`user "
"management permission "
"<canaille.core.configuration.Permission.MANAGE_USERS>`. The lock date can"
" be set instantly or at a given date in the future."
msgstr ""
#: ../../doc/features.rst:118 a72241fb75fc4d9eac776773d4b5f4ea
msgid "At the moment a user account is locked:"
msgstr ""
#: ../../doc/features.rst:120 2faef50ed550468c99aaa015e00e9365
msgid "their open sessions will be closed;"
msgstr ""
#: ../../doc/features.rst:121 ed34e7ffc4b348f291529b9783470441
msgid "they won't be able to sign in again;"
msgstr ""
#: ../../doc/features.rst:122 3f6f9480b62b4c9787464f801bd2d615
msgid "no new OIDC token will be issued;"
msgstr ""
#: ../../doc/features.rst:124 27dff00fd7734b5e939f9556d8f393cc
msgid ""
"User accounts must be manually unlocked by an administrator for the users"
" to regain access to those actions."
msgstr ""
#: ../../doc/features.rst:129 18877ac7cd334a7e805f249be9dda7bd
msgid "Account deletion"
msgstr ""
#: ../../doc/features.rst:131 466be52a8d3742f690a40c60282e191d
msgid ""
"Users with the :attr:`account deletion permission "
"<canaille.core.configuration.Permission.DELETE_ACCOUNT>` are allowed to "
"delete their own account."
msgstr ""
#: ../../doc/features.rst:133 6d7c914e79544587970b4dbb598b5c5e
msgid ""
"Users that also have the :attr:`user management permission "
"<canaille.core.configuration.Permission.MANAGE_USERS>` are also allowed "
"to delete other users accounts."
msgstr ""
#: ../../doc/features.rst:138 bc8a76ec346746f2b515dcb3b1cf4734
msgid "Password recovery"
msgstr ""
#: ../../doc/features.rst:145 a9d170d27fff47ef9463c8025637c636
msgid ""
"If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is "
"configured and the :attr:`password recovery feature "
"<canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_RECOVERY>` is "
"enabled, then users can ask for a password reset email if they cannot "
"remember their password."
msgstr ""
#: ../../doc/features.rst:147 5a6261c226d64919a2880c50a30ae85f
msgid ""
"The email will be sent to the email addresses filled in their profile, "
"and will contain a link that will allow them to choose a new password. ."
msgstr ""
#: ../../doc/features.rst:151 8e5fc9b32b9d4fe3a70e5af66a2adbe6
msgid "Check that password recovery is disabled on locked accounts."
msgstr ""
#: ../../doc/features.rst:156 1c5599b3936243d6915faf737cc31202
msgid "Password reset"
msgstr ""
#: ../../doc/features.rst:158 5a6de5b373b9482e98f5b746eaaba299
msgid ""
"If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is "
"configured, :attr:`user management permission "
"<canaille.core.configuration.Permission.MANAGE_USERS>` can send password "
"reset mails to users. The mails contains a link that allow users to "
"choose a new password without having to retrieve the old one."
msgstr ""
#: ../../doc/features.rst:164 8dcac96c9eac4b85a5733ef2ac8e70b2
msgid "Password initialization"
msgstr ""
#: ../../doc/features.rst:166 c0d88fbec85f4621972b1157787ca945
msgid ""
"User :attr:`passwords <canaille.core.models.User.password>` are optional."
" If a :class:`mail server <canaille.core.configuration.SMTPSettings>` is "
"configured, when users with no password attempt to sign in, they are "
"invited to click a button that will send them a password initialization "
"mail. The mail contains a link that leads to a form that allows users to "
"choose a password."
msgstr ""
#: ../../doc/features.rst:173 cb684709c95741afb52044d915ad837e
msgid "Password compromission check"
msgstr ""
#: ../../doc/features.rst:175 cc99e8db7a8a4c2397f9466cd156cce3
msgid ""
"If :attr:`password compromission check feature "
"<canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_COMPROMISSION_CHECK>`"
" is enabled, Canaille will check for password compromise on HIBP "
"(https://haveibeenpwned.com/) every time a new password is register. You "
"will need to set an :attr:`admin email "
"<canaille.core.configuration.CoreSettings.ADMIN_EMAIL>`."
msgstr ""
#: ../../doc/features.rst:180 578f4517d38a4c05aa17ca0e79b8e071
msgid "Internationalization"
msgstr ""
#: ../../doc/features.rst:182 679ae11dba4244919195c79384a0ea86
msgid "Translation state"
msgstr ""
#: ../../doc/features.rst:187 6674da14a528481fb5ecd11b163ff0b5
msgid ""
"Canaile will display in your :attr:`preferred language "
"<canaille.core.models.User.preferred_language>` if available, or your "
"browser language if available (and if it is not you can :ref:`help us "
"with the translation <development/contributing:Translations>`). If you "
"prefer, you can also :attr:`force a language "
"<canaille.core.configuration.CoreSettings.FAVICON>` for every users."
msgstr ""
#: ../../doc/features.rst:193 962dc4e9e8464568ad7798304c427aa4
msgid "Lightweight"
msgstr ""
#: ../../doc/features.rst:195 d18981ee0963473eba03eb2d29344a86
msgid ""
"The web interface is lightweight, so everything should load quickly. "
"There is a few Javascript here and there to smooth the experience, but no"
" Javascript at all is needed to use Canaille."
msgstr ""
#: ../../doc/features.rst:199 8ed7acbdc3d948cdb60c98cb5786c51c
msgid "Customizable"
msgstr ""
#: ../../doc/features.rst:201 98abf7572fac4402b05a543a5f3fcf70
msgid ""
"The default theme should be good enough for most usages. It has a dark "
"theme, display well on mobile, and let you choose a :attr:`logo "
"<canaille.core.configuration.CoreSettings.LOGO>` and a :attr:`favicon "
"<canaille.core.configuration.CoreSettings.FAVICON>`."
msgstr ""
#: ../../doc/features.rst:204 cdc5b7d069fb412d85a1bb73277b41f3
msgid ""
"If you need more you can also use a :attr:`custom theme "
"<canaille.core.configuration.CoreSettings.THEME>`."
msgstr ""
#: ../../doc/features.rst:209 061216875fe84e5e8ff84b4d74ddcdfd
msgid "OpenID Connect"
msgstr ""
#: ../../doc/features.rst:211 475e8e86054b4e1aae2eb5c5019b05b9
msgid ""
"Canaille implements a :ref:`subset<development/specifications:State of "
"the specs in Canaille>` of the OAuth2/OpenID Connect specifications . "
"This allows to provide :abbr:`SSO (Single Sign-On)` and :abbr:`SLO "
"(Single Log-On)` to applications plugged to Canaille."
msgstr ""
#: ../../doc/features.rst:215 e1f9ff739e0740a992c3a6a229f58f2f
msgid "Consent management"
msgstr ""
#: ../../doc/features.rst:223 f0f4792344ff4efb9152d9537ffdb61a
msgid ""
"Users can give their consent to application requesting access to their "
"personal information, and then revoke those consent at their will."
msgstr ""
#: ../../doc/features.rst:227 901e75d3e39d47c283c795f4c81ef313
msgid "Application management"
msgstr ""
#: ../../doc/features.rst:229 b61e5ff4d80546b8bf9f26396b041024
msgid ""
"Users with the right :attr:`permission "
"<canaille.core.configuration.Permission.MANAGE_OIDC>` can manager OIDC "
"clients through the web interface."
msgstr ""
#: ../../doc/features.rst:231 2faf8a6597544e54b9e4cdfd94e8b12d
msgid ""
"In some cases, it might be useful to avoid the consent page for some "
"trusted applications, so clients can be pre-consented."
msgstr ""
#: ../../doc/features.rst:234 e3a2d439803247929d5734a944c67b6e
msgid "Discovery"
msgstr ""
#: ../../doc/features.rst:236 a859e92abe2545ffac1945b84ded46cf
msgid ""
"Canaille implements the :doc:`Discovery specifications "
"<development/specifications>` so most of the applications plugged to "
"Canaille can auto-configure themselves."
msgstr ""
#: ../../doc/features.rst:239 021f852f70e043f8991eb63a1e9fa95b
msgid "Dynamic Client Registration"
msgstr ""
#: ../../doc/features.rst:241 50f5368bb4f34432b78bad50f3bfc970
msgid ""
"Canaille implements the :doc:`Dynamic Client Registration specifications "
"<development/specifications>`, so when the :attr:`feature is enabled "
"<canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN>`,"
" clients can register themselves on Canaille without an administrator "
"intervention."
msgstr ""
#: ../../doc/features.rst:246 737fa417d0994b40bfa131c9f60fe002
msgid "Command Line Interface"
msgstr ""
#: ../../doc/features.rst:248 22dca683e72647c5b1d7c3cb7284bb31
msgid ""
"Canaille comes with a :abbr:`CLI (Command Line Interface)` to help "
"administrators in hosting and management."
msgstr ""
#: ../../doc/features.rst:250 249165589d194a80bafccad23548b445
msgid ""
"There are tools to :ref:`check your configuration <cli_check>` or to "
":ref:`install missing parts <cli_install>`. You can use the CLI to "
":ref:`create <cli_create>`, :ref:`read <cli_get>`, :ref:`update "
"<cli_set>` and :ref:`delete <cli_delete>` models such as :class:`users "
"<canaille.core.models.User>`, :class:`groups "
"<canaille.core.models.Group>` or :class:`OIDC clients "
"<canaille.oidc.basemodels.Client>`."
msgstr ""
#: ../../doc/features.rst:253 40b8bd61352441279c4cd29652f4c1ac
msgid ""
"There are also tools to :ref:`fill your database <cli_populate>` with "
"random objects, for tests purpose for instance."
msgstr ""
#: ../../doc/features.rst:258 f12ee82070274cae980dfd943216d8aa
msgid "Backends"
msgstr ""
#: ../../doc/features.rst:260 33a7e578989247a28cab7f3c62a5d45b
msgid ""
"Canaille can handle data from the most :ref:`common SQL databases "
"<tutorial/databases:SQL>` such as PostgreSQL, MariaDB or SQLite, as well "
"as :ref:`OpenLDAP <tutorial/databases:LDAP>`. It also comes with a no-"
"dependency :ref:`in-memory database <tutorial/databases:Memory>` that can"
" be used in unit tests suites."
msgstr ""
#: ../../doc/features.rst:264 7d48bdc0de0c4311bc833d1a5bfba74a
msgid "Miscellaneous"
msgstr ""
#: ../../doc/features.rst:269 8d32bbd55479403abce70eb8c9bb994f
msgid "Logging"
msgstr ""
#: ../../doc/features.rst:271 5275f23ac2854d5c9194a48ddd5443dd
msgid ""
"Canaille writes :attr:`logs "
"<canaille.core.configuration.CoreSettings.LOGGING>` for every important "
"event happening, to help administrators understand what is going on and "
"debug funky situations."
msgstr ""
#: ../../doc/features.rst:273 b9f379ada02c48b18293ac832faebd4b
msgid ""
"The following security events are logged with the tag [SECURITY] for easy"
" retrieval :"
msgstr ""
#: ../../doc/features.rst:275 32a31a8d8ad34cc18aef5adec77e9a3b
msgid "Authentication attempt"
msgstr ""
#: ../../doc/features.rst:276 553bb32d08e841cb9c4e140ac0de0773
msgid "Password update"
msgstr ""
#: ../../doc/features.rst:277 bfba87a6577c42848d8353bf21233ac6
msgid "Email update"
msgstr ""
#: ../../doc/features.rst:278 711f69f6c65047c1bfbddc6235961247
msgid "Forgotten password mail sent to user"
msgstr ""
#: ../../doc/features.rst:279 b95d47d79d2842738c9b590b76eced39
msgid "Token emission"
msgstr ""
#: ../../doc/features.rst:280 6659cb54ee2c4b27b26b810af990bf79
msgid "Token refresh"
msgstr ""
#: ../../doc/features.rst:281 db0590d0caff45818dffed4a4a6c34f8
msgid "Token revokation"
msgstr ""
#: ../../doc/features.rst:282 cba7d27c08da40edbc1b9fcbe6d30a64
msgid "New consent given for client application"
msgstr ""
#: ../../doc/features.rst:283 d35330606f194040bbc333ba55a884b9
msgid "Consent revokation"
msgstr ""
#: ../../doc/features.rst:288 7c833e8f95e9411fa0aadb6886087873
msgid "A tool for your development and tests"
msgstr ""
#: ../../doc/features.rst:290 76258411ae3b4d849449432f52e84d17
msgid ""
"Thanks to its lightweight :ref:`in-memory database "
"<tutorial/databases:Memory>` and its curated :ref:`dependency list "
"<tutorial/install:Get the code>`, Canaille can be used in the unit test "
"suite of your application, so you can check how it behaves against a real"
" world OpenID Connect server. If you work with python you might want to "
"check :doc:`pytest-iam:index`."
msgstr ""
#: ../../doc/features.rst:292 ac52a0941d9e4bd2b362ecf152aeb68d
msgid ""
"It can also being launched in your development environment, if you find "
"that launching a Keycloak in a Docker container is too heavy for your "
"little web application."
msgstr ""
#: ../../doc/features.rst:294 0efaf00bc4144e27bf54251a6a9bd21e
msgid ""
"It also fits well in continuous integration scenarios. Thanks to its "
":ref:`CLI <feature_cli>`, you can prepare data in Canaille, let your "
"application interact with it, and then check the side effects."
msgstr ""
#: ../../doc/features.rst:297 7a9aa943072042589a5d46ce6298f3e5
msgid "Roadmap"
msgstr ""
#: ../../doc/features.rst:300 ed46b8b841e5494dba2f70bd26de027e
msgid "Bêta version"
msgstr ""
#: ../../doc/features.rst:302 683699158de54b9fb6b281cf025c3d13
msgid ""
"To go out of the current Alpha version we want to achieve the following "
"tasks:"
msgstr ""
#: ../../doc/features.rst:304 748e096bb8d94c01be4a837a50a3f8c0
msgid ":issue:`Configuration validation using pydantic <138>`"
msgstr ""
#: ../../doc/features.rst:307 c9315e497eb840e98135b31e13bbe300
msgid "Stable version"
msgstr ""
#: ../../doc/features.rst:309 c273a186afb04e64b9c0a6935e77a247
msgid ""
"Before we push Canaille in stable version we want to achieve the "
"following tasks:"
msgstr ""
#: ../../doc/features.rst:312 6f25e781a50c4c3b873263ee8b7445c4
msgid "Security"
msgstr ""
#: ../../doc/features.rst:314 afa955100edc4cf69fe911def2c17fe1
msgid ":issue:`Password hashing configuration <175>`"
msgstr ""
#: ../../doc/features.rst:315 83b477b8dd8d4f86a619fb8c69f6334f
msgid ":issue:`Authentication logging policy <177>`"
msgstr ""
#: ../../doc/features.rst:316 86aa13e5c390443dabeb1dac7218c0e4
msgid ":issue:`Intruder lockout <173>`"
msgstr ""
#: ../../doc/features.rst:317 c12a638956a944d8ac8e7630af28728c
msgid ":issue:`Password expiry policy <176>`"
msgstr ""
#: ../../doc/features.rst:318 84e6f66279434b8295367ad2e2aaf493
msgid ":issue:`Multi-factor authentication: Email <47>`"
msgstr ""
#: ../../doc/features.rst:319 89672221e2a549738b6b93ef5a7fa40a
msgid ":issue:`Multi-factor authentication: SMS <47>`"
msgstr ""
#: ../../doc/features.rst:320 22f8692707ee4ef0beec4e65d67b7a24
msgid ":issue:`Multi-factor authentication: OTP <47>`"
msgstr ""
#: ../../doc/features.rst:323 f133501d55674c388d07ebf7d05d7470
msgid "Packaging"
msgstr ""
#: ../../doc/features.rst:325 e7e65e86dcef441c99b85029acc08b69
msgid ":issue:`Nix package <190>`"
msgstr ""
#: ../../doc/features.rst:326 0cc24c93080a4abb89bb5d9c99084083
msgid ":issue:`Docker / OCI package <59>`"
msgstr ""
#: ../../doc/features.rst:329 76fdc47c40d54ef9b77d042b2720bf47
msgid "And beyond"
msgstr ""
#: ../../doc/features.rst:331 4c3e31176fa04cd7ba4d6f335eefd194
msgid ":issue:`OpenID Connect certification <182>`"
msgstr ""
#: ../../doc/features.rst:332 e037868b60534210869e76ff89bf2d12
msgid ":issue:`SCIM support <116>`"
msgstr ""

93
doc/locales/fr_FR/LC_MESSAGES/index.po Normal file
View file

@ -0,0 +1,93 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/index.rst:15 f44fd8eed33248cb86e37736bd2c9a51
msgid "Lightweight Identity and Authorization Management"
msgstr "Serveur d’identité et d'autorisations ultra-léger"
#: ../../doc/index.rst:19 581631e22f4e47098270d48215814ba8
msgid ""
"**Canaille** is a French word meaning *rascal*. It is roughly pronounced "
"**Can I?**, as in *Can I access your data?* Canaille is a lightweight "
"identity and authorization management software. It aims to be very light,"
" simple to install and simple to maintain. Its main features are :"
msgstr ""
#: ../../doc/index.rst:27 d5af5012db4f40efae832c81859a8dc4
msgid "Profile management"
msgstr ""
#: ../../doc/index.rst:31 6a7f0738d1414a18b39ca620be9d7e71
msgid "User profile and groups management, Basic permissions"
msgstr ""
#: ../../doc/index.rst:34 339b2e015a9442ebbf5e94747fcc6250
msgid "User authentication"
msgstr ""
#: ../../doc/index.rst:38 e049fc56882742a2ad91c734bda3472b
msgid ""
"Authentication, registration, email confirmation, \"I forgot my "
"password\" emails"
msgstr ""
#: ../../doc/index.rst:40 b1062145a9da47fdb6c68e6d6f69c034
msgid "SSO"
msgstr ""
#: ../../doc/index.rst:44 9b17b5386fca4972bc24ee5990cfa994
msgid "OpenID Connect identity provider"
msgstr ""
#: ../../doc/index.rst:46 e0788c1957c64cf2908e69ad503ada1e
msgid "Multi-database support"
msgstr ""
#: ../../doc/index.rst:50 0e63c7d9785447b4aae14b4464f1d0f8
msgid "PostgreSQL, Mariadb and OpenLDAP first-class citizenship"
msgstr ""
#: ../../doc/index.rst:52 0e935d0e908a4b2dae80193f7e4f9434
msgid "Customization"
msgstr ""
#: ../../doc/index.rst:56 50f5dc14580f4f2db4e8c307c031c3e2
msgid "Put Canaille at yours colors by choosing a logo or use a custom theme!"
msgstr ""
#: ../../doc/index.rst:58 9e5106a0e8874b16b7a1031cb7b266e5
msgid "Developers friendliness"
msgstr ""
#: ../../doc/index.rst:62 dc6773fa0ab4474181277ecdaaafc2e8
msgid ""
"Canaille can easily fit in your unit tests suite or in your Continuous "
"Integration."
msgstr ""
#: ../../doc/index.rst:66 69e3bf94cb39467d9d0836d73de77f58
msgid ":doc:`Full feature list <features>`"
msgstr ""
#: ../../doc/index.rst:70 f8d60881cb6d4f59ad97ea3d7b740de5
msgid "Documentation"
msgstr ""

1831
doc/locales/fr_FR/LC_MESSAGES/references.po Normal file
View file

File diff suppressed because it is too large Load diff

311
doc/locales/fr_FR/LC_MESSAGES/references/commands.po Normal file
View file

@ -0,0 +1,311 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/references/commands.rst:2 79e6ecda0d3e4c18b9b9b417a389b4cb
msgid "Command Line Interface"
msgstr ""
#: ../../doc/references/commands.rst:4 9d92776c255b4bd98f31a1e55303f2c2
msgid "Canaille provide several commands to help administrator manage their data."
msgstr ""
#: ../../doc/references/commands.rst:6 4124b08c4d9e46c39b25f48fff75606a
msgid ""
"Generally, some configuration has to be loaded by `Canaille`. This can be"
" achieved by :ref:`configuration loading "
"method<references/configuration:Load the configuration>` available, but "
"most of the time a ``CONFIG`` environment variable is used. For the sake "
"of readability, it is omitted in the following examples."
msgstr ""
#: ../../canaille check:1 fe035debad4349ad97133f817e05f703
msgid "Test the configuration file."
msgstr ""
#: ../../canaille 3d4649c5c9cc41918f8263ce8808e473 check:1
msgid ""
"Attempt to reach the database and the SMTP server with the provided "
"credentials."
msgstr ""
#: ../../canaille 7d43179f511a41cd8e5037f050b1bc73 clean:1
msgid "Remove expired tokens and authorization codes."
msgstr ""
#: ../../canaille c5179a4168584d4487e447b07141c8f8 install:1
msgid "Installs canaille elements from the configuration."
msgstr ""
#: ../../canaille 37a2c93192c64aa5b19e75182e6bc5a5 install:1
msgid ""
"For instance, depending on the configuration, this can generate OIDC keys"
" or install LDAP schemas."
msgstr ""
#: ../../canaille 29c1126336174fa6989f6650df1f5d09 populate:1
msgid "Populate the database with generated random data."
msgstr ""
#: ../../doc/references/commands.rst 01f8ff3528de431a88eea102b8797e7d
#: 0592f7e20b87434db4aa021da5f46692 0b6dba38e2014e63bf00357d20bc7090
#: 3e812f2b794c4b4ab8dd50cea6e94d42 4bd5821660f0430e94aa55dc1b4e18bf
#: 4ede76eac0e943d48a95e719582c4c7e 56b6c7dc334d4eb79d9e667cea4c59e6
#: 5824aa3a83454d8799d3933f5b25c27e 596cf8bccead4e28907f3d3eca3cd4b0
#: 72b8362317ce4b5eab571c3bf28f4a90 a865ef7184a646eea2b6760e9f29635b
#: bc6c5f3613204ab9951d4eb4d92efe52 bcd6ff856c2a4f618a392d00f0e35a7b
#: bf91d423757e4aa88cae8d8ce725a870 c03af85a8f1f4bada70f68c4978c24a5
#: c05e937c532343f890e5d9b595c514d9 c144ca410af44d17bd266c5cc2b10a63
#: c96f475202f5459e9fc2854294123e16 e8955b6bee0a454b878b800bceb8265b
#: f2e7bd0e830c4413aa6b8bb93d3ac544
msgid "Options"
msgstr ""
#: ../../canaille dc6b03e91fec490e83c3f487429b951d populate:1
msgid "Number of items to create"
msgstr ""
#: ../../canaille 8ab372ad5eff478e8ee32726f43a1164 groups:1 populate
msgid "Populate the database with generated random groups."
msgstr ""
#: ../../canaille f7ca835723334ea3be4456346e751dd6 groups:1 populate
msgid "The maximum number of users that will randomly be affected in the group"
msgstr ""
#: ../../canaille 8f253323342c4bf690e86f8362567d41 populate users:1
msgid "Populate the database with generated random users."
msgstr ""
#: ../../canaille 032913c6c4364d9a99e52f972c5cc17a get:1
msgid "Read information about models."
msgstr ""
#: ../../canaille 72d8a0d9271847d7ae3a859791220a2c get:1
msgid "Options can be used to filter models::"
msgstr ""
#: ../../canaille f89e83d713814caa9f964a2fca51b72c get:1
msgid "Displays the matching models in JSON format in the standard output."
msgstr ""
#: ../../canaille authorizationcode:1 d8204c526181466c82f53e6d657030e7 get
msgid "Search for authorizationcodes and display the matching models as JSON."
msgstr ""
#: ../../canaille 3cade804c31f45adbc441a028fecea53 client:1 get
msgid "Search for clients and display the matching models as JSON."
msgstr ""
#: ../../canaille 5a310b9dc8c54416be6b9cb1902f1fb1 consent:1 get
msgid "Search for consents and display the matching models as JSON."
msgstr ""
#: ../../canaille b4441bed2f8a4eeabc0fc8837ec4f562 get group:1
msgid "Search for groups and display the matching models as JSON."
msgstr ""
#: ../../canaille 2f246dd55eeb4aba85c1bd9d369e32df get token:1
msgid "Search for tokens and display the matching models as JSON."
msgstr ""
#: ../../canaille bf1fa67a2cb24b53870f7555e3a52c31 get user:1
msgid "Search for users and display the matching models as JSON."
msgstr ""
#: ../../canaille eb6cf5e3bc2b4cde8b871663dba45e61 set:1
msgid "Update models."
msgstr ""
#: ../../canaille 30b5f0a8217a4189b10d478341f36a49 set:1
msgid "The command takes an model ID and edit one or several attributes::"
msgstr ""
#: ../../canaille bd9373e888e1406099374c0b39b84e77 set:1
msgid "Displays the edited model in JSON format in the standard output."
msgstr ""
#: ../../canaille 174abc887df24f20a9dda2fac77e83fd authorizationcode:1 set
msgid ""
"Update a authorizationcode and display the edited model in JSON format in"
" the standard output."
msgstr ""
#: ../../canaille 422c813aa96a482283f24025efb8c3dd
#: 4ec9af7edd2b47169b518fda3d644639 authorizationcode:1 delete set
msgid "IDENTIFIER should be a authorizationcode id or authorization_code_id"
msgstr ""
#: ../../doc/references/commands.rst 5f75b0309d054441a56f4b8517fdbe3d
#: 5fc02ea2e414430a8b545cf34cd4453f 78a39bec9e344a1d8fa33d34d8bac7fd
#: 80d369775bf8495f9fd82b9d0ae34e0c 957a9b7287574e26be67a8835aefb32f
#: c0a17fc3ce6e4932b3715323278dbffb c347665d49e348b5bab1c576ed8596b7
#: de203337a1ca4e09a9d879e05e1ed654 e2ec38929dcd43339b75733e16f0033b
#: e4215c7686ed4a17bca187aeb2a0b172 ec2907c65c0c4cb8a89d7552c43cf700
#: f1fc2a35ac44482cb9e364ddabcc3ea5
msgid "Arguments"
msgstr ""
#: ../../canaille 05ce73b0a8364dde9c6119f04b24f944
#: 12289768135e424dbbdc2b566466500c 13ba6cfe3b3d49b8bb81020a72f91d61
#: 311ea807815b4e35b5cae0b6d6083fcc 3fba64605a8e42a39976bf717dcd10f3
#: 89214791cafa4d1dac6bd3ec1fa631fb 9460e7a6cf094a76bf2fb1cd252c3a7c
#: aac6d7361cd844f1b423545d4a4e68cd authorizationcode:1
#: c7a234cf435343a79bfed973e7631d2b client:1 consent:1
#: d3ded9fbefc34521a5c7b04dbcd26be4 delete e0e6897cdfd54ddcbdefd9ca5cad1bb9
#: edacde43739b441cb3618d8c01220e44 group:1 set token:1 user:1
msgid "Required argument"
msgstr ""
#: ../../canaille ac7fcd06851b40afbb06398602fa62ba client:1 set
msgid ""
"Update a client and display the edited model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 369ef3a35a95428687da84c178c248ed
#: b62f8cbd9dc447329c3d5176f4571aad client:1 delete set
msgid "IDENTIFIER should be a client id or client_id"
msgstr ""
#: ../../canaille 632ddaea2a594d14ab976c383702313a consent:1 set
msgid ""
"Update a consent and display the edited model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 602b6168c8654e63b36abab9c7ba5f9c consent:1
#: d1dd6d8fa58c4836a8f836a32c189eff delete set
msgid "IDENTIFIER should be a consent id or consent_id"
msgstr ""
#: ../../canaille bf18f7ffebd74d508d604b4fd0a8599e group:1 set
msgid ""
"Update a group and display the edited model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 62cac2ffd5384b8685460ee652f347b0
#: 7a3a74db760a4ffe86925454e6967075 delete group:1 set
msgid "IDENTIFIER should be a group id or display_name"
msgstr ""
#: ../../canaille 7a1167bf7b1f49f39eaac26d9a9b57e4 set token:1
msgid ""
"Update a token and display the edited model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 3e08125cc6894a05a0bde0f9495466b3
#: 9aaa82a936274b02bfb5f9beae6fc170 delete set token:1
msgid "IDENTIFIER should be a token id or token_id"
msgstr ""
#: ../../canaille f6b67c6e64e246058860790f13d2b963 set user:1
msgid ""
"Update a user and display the edited model in JSON format in the standard"
" output."
msgstr ""
#: ../../canaille 3235eea8dafc45ceac129398063d9e12
#: 6ec8598e7e844b85b89e8fba32cd9bc4 delete set user:1
msgid "IDENTIFIER should be a user id or user_name"
msgstr ""
#: ../../canaille b37439a748eb43f1807c351b27b68710 create:1
msgid "Create models."
msgstr ""
#: ../../canaille 9a254a69b81d4406aaf38ee889f8d053 create:1
msgid "The model attributes can be passed as command options::"
msgstr ""
#: ../../canaille a1021d5959534ac08c198e3a7c69d44d create:1
msgid "Displays the created model in JSON format in the standard output."
msgstr ""
#: ../../canaille authorizationcode:1 b09ba6722fef4240acc4d8412d36c76a create
msgid ""
"Create a new authorizationcode and display the created model in JSON "
"format in the standard output."
msgstr ""
#: ../../canaille 22a13bf732564e8fa9d9c3e363d3eb77 client:1 create
msgid ""
"Create a new client and display the created model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 904ef9f6463d4745920450a1ed807562 consent:1 create
msgid ""
"Create a new consent and display the created model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille create d2b8f57503534155be249fac5f9a5aed group:1
msgid ""
"Create a new group and display the created model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 27ad14949f284173bc1163c32372465a create token:1
msgid ""
"Create a new token and display the created model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille 2193f06fa847408780c7f7316641c7a6 create user:1
msgid ""
"Create a new user and display the created model in JSON format in the "
"standard output."
msgstr ""
#: ../../canaille da2a6c5ad512466aa6abb26f351337d3 delete:1
msgid "Delete models."
msgstr ""
#: ../../canaille 1ff4ff3017cd43c3a3edab341ab42cd0 delete:1
msgid "The command takes a model ID and deletes it::"
msgstr ""
#: ../../canaille 9ef5b7a1d4864bd0bf33e819771c7850 authorizationcode:1 delete
msgid "Delete a authorizationcode."
msgstr ""
#: ../../canaille client:1 delete f5b20435029c47a29b2ab3e8cfd6ccdb
msgid "Delete a client."
msgstr ""
#: ../../canaille 0a84345b85084835b5cfc942f94f174a consent:1 delete
msgid "Delete a consent."
msgstr ""
#: ../../canaille d1a17434dbb747b1b98de64fee67a8fc delete group:1
msgid "Delete a group."
msgstr ""
#: ../../canaille 975139d084dd4d2fa4d6ac65bd1e3691 delete token:1
msgid "Delete a token."
msgstr ""
#: ../../canaille 10221b77423d4f309639da451e19f99f delete user:1
msgid "Delete a user."
msgstr ""

836
doc/locales/fr_FR/LC_MESSAGES/references/configuration.po Normal file
View file

@ -0,0 +1,836 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/references/configuration.rst:2 424d05c383324277a800335820e3fa6e
msgid "Configuration"
msgstr ""
#: ../../doc/references/configuration.rst:5 5d68e755dda14103904b8038717bb5b4
msgid "Load the configuration"
msgstr ""
#: ../../doc/references/configuration.rst:7 3138a09755a046a286748b624585f456
msgid ""
"Canaille can be configured either by a environment variables, environment"
" file, or by a configuration file."
msgstr ""
#: ../../doc/references/configuration.rst:10 967fe546c7f64dffbed7e7ecbe6a425f
msgid "Configuration file"
msgstr ""
#: ../../doc/references/configuration.rst:12 c60e21f322d14a3d8df3a5f80650198a
msgid ""
"The configuration can be written in `toml` configuration file which path "
"is passed in the :envvar:`CONFIG` environment variable."
msgstr ""
#: ../../doc/references/configuration.rst:14
#: ../../doc/references/configuration.rst:85 5598260f6347465c9a7f8818cb9d5a76
#: c43d890510d8485fac81e8a1b72b9152 canaille.app.configuration.RootSettings:11
#: e7e0deef51b24803a825cee5f2feeb6b of
msgid "config.toml"
msgstr ""
#: ../../doc/references/configuration.rst:26 c223295f61c54f9eb7a25d9ec52a5a1e
msgid ""
"You can have a look at the :ref:`example file "
"<references/configuration:Example file>` for inspiration."
msgstr ""
#: ../../doc/references/configuration.rst:29 1cf9a6f193e74d718c0dbea6ab02b7e5
msgid "Environment variables"
msgstr ""
#: ../../doc/references/configuration.rst:31 21e22f7bcf484969bb578f6c6842a210
msgid ""
"In addition, parameters that have not been set in the configuration file "
"can be read from environment variables. The way environment variables are"
" parsed can be read from the `pydantic-settings documentation "
"<https://docs.pydantic.dev/latest/concepts/pydantic_settings/#parsing-"
"environment-variable-values>`_."
msgstr ""
#: ../../doc/references/configuration.rst:36 3e3b489d0d0f4fdebf21bf4c4418422b
msgid ""
"For environment vars, the separator between sections and variables is a "
"double underscore: ``__``. For instance, the ``NAME`` var in the "
"``CANAILLE`` section shown above is ``CANAILLE__NAME``."
msgstr ""
#: ../../doc/references/configuration.rst:40 bffb0a7bf9184ca092bd7f06798b5ed7
msgid "Environment file"
msgstr ""
#: ../../doc/references/configuration.rst:42 79fb1890082d49969ca45b0b243c537c
msgid ""
"Any environment variable can also be written in a ``.env``, and will be "
"read if present."
msgstr ""
#: ../../doc/references/configuration.rst:44 b9fc48127af945bda804aba757d7b7dd
msgid ".env"
msgstr ""
#: ../../doc/references/configuration.rst:62 e16e03560b974996b92551623c3a4728
msgid "Parameters"
msgstr ""
#: 8c93b32620244c1c89cca6d261768a39 canaille.app.configuration.RootSettings:1
#: of
msgid ""
"The top-level namespace contains holds the configuration settings "
"unrelated to Canaille."
msgstr ""
#: bdff9ee3326e47838fa870fa10d24a4a canaille.app.configuration.RootSettings:4
#: of
msgid "The configuration paramateres from the following libraries can be used:"
msgstr ""
#: 0048354dd402460d9058c80014afc3a8 canaille.app.configuration.RootSettings:6
#: of
msgid ":doc:`Flask <flask:config>`"
msgstr ""
#: 97eef56c269a4976af0d8331d4028832 canaille.app.configuration.RootSettings:7
#: of
msgid ":doc:`Flask-WTF <flask-wtf:config>`"
msgstr ""
#: 980d5034607445a8936e13289adb634a canaille.app.configuration.RootSettings:8
#: of
msgid ":doc:`Flask-Babel <flask-babel:index>`"
msgstr ""
#: b04bbf26f86c49539b0378da858e25c0 canaille.app.configuration.RootSettings:9
#: of
msgid ":doc:`Authlib <authlib:flask/2/authorization-server>`"
msgstr ""
#: ../../docstring canaille.app.configuration.RootSettings.DEBUG:1
#: d2a0d7c0762940079150f885dec0d0e7 of
msgid "The Flask :external:py:data:`DEBUG` configuration setting."
msgstr ""
#: ../../docstring 655fe302f2244cae8d4f7507b9bcf5ee
#: canaille.app.configuration.RootSettings.DEBUG:3 of
msgid "This enables debug options."
msgstr ""
#: ../../docstring 38930315245e43c8a21dea835f70de8a
#: canaille.app.configuration.RootSettings.DEBUG:7 of
msgid ""
"This is useful for development but should be absolutely avoided in "
"production environments."
msgstr ""
#: ../../docstring be190939a5b8407abc8051d973470b00
#: canaille.app.configuration.RootSettings.PREFERRED_URL_SCHEME:1 of
msgid "The Flask :external:py:data:`PREFERRED_URL_SCHEME` configuration setting."
msgstr ""
#: ../../docstring 8f1c5830bb7a4049a19023e8c78e2868
#: canaille.app.configuration.RootSettings.PREFERRED_URL_SCHEME:4 of
msgid "This sets the url scheme by which canaille will be served."
msgstr ""
#: ../../docstring b8116a14c0634f37a438a279518faf1b
#: canaille.app.configuration.RootSettings.SECRET_KEY:1 of
msgid "The Flask :external:py:data:`SECRET_KEY` configuration setting."
msgstr ""
#: ../../docstring 7899131820fe46ea8de0a235b307ab42
#: canaille.app.configuration.RootSettings.SECRET_KEY:3 of
msgid "You MUST change this."
msgstr ""
#: ../../docstring 625463c6bbe848c7977af2a13d58865e
#: canaille.app.configuration.RootSettings.SERVER_NAME:1 of
msgid "The Flask :external:py:data:`SERVER_NAME` configuration setting."
msgstr ""
#: ../../docstring 06598651788843eebda0b59e8eb7b2b1
#: canaille.app.configuration.RootSettings.SERVER_NAME:3 of
msgid "This sets domain name on which canaille will be served."
msgstr ""
#: 1c4603a9300b4baabfe80ba792d3e79a canaille.core.configuration.CoreSettings:1
#: of
msgid "The settings from the ``CANAILLE`` namespace."
msgstr ""
#: 84c7ae7efa5a47ad8789a59aa453354a canaille.core.configuration.CoreSettings:3
#: of
msgid ""
"Those are all the configuration parameters that controls the behavior of "
"Canaille."
msgstr ""
#: ../../docstring 9ddde712539a484d8d84b470795d5ea1
#: canaille.core.configuration.CoreSettings.ACL:1 of
msgid "Mapping of permission groups. See :class:`ACLSettings` for more details."
msgstr ""
#: ../../docstring 8cc6440505154248a19225a38dfa7d32
#: canaille.core.configuration.CoreSettings.ACL:3 of
msgid "The ACL name can be freely chosen. For example::"
msgstr ""
#: ../../docstring canaille.core.configuration.CoreSettings.ADMIN_EMAIL:1
#: f6c14e52ce8f4c00834507e6f4274b8f of
msgid "Administration email contact."
msgstr ""
#: ../../docstring c7ab87c0bfb34fc8b97870bbe1299631
#: canaille.core.configuration.CoreSettings.ADMIN_EMAIL:3 of
msgid ""
"In certain special cases (example : questioning about password "
"corruption), it is necessary to provide an administration contact email."
msgstr ""
#: ../../docstring 314eab36d7294cf0a47ed00aa7c84a0c
#: canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION:1 of
msgid ""
"If :py:data:`True`, users will need to click on a confirmation link sent "
"by email when they want to add a new email."
msgstr ""
#: ../../docstring b9c54b77527e411a8e1c313cd18ae3b2
#: canaille.core.configuration.CoreSettings.EMAIL_CONFIRMATION:4 of
msgid ""
"By default, this is true if ``SMTP`` is configured, else this is false. "
"If explicitly set to true and ``SMTP`` is disabled, the email field will "
"be read-only."
msgstr ""
#: ../../docstring 9bd6dc224f794a3ab0af54733e45102c
#: canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_COMPROMISSION_CHECK:1
#: of
msgid ""
"If :py:data:`True`, Canaille will check if passwords appears in "
"compromission databases such as `HIBP <https://haveibeenpwned.com>`_ when"
" users choose a new one."
msgstr ""
#: ../../docstring 4f2a32a147fd4df48e723c7b7cda2c2b
#: canaille.core.configuration.CoreSettings.ENABLE_PASSWORD_RECOVERY:1 of
msgid ""
"If :py:data:`False`, then users cannot ask for a password recovery link "
"by email."
msgstr ""
#: ../../docstring b40754c5a7354a7c8105ef95608cf381
#: canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION:1 of
msgid ""
"If :py:data:`True`, then users can freely create an account at this "
"instance."
msgstr ""
#: ../../docstring 02798211a1944569b105076267bc34c9
#: canaille.core.configuration.CoreSettings.ENABLE_REGISTRATION:4 of
msgid ""
"If email verification is available, users must confirm their email before"
" the account is created."
msgstr ""
#: ../../docstring 3c2cbc6dbe0d4ba9acb99c6fd93ef0f9
#: canaille.core.configuration.CoreSettings.FAVICON:1 of
msgid "You favicon."
msgstr ""
#: ../../docstring 88c7ad9cd97949129cb8b2e58a149fc9
#: canaille.core.configuration.CoreSettings.FAVICON:3 of
msgid "If unset and :attr:`LOGO` is set, then the logo will be used."
msgstr ""
#: ../../docstring add94b3b94144337b44f24a644cc1430
#: canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS:1 of
msgid ""
"If :py:data:`True`, when users try to sign in with an invalid login, a "
"message is shown indicating that the password is wrong, but does not give"
" a clue whether the login exists or not."
msgstr ""
#: ../../docstring
#: canaille.core.configuration.CoreSettings.HIDE_INVALID_LOGINS:5
#: dcfa98e306544b75973c667a9944d89a of
msgid ""
"If :py:data:`False`, when a user tries to sign in with an invalid login, "
"a message is shown indicating that the login does not exist."
msgstr ""
#: ../../docstring c1590e635df24e1486be1e562a5b0034
#: canaille.core.configuration.CoreSettings.HTMX:1 of
msgid "Accelerates webpages loading with asynchronous requests."
msgstr ""
#: ../../docstring 35b5c6a840a047cc87fa606818c7e7f4
#: canaille.core.configuration.CoreSettings.INVITATION_EXPIRATION:1 of
msgid "The validity duration of registration invitations, in seconds."
msgstr ""
#: ../../docstring
#: canaille.core.configuration.CoreSettings.INVITATION_EXPIRATION:3
#: f61374773e154a55ad905df27019923d of
msgid "Defaults to 2 days."
msgstr ""
#: ../../docstring bd6c3be93bda402092ac6f3cfca24265
#: canaille.core.configuration.CoreSettings.JAVASCRIPT:1 of
msgid "Enables Javascript to smooth the user experience."
msgstr ""
#: ../../docstring 08e45b94110845a6a2cf237d5dd01508
#: canaille.core.configuration.CoreSettings.LANGUAGE:1 of
msgid "If a language code is set, it will be used for every user."
msgstr ""
#: ../../docstring 124a41b6ceeb47e3b952d23619d85139
#: canaille.core.configuration.CoreSettings.LANGUAGE:3 of
msgid "If unset, the language is guessed according to the users browser."
msgstr ""
#: ../../docstring 40ed5d3d85104c57a1b384eeb7aaef40
#: canaille.core.configuration.CoreSettings.LOGGING:1 of
msgid ""
"Configures the logging output using the python logging configuration "
"format:"
msgstr ""
#: ../../docstring 4df8127b60254f5bb0cc247c30469d27
#: canaille.core.configuration.CoreSettings.LOGGING:3 of
msgid ""
"if :py:data:`None`, everything is logged in the standard error output the"
" log level is :py:data:`~logging.DEBUG` if the "
":attr:`~canaille.app.configuration.RootSettings.DEBUG` setting is "
":py:data:`True`, else this is :py:data:`~logging.INFO`"
msgstr ""
#: ../../docstring 03db8dc130ad49e8b59d79e0f6aa9154
#: canaille.core.configuration.CoreSettings.LOGGING:6 of
msgid ""
"if this is a :class:`dict`, it is passed to "
":func:`logging.config.dictConfig`:"
msgstr ""
#: ../../docstring canaille.core.configuration.CoreSettings.LOGGING:7
#: f00409f6957e42c29f599a74667becb2 of
msgid ""
"if this is a :class:`str`, it is expected to be a file path that will be "
"passed to :func:`logging.config.fileConfig`"
msgstr ""
#: ../../docstring canaille.core.configuration.CoreSettings.LOGGING:10
#: f45e3f7a67724ea9882d55fa6b07d3f6 of
msgid "For example::"
msgstr ""
#: ../../docstring 23d3cf2c128d44fa8b149a6b3548a302
#: canaille.core.configuration.CoreSettings.LOGO:1 of
msgid ""
"The logo of your organization, this is useful to make your organization "
"recognizable on login screens."
msgstr ""
#: ../../docstring 6279cd5aa6ba484493c72cc708780ff2
#: canaille.core.configuration.CoreSettings.MAX_PASSWORD_LENGTH:1 of
msgid "Maximum length for user password."
msgstr ""
#: ../../docstring 6dda33511f5c41249a65ba949f5f422f
#: canaille.core.configuration.CoreSettings.MAX_PASSWORD_LENGTH:3 of
msgid ""
"There is a technical limit with passlib used by sql database of 4096 "
"characters. If the value entered is 0 or None, or greater than 4096, then"
" 4096 will be retained."
msgstr ""
#: ../../docstring 8a907f495b1c4e059084f17f24bac4ac
#: canaille.core.configuration.CoreSettings.MIN_PASSWORD_LENGTH:1 of
msgid "Minimum length for user password."
msgstr ""
#: ../../docstring 78c7324a8e4f4cca974dfea5be0fc93d
#: canaille.core.configuration.CoreSettings.MIN_PASSWORD_LENGTH:3 of
msgid "It is possible not to set a minimum, by entering None or 0."
msgstr ""
#: ../../docstring b0bea46879234cb8a42cefca791fbb65
#: canaille.core.configuration.CoreSettings.NAME:1 of
msgid "Your organization name."
msgstr ""
#: ../../docstring c821d6608be5485fa7c3b9574007b964
#: canaille.core.configuration.CoreSettings.NAME:3 of
msgid "Used for display purpose."
msgstr ""
#: ../../docstring c53cf47a679b4844925c70c352dea0bf
#: canaille.core.configuration.CoreSettings.PASSWORD_COMPROMISSION_CHECK_API_URL:1
#: of
msgid "Have i been pwned api url for compromission checks."
msgstr ""
#: ../../docstring 9990747398ac4f5895282ab305c072dc
#: canaille.core.configuration.CoreSettings.SENTRY_DSN:1 of
msgid "A `Sentry <https://sentry.io>`_ DSN to collect the exceptions."
msgstr ""
#: ../../docstring 790c865da20f435aa1be69714403de01
#: canaille.core.configuration.CoreSettings.SENTRY_DSN:3 of
msgid "This is useful for tracking errors in test and production environments."
msgstr ""
#: ../../docstring 85951eb2b027483eba736e336af20f81
#: canaille.core.configuration.CoreSettings.SMTP:1 of
msgid "The settings related to SMTP and mail configuration."
msgstr ""
#: ../../docstring c409cbcf49e7469ca8b2dd052c011a52
#: canaille.core.configuration.CoreSettings.SMTP:3 of
msgid "If unset, mail-related features like password recovery won't be enabled."
msgstr ""
#: ../../docstring 2cb83696c7f149289e9f3dbc012182ef
#: canaille.core.configuration.CoreSettings.THEME:1 of
msgid "The name of a theme in the 'theme' directory, or a path to a theme."
msgstr ""
#: ../../docstring b3d1237eb0144f97974e071fc00ea0b7
#: canaille.core.configuration.CoreSettings.THEME:3 of
msgid ""
"Defaults to ``default``. Theming is done with `flask-themer "
"<https://github.com/tktech/flask-themer>`_."
msgstr ""
#: ../../docstring b1e60d33d31a47f4bc40640338cb284b
#: canaille.core.configuration.CoreSettings.TIMEZONE:1 of
msgid ""
"The timezone in which datetimes will be displayed to the users (e.g. "
"``CEST``)."
msgstr ""
#: ../../docstring canaille.core.configuration.CoreSettings.TIMEZONE:4
#: dc4cf4f473ea40a5bb1c9a049a3ca1e2 of
msgid "If unset, the server timezone will be used."
msgstr ""
#: 06acb103d58a4e9786be0d9ccca36999 canaille.core.configuration.SMTPSettings:1
#: of
msgid ""
"The SMTP configuration. Belong in the ``CANAILLE.SMTP`` namespace. If "
"unset, mail related features will be disabled, such as mail verification "
"or password recovery emails."
msgstr ""
#: 331241c793784690be8c9746d3366e56 canaille.core.configuration.SMTPSettings:5
#: of
msgid ""
"By default, Canaille will try to send mails from localhost without "
"authentication."
msgstr ""
#: ../../docstring 92f12abb0bac49e5867285e04a5c9d6a
#: canaille.core.configuration.SMTPSettings.FROM_ADDR:1 of
msgid "The sender for Canaille mails."
msgstr ""
#: ../../docstring 10b0c6ea9c92453cae3d9e33632a4ad4
#: canaille.core.configuration.SMTPSettings.FROM_ADDR:3 of
msgid "Some mail provider might require a valid sender address."
msgstr ""
#: ../../docstring 3535c00f832b4d2c964be48c7b91231b
#: canaille.core.configuration.SMTPSettings.HOST:1 of
msgid "The SMTP host."
msgstr ""
#: ../../docstring 652e684442a4480f8d5604a28e5f3ce8
#: canaille.core.configuration.SMTPSettings.LOGIN:1 of
msgid "The SMTP login."
msgstr ""
#: ../../docstring 8670279f8f9f4fbebc169da4c79f23a9
#: canaille.core.configuration.SMTPSettings.PASSWORD:1 of
msgid "The SMTP password."
msgstr ""
#: ../../docstring canaille.core.configuration.SMTPSettings.PORT:1
#: e23e9bd935054912937b4a19c870e950 of
msgid "The SMTP port."
msgstr ""
#: ../../docstring 610bdbb8787348feb7afed6f3d60c0c2
#: canaille.core.configuration.SMTPSettings.SSL:1 of
msgid "Whether to use SSL to connect to the SMTP server."
msgstr ""
#: ../../docstring 3cc08150a5ea4ed5ae2e0dc3c4fca472
#: canaille.core.configuration.SMTPSettings.TLS:1 of
msgid "Whether to use TLS to connect to the SMTP server."
msgstr ""
#: 62b3f9dcea0643de96b1ca7638f6a5e9 canaille.core.configuration.ACLSettings:1
#: of
msgid "Access Control List settings. Belong in the ``CANAILLE.ACL`` namespace."
msgstr ""
#: bdd0385786694ea6ab8802833275fa4e canaille.core.configuration.ACLSettings:3
#: of
msgid ""
"You can define access controls that define what users can do on canaille "
"An access control consists in a :attr:`FILTER` to match users, a list of "
":attr:`PERMISSIONS` matched users will be able to perform, and fields "
"users will be able to :attr:`READ` and :attr:`WRITE`. Users matching "
"several filters will cumulate permissions."
msgstr ""
#: ../../docstring 1097669d2b994281b4d5d413097e0623
#: canaille.core.configuration.ACLSettings.FILTER:1 of
msgid ":attr:`FILTER` can be:"
msgstr ""
#: ../../docstring bb053c15eb704432bb84e56edeadf167
#: canaille.core.configuration.ACLSettings.FILTER:3 of
msgid ""
":py:data:`None`, in which case all the users will match this access "
"control"
msgstr ""
#: ../../docstring canaille.core.configuration.ACLSettings.FILTER:4
#: cbdb019e3b284edf87da4f15d2b78bf4 of
msgid ""
"a mapping where keys are user attributes name and the values those user "
"attribute values. All the values must be matched for the user to be part "
"of the access control."
msgstr ""
#: ../../docstring canaille.core.configuration.ACLSettings.FILTER:7
#: d4572cf46999451ca8cf28217ded5167 of
msgid ""
"a list of those mappings. If a user values match at least one mapping, "
"then the user will be part of the access control"
msgstr ""
#: ../../docstring canaille.core.configuration.ACLSettings.FILTER:10
#: fac47b79b4dd4a3da08e3237472a7b7d of
msgid "Here are some examples::"
msgstr ""
#: ../../docstring 62ff0c3020c8448a944704b0062a8cb2
#: canaille.core.configuration.ACLSettings.PERMISSIONS:1 of
msgid ""
"A list of :class:`Permission` users in the access control will be able to"
" manage. For example::"
msgstr ""
#: ../../docstring 1099209ca53345d387496ab4312ed097
#: canaille.core.configuration.ACLSettings.READ:1 of
msgid ""
"A list of :class:`~canaille.core.models.User` attributes that users in "
"the ACL will be able to read."
msgstr ""
#: ../../docstring 58a9e524f70f4e7baf522ef1c8157e32
#: canaille.core.configuration.ACLSettings.WRITE:1 of
msgid ""
"A list of :class:`~canaille.core.models.User` attributes that users in "
"the ACL will be able to edit."
msgstr ""
#: canaille.core.configuration.Permission:1 e8e63c7026de41bcba4f2349159e7261 of
msgid "The permissions that can be assigned to users."
msgstr ""
#: 9c4460d4bbf14419aa95957ca5a5e952 canaille.core.configuration.Permission:3 of
msgid ""
"The permissions are intended to be used in :attr:`ACLSettings "
"<canaille.core.configuration.ACLSettings.PERMISSIONS>`."
msgstr ""
#: ../../docstring 7605a3b0da5e4979ac17a807d8134c54
#: canaille.core.configuration.Permission.DELETE_ACCOUNT:1 of
msgid "Allows users to delete their account."
msgstr ""
#: ../../docstring ae2fe25c6c344a97864852f01f57e296
#: canaille.core.configuration.Permission.DELETE_ACCOUNT:3 of
msgid ""
"If used with "
":attr:`~canaille.core.configuration.Permission.MANAGE_USERS`, users can "
"delete any account."
msgstr ""
#: ../../docstring 82ed41275cc2499f994e6bc2dd5d1e3c
#: canaille.core.configuration.Permission.EDIT_SELF:1 of
msgid "Allows users to edit their own profile."
msgstr ""
#: ../../docstring canaille.core.configuration.Permission.IMPERSONATE_USERS:1
#: fbc8c78392de4edcac1b152a1b08e63b of
msgid "Allows users to take the identity of another user."
msgstr ""
#: ../../docstring 6884efcf056942198b52e3612b827d05
#: canaille.core.configuration.Permission.MANAGE_GROUPS:1 of
msgid "Allows group edition and creation."
msgstr ""
#: ../../docstring 38db5db2588046459a54a6a0fcbd608f
#: canaille.core.configuration.Permission.MANAGE_OIDC:1 of
msgid "Allows OpenID Connect client managements."
msgstr ""
#: ../../docstring 902c5fb366a74c5a9a03ad5fcd2e6cf1
#: canaille.core.configuration.Permission.MANAGE_USERS:1 of
msgid "Allows other users management."
msgstr ""
#: ../../docstring 96fbdc9c5ccf421db8c2e110eb59536a
#: canaille.core.configuration.Permission.USE_OIDC:1 of
msgid "Allows OpenID Connect authentication."
msgstr ""
#: canaille.oidc.configuration.OIDCSettings:1 f949952a659545e6a0eb5e7df32b2619
#: of
msgid "OpenID Connect settings."
msgstr ""
#: 8396f08e1b0e42ec94c732847bea4bfc canaille.oidc.configuration.OIDCSettings:3
#: of
msgid "Belong in the ``CANAILLE_OIDC`` namespace."
msgstr ""
#: ../../docstring 70c636d7dae842b09d6533627f4b65e2
#: canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN:1
#: of
msgid "Whether a token is needed for the RFC7591 dynamical client registration."
msgstr ""
#: ../../docstring
#: canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_OPEN:3
#: e333e90c5649498b9d34e691efcd8ab5 of
msgid ""
"If :py:data:`True`, no token is needed to register a client. If "
":py:data:`False`, dynamical client registration needs a token defined in "
":attr:`DYNAMIC_CLIENT_REGISTRATION_TOKENS`."
msgstr ""
#: ../../docstring 70e5e4ec0dc64daba69f85bf4ec84708
#: canaille.oidc.configuration.OIDCSettings.DYNAMIC_CLIENT_REGISTRATION_TOKENS:1
#: of
msgid "A list of tokens that can be used for dynamic client registration."
msgstr ""
#: ../../docstring 5418fb5b02384cc29f1426c4c1d30759
#: canaille.oidc.configuration.OIDCSettings.JWT:1 of
msgid "JSON Web Token settings."
msgstr ""
#: ../../docstring canaille.oidc.configuration.OIDCSettings.REQUIRE_NONCE:1
#: e928ff6b3928470e8ad7c82caa4a3d07 of
msgid "Force the nonce exchange during the authentication flows."
msgstr ""
#: ../../docstring 7359057f9f5d43f1a42cd646a4300f42
#: canaille.oidc.configuration.OIDCSettings.REQUIRE_NONCE:3 of
msgid "This adds security but may not be supported by all clients."
msgstr ""
#: 27a60f8e093d4917ac66b7d131143b97 canaille.oidc.configuration.JWTSettings:1
#: of
msgid "JSON Web Token settings. Belong in the ``CANAILLE_OIDC.JWT`` namespace."
msgstr ""
#: 3764ee3b65474edf8ebb66a6c372c243 canaille.oidc.configuration.JWTSettings:3
#: of
msgid "You can generate a RSA keypair with::"
msgstr ""
#: ../../docstring a1a6dcd429094759b1efb11226baf5a2
#: canaille.oidc.configuration.JWTSettings.ALG:1 of
msgid "The key algorithm."
msgstr ""
#: ../../docstring canaille.oidc.configuration.JWTSettings.EXP:1
#: dd523d20e02b48cdb29cbc016cf04c7b of
msgid "The time the JWT will be valid, in seconds."
msgstr ""
#: ../../docstring canaille.oidc.configuration.JWTSettings.ISS:1
#: f0cf8022dba44fbd8663ad45a1888b91 of
msgid "The URI of the identity provider."
msgstr ""
#: ../../docstring 8028f588edca4da58a09dc75ca349aba
#: canaille.oidc.configuration.JWTSettings.KTY:1 of
msgid "The key type."
msgstr ""
#: ../../docstring 41e83a2048a44f919950e1750910a1d0
#: canaille.oidc.configuration.JWTSettings.PRIVATE_KEY:1 of
msgid "The private key."
msgstr ""
#: ../../docstring 7348c4741ca84317877a04bdf03d99ae
#: bd2c3564a3af4101abb4393b1aac729c
#: canaille.oidc.configuration.JWTSettings.PRIVATE_KEY:3
#: canaille.oidc.configuration.JWTSettings.PUBLIC_KEY:3 of
msgid ""
"If :py:data:`None` and debug mode is enabled, then an in-memory key will "
"be used."
msgstr ""
#: ../../docstring b7a0baa78585417d8dcdbe96a8b98583
#: canaille.oidc.configuration.JWTSettings.PUBLIC_KEY:1 of
msgid "The public key."
msgstr ""
#: a9d6eabbdca247c2af37e29d96568a03
#: canaille.oidc.configuration.JWTMappingSettings:1 of
msgid "Mapping between the user model and the JWT fields."
msgstr ""
#: 886826dc265c4c7cb8766afe83095133
#: canaille.oidc.configuration.JWTMappingSettings:3 of
msgid "Fields are evaluated with jinja. A ``user`` var is available."
msgstr ""
#: 9590d902318d4c8580d37bbcd979932a
#: canaille.backends.sql.configuration.SQLSettings:1 of
msgid "Settings related to the SQL backend."
msgstr ""
#: 15c8d7294eff4cb0aad980f15edac5a9
#: canaille.backends.sql.configuration.SQLSettings:3 of
msgid "Belong in the ``CANAILLE_SQL`` namespace."
msgstr ""
#: ../../docstring 8b41da4ffa2646dcb6cd9b93a4807cf3
#: canaille.backends.sql.configuration.SQLSettings.DATABASE_URI:1 of
msgid "The SQL server URI. For example::"
msgstr ""
#: b0bc548513934f1da3667d30279d82c4
#: canaille.backends.ldap.configuration.LDAPSettings:1 of
msgid "Settings related to the LDAP backend."
msgstr ""
#: 49283fbc5e9a4eb7a3dcebf404cc3870
#: canaille.backends.ldap.configuration.LDAPSettings:3 of
msgid "Belong in the ``CANAILLE_LDAP`` namespace."
msgstr ""
#: ../../docstring 8824324541e74294beab8b504d38368a
#: canaille.backends.ldap.configuration.LDAPSettings.BIND_DN:1 of
msgid "The LDAP bind DN."
msgstr ""
#: ../../docstring 40026a12323e48a3a0753e08ca363e83
#: canaille.backends.ldap.configuration.LDAPSettings.BIND_PW:1 of
msgid "The LDAP bind password."
msgstr ""
#: ../../docstring a7e3ac64d2044be3ab6c5d2d293db37d
#: canaille.backends.ldap.configuration.LDAPSettings.GROUP_BASE:1 of
msgid "The LDAP node under which groups will be looked for and saved."
msgstr ""
#: ../../docstring bda60eee8e474c65925adb75f0e02164
#: canaille.backends.ldap.configuration.LDAPSettings.GROUP_BASE:3 of
msgid "For instance `\"ou=groups,dc=mydomain,dc=tld\"`."
msgstr ""
#: ../../docstring 68bffd35121746e8bfbb70d05a8c176b
#: canaille.backends.ldap.configuration.LDAPSettings.GROUP_CLASS:1 of
msgid "The object class to use for creating new groups."
msgstr ""
#: ../../docstring
#: canaille.backends.ldap.configuration.LDAPSettings.GROUP_NAME_ATTRIBUTE:1
#: f33128abab5f4ce59d431244a8c757ea of
msgid "The attribute to use to identify a group."
msgstr ""
#: ../../docstring 9292125ade5c4f9e912f543664860791
#: canaille.backends.ldap.configuration.LDAPSettings.GROUP_RDN:1 of
msgid "The attribute to identify an object in the Group DN."
msgstr ""
#: ../../docstring 813682b1e3b54072ab07e295c38b2fbc
#: canaille.backends.ldap.configuration.LDAPSettings.ROOT_DN:1 of
msgid "The LDAP root DN."
msgstr ""
#: ../../docstring 2e43c3ede5a54158abcc1bb480b98026
#: canaille.backends.ldap.configuration.LDAPSettings.TIMEOUT:1 of
msgid "The LDAP connection timeout."
msgstr ""
#: ../../docstring canaille.backends.ldap.configuration.LDAPSettings.URI:1
#: cda749d2c3be41e3928f0e759f206889 of
msgid "The LDAP server URI."
msgstr ""
#: ../../docstring 7b97343c77204e699fc3961a28bf66fc
#: canaille.backends.ldap.configuration.LDAPSettings.USER_BASE:1 of
msgid "The LDAP node under which users will be looked for and saved."
msgstr ""
#: ../../docstring
#: canaille.backends.ldap.configuration.LDAPSettings.USER_BASE:3
#: ea6864b7befc4c46a1a463a3df375e57 of
msgid "For instance `ou=users,dc=mydomain,dc=tld`."
msgstr ""
#: ../../docstring
#: canaille.backends.ldap.configuration.LDAPSettings.USER_CLASS:1
#: d749e90737ba453393324ade8c1e9b9f of
msgid "The object class to use for creating new users."
msgstr ""
#: ../../docstring 1b1aeacb6c754ecd871e160f614ebe30
#: canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER:1 of
msgid "Filter to match users on sign in."
msgstr ""
#: ../../docstring 7d7bade071b84039810c29d01ee7af4e
#: canaille.backends.ldap.configuration.LDAPSettings.USER_FILTER:3 of
msgid ""
"For instance ``(|(uid={{ login }})(mail={{ login }}))``. Jinja syntax is "
"supported and a ``login`` variable is available, containing the value "
"passed in the login field."
msgstr ""
#: ../../docstring canaille.backends.ldap.configuration.LDAPSettings.USER_RDN:1
#: fbb6d8c8e73946e8ae9d0b5b8ef6ac7a of
msgid "The attribute to identify an object in the User DN."
msgstr ""
#: ../../doc/references/configuration.rst:81 c71a6c99d5c649468d25d73245d1ce81
msgid "Example file"
msgstr ""
#: ../../doc/references/configuration.rst:83 e3d5ff7b824e465fa78cf064e047e2bf
msgid "Here is a configuration file example:"
msgstr ""

25
doc/locales/fr_FR/LC_MESSAGES/references/index.po Normal file
View file

@ -0,0 +1,25 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/references/index.rst:2 449c3088548a4de39932e3c9abadb987
msgid "References"
msgstr ""

948
doc/locales/fr_FR/LC_MESSAGES/references/models.po Normal file
View file

@ -0,0 +1,948 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/references/models.rst:2 4f4f811264a14208af46aa08dc0f739f
msgid "Data models"
msgstr ""
#: ../../doc/references/models.rst:4 86ad2ccc4f484fea9172dc9a03dd1685
msgid ""
"This reference details the data models used by Canaille. This is mostly "
"useful for developers."
msgstr ""
#: 3d8d635f39f9417a8093033c65f5cfd8 canaille.backends.models.BackendModel:1
#: canaille.backends.models.Model:1 cea30ce00d3c4b9aa2a4a90bf5ca1b2e of
msgid "Bases: :py:class:`object`"
msgstr ""
#: 63116ed6c91d453699c088d731caf20a canaille.backends.models.BackendModel:1 of
msgid "The backend model abstract class."
msgstr ""
#: canaille.backends.models.BackendModel:3 f4524953577a49bf8678c8b188e5adb6 of
msgid ""
"It details all the methods and attributes that are expected to be "
"implemented for every model and for every backend."
msgstr ""
#: a6aaa68e16874197bf3e39cf89b6a036 canaille.backends.models.Model:1 of
msgid "The model abstract class."
msgstr ""
#: canaille.backends.models.Model:3 da1fe57e308a48d78e0e83fe63c8b3c6 of
msgid "It details all the common attributes shared by every models."
msgstr ""
#: ../../docstring 7f5c0dd217f74ea7b921ab45afa69827
#: canaille.backends.models.Model.created:1 of
msgid ""
"The :class:`~datetime.datetime` that the resource was added to the "
"service provider."
msgstr ""
#: ../../docstring 04708c2ef09846e3878f0ff1e3d633fe
#: canaille.backends.models.Model.id:1 of
msgid ""
"A unique identifier for a SCIM resource as defined by the service "
"provider. Id will be :py:data:`None` until the "
":meth:`~canaille.backends.models.BackendModel.save` method is called."
msgstr ""
#: ../../docstring canaille.backends.models.Model.id:5
#: d8ccb6e0f9084dd8b3c0f2ca54639181 of
msgid ""
"Each representation of the resource MUST include a non-empty \"id\" "
"value. This identifier MUST be unique across the SCIM service provider's"
" entire set of resources. It MUST be a stable, non- reassignable "
"identifier that does not change when the same resource is returned in "
"subsequent requests. The value of the \"id\" attribute is always issued "
"by the service provider and MUST NOT be specified by the client. The "
"string \"bulkId\" is a reserved keyword and MUST NOT be used within any "
"unique identifier value. The attribute characteristics are \"caseExact\""
" as \"true\", a mutability of \"readOnly\", and a \"returned\" "
"characteristic of \"always\". See Section 9 for additional "
"considerations regarding privacy."
msgstr ""
#: 020241a96a474546ae111c3ea3191e86 canaille.backends.models.Model.identifier:1
#: of
msgid "Returns a unique value that will be used to identify the model instance."
msgstr ""
#: 231d639f48f94e48bcedad9f668a9356 canaille.backends.models.Model.identifier:4
#: of
msgid ""
"This value will be used in URLs in canaille, so it should be unique and "
"short."
msgstr ""
#: ../../docstring canaille.backends.models.Model.last_modified:1
#: d8b60486668f4266a8791d7c7cfbf39c of
msgid ""
"The most recent :class:`~datetime.datetime` that the details of this "
"resource were updated at the service provider."
msgstr ""
#: ../../docstring 6a9d98cacf2c416b85166e3a0aec85fd
#: canaille.backends.models.Model.last_modified:4 of
msgid ""
"If this resource has never been modified since its initial creation, the "
"value MUST be the same as the value of "
":attr:`~canaille.backends.models.Model.created`."
msgstr ""
#: 5f668d908027491b83f43d47569cab63 69589482ca65403ca8e743b646c9226c
#: 8876abfe97934f2284562899c84595eb a29dec25115a43c794775e581331c082
#: canaille.core.models.Group:1 canaille.core.models.User:1
#: canaille.oidc.basemodels.AuthorizationCode:1
#: canaille.oidc.basemodels.Client:1 canaille.oidc.basemodels.Consent:1
#: canaille.oidc.basemodels.Token:1 ce9d675b71084e3dbc3655cd504a4c6b
#: fae1f8c6af6b466ba27a3a588206e54f of
msgid "Bases: :py:class:`~canaille.backends.models.Model`"
msgstr ""
#: b68f1d5863af434d84f2dd1f2274da3f canaille.core.models.Group:1 of
msgid ""
"User model, based on the `SCIM Group schema "
"<https://datatracker.ietf.org/doc/html/rfc7643#section-4.2>`_."
msgstr ""
#: ../../docstring 5cb994b4454747b3a666042ac273eb54
#: canaille.core.models.Group.display_name:1 of
msgid "A human-readable name for the Group."
msgstr ""
#: ../../docstring 4e19158978d64e339bbebfe89187fda4
#: canaille.core.models.Group.display_name:3
#: canaille.oidc.basemodels.Client.client_id:1 e5c85cd76a0e45e89978c6b631a162fb
#: of
msgid "REQUIRED."
msgstr ""
#: ../../docstring c2575699ceae4913afedd4f3e627f4d3
#: canaille.core.models.Group.members:1 of
msgid "A list of members of the Group."
msgstr ""
#: ../../docstring canaille.core.models.Group.members:3
#: e3f8e66541d7400585c45538dd4e1768 of
msgid ""
"While values MAY be added or removed, sub-attributes of members are "
"\"immutable\". The \"value\" sub-attribute contains the value of an "
"\"id\" attribute of a SCIM resource, and the \"$ref\" sub-attribute must "
"be the URI of a SCIM resource such as a \"User\", or a \"Group\". The "
"intention of the \"Group\" type is to allow the service provider to "
"support nested groups. Service providers MAY require clients to provide "
"a non-empty value by setting the \"required\" attribute characteristic of"
" a sub-attribute of the \"members\" attribute in the \"Group\" resource "
"schema."
msgstr ""
#: b5df55612ee34e12a13d0a7917b38d09 canaille.core.models.User:1 of
msgid ""
"User model, based on the `SCIM User schema "
"<https://datatracker.ietf.org/doc/html/rfc7643#section-4.1>`_, "
"`Entreprise User Schema Extension "
"<https://datatracker.ietf.org/doc/html/rfc7643#section-4.3>`_ and `SCIM "
"Password Management Extension <https://datatracker.ietf.org/doc/html"
"/draft-hunt-scim-password-mgmt-00.html>`_ draft. Attribute description is"
" based on SCIM and put there for information purpose. The description may"
" not fit the current implementation in Canaille."
msgstr ""
#: 3f76320039b1471fa3d303706bbafa21 canaille.core.models.User.can:1 of
msgid ""
"Whether or not the user has the "
":class:`~canaille.core.configuration.Permission` according to the "
":class:`configuration <canaille.core.configuration.ACLSettings>`."
msgstr ""
#: ../../docstring canaille.core.models.User.department:1
#: d3b2c286ea6e4fc6bc807a167a2c7fb9 of
msgid "Identifies the name of a department."
msgstr ""
#: ../../docstring 6c7b40d8ba934aacbeb56018b53fe48e
#: canaille.core.models.User.display_name:1 of
msgid "The name of the user, suitable for display to end-users."
msgstr ""
#: ../../docstring 9c9639c9bdd747b8bceb5a5302fa2d34
#: canaille.core.models.User.display_name:3 of
msgid ""
"Each user returned MAY include a non-empty displayName value. The name "
"SHOULD be the full name of the User being described, if known (e.g., "
"\"Babs Jensen\" or \"Ms. Barbara J Jensen, III\") but MAY be a username "
"or handle, if that is all that is available (e.g., \"bjensen\"). The "
"value provided SHOULD be the primary textual label by which this User is "
"normally displayed by the service provider when presenting it to end-"
"users."
msgstr ""
#: ../../docstring 9c0fab528d5542f5846331d9cb490996
#: canaille.core.models.User.emails:1 of
msgid "Email addresses for the User."
msgstr ""
#: ../../docstring 4346ea844ff94ace979c35990baa285d
#: canaille.core.models.User.emails:3 of
msgid ""
"The value SHOULD be specified according to [RFC5321]. Service providers "
"SHOULD canonicalize the value according to [RFC5321], e.g., "
"\"bjensen@example.com\" instead of \"bjensen@EXAMPLE.COM\". The "
"\"display\" sub-attribute MAY be used to return the canonicalized "
"representation of the email value. The \"type\" sub-attribute is used to "
"provide a classification meaningful to the (human) user. The user "
"interface should encourage the use of basic values of \"work\", \"home\","
" and \"other\" and MAY allow additional type values to be used at the "
"discretion of SCIM clients."
msgstr ""
#: ../../docstring 6a1f48ce3e5542d6bdd155c1e90d2856
#: canaille.core.models.User.employee_number:1 of
msgid ""
"A string identifier, typically numeric or alphanumeric, assigned to a "
"person, typically based on order of hire or association with an "
"organization."
msgstr ""
#: ../../docstring 2fe990abc285421b926f43792db8318d
#: canaille.core.models.User.family_name:1 of
msgid ""
"The family name of the User, or last name in most Western languages "
"(e.g., \"Jensen\" given the full name \"Ms. Barbara Jane Jensen, III\")."
msgstr ""
#: ../../docstring canaille.core.models.User.formatted_address:1
#: de06c1dda5594f7f911f6085f2bf30bd of
msgid ""
"The full mailing address, formatted for display or use with a mailing "
"label."
msgstr ""
#: ../../docstring 8b94760c15f746ddb944a77ac25a9ce0
#: canaille.core.models.User.formatted_address:4 of
msgid "This attribute MAY contain newlines."
msgstr ""
#: ../../docstring canaille.core.models.User.formatted_name:1
#: e90822537c784a218e13ecd2327f4032 of
msgid ""
"The full name, including all middle names, titles, and suffixes as "
"appropriate, formatted for display (e.g., \"Ms. Barbara Jane Jensen, "
"III\")."
msgstr ""
#: ../../docstring 8ae81deab78d46229cb7034af9d3a71c
#: canaille.core.models.User.given_name:1 of
msgid ""
"The given name of the User, or first name in most Western languages "
"(e.g., \"Barbara\" given the full name \"Ms. Barbara Jane Jensen, III\")."
msgstr ""
#: ../../docstring 8ac614afa7d7492b9ff3c34926139337
#: canaille.core.models.User.groups:1 of
msgid ""
"A list of groups to which the user belongs, either through direct "
"membership, through nested groups, or dynamically calculated."
msgstr ""
#: ../../docstring 64ecefbdac514114b98ab34eb6b18d86
#: canaille.core.models.User.groups:4 of
msgid ""
"The values are meant to enable expression of common group-based or role-"
"based access control models, although no explicit authorization model is "
"defined. It is intended that the semantics of group membership and any "
"behavior or authorization granted as a result of membership are defined "
"by the service provider. The canonical types \"direct\" and \"indirect\""
" are defined to describe how the group membership was derived. Direct "
"group membership indicates that the user is directly associated with the "
"group and SHOULD indicate that clients may modify membership through the "
"\"Group\" resource. Indirect membership indicates that user membership is"
" transitive or dynamic and implies that clients cannot modify indirect "
"group membership through the \"Group\" resource but MAY modify direct "
"group membership through the \"Group\" resource, which may influence "
"indirect memberships. If the SCIM service provider exposes a \"Group\" "
"resource, the \"value\" sub-attribute MUST be the \"id\", and the "
"\"$ref\" sub-attribute must be the URI of the corresponding \"Group\" "
"resources to which the user belongs. Since this attribute has a "
"mutability of \"readOnly\", group membership changes MUST be applied via "
"the \"Group\" Resource (Section 4.2). This attribute has a mutability of"
" \"readOnly\"."
msgstr ""
#: 32921c5be2af4fd59bc8712a4071b310 canaille.core.models.User.has_password:1 of
msgid "Check whether a password has been set for the user."
msgstr ""
#: ../../docstring a4d5f217e56048b294e83da6122343b8
#: canaille.core.models.User.locality:1 of
msgid "The city or locality component."
msgstr ""
#: ../../docstring 68d7a39110204de29ed183c56659c5df
#: canaille.core.models.User.lock_date:1 of
msgid "A DateTime indicating when the resource was locked."
msgstr ""
#: ba543c6c70264b638dc437b2bd20769c canaille.core.models.User.locked:1 of
msgid "Whether the user account has been locked or has expired."
msgstr ""
#: ../../docstring c2eb1949f9704bd0bfe177df71b2dcde
#: canaille.core.models.User.organization:1 of
msgid "Identifies the name of an organization."
msgstr ""
#: ../../docstring a523a6b41e3d48e0a7c179fd2a236c59
#: canaille.core.models.User.password:1 of
msgid ""
"This attribute is intended to be used as a means to set, replace, or "
"compare (i.e., filter for equality) a password. The cleartext value or "
"the hashed value of a password SHALL NOT be returnable by a service "
"provider. If a service provider holds the value locally, the value "
"SHOULD be hashed. When a password is set or changed by the client, the "
"cleartext password SHOULD be processed by the service provider as "
"follows:"
msgstr ""
#: ../../docstring 5ecbdffadb59485a8135fcbc0d0bbf99
#: canaille.core.models.User.password:9 of
msgid ""
"Prepare the cleartext value for international language comparison. See "
"Section 7.8 of [RFC7644]."
msgstr ""
#: ../../docstring 6cbc065374cf47e69971c823f67b2c34
#: canaille.core.models.User.password:12 of
msgid ""
"Validate the value against server password policy. Note: The definition "
"and enforcement of password policy are beyond the scope of this document."
msgstr ""
#: ../../docstring 4c354c83ceb04fe39b2845ca70317fe9
#: canaille.core.models.User.password:16 of
msgid ""
"Ensure that the value is encrypted (e.g., hashed). See Section 9.2 for "
"acceptable hashing and encryption handling when storing or persisting for"
" provisioning workflow reasons."
msgstr ""
#: ../../docstring 3b4d469de19c469bb9c24dc3cf694e20
#: canaille.core.models.User.password:20 of
msgid ""
"A service provider that immediately passes the cleartext value on to "
"another system or programming interface MUST pass the value directly over"
" a secured connection (e.g., Transport Layer Security (TLS)). If the "
"value needs to be temporarily persisted for a period of time (e.g., "
"because of a workflow) before provisioning, then the value MUST be "
"protected by some method, such as encryption."
msgstr ""
#: ../../docstring 2d7021ce458a44919b848545526f767f
#: canaille.core.models.User.password:28 of
msgid ""
"Testing for an equality match MAY be supported if there is an existing "
"stored hashed value. When testing for equality, the service provider:"
msgstr ""
#: ../../docstring 656c0f86ad244b6eb25f35d2ae6b3f56
#: canaille.core.models.User.password:32 of
msgid ""
"Prepares the filter value for international language comparison. See "
"Section 7.8 of [RFC7644]."
msgstr ""
#: ../../docstring 145c3c799b3542969e443e85dbd6a473
#: canaille.core.models.User.password:35 of
msgid ""
"Generates the salted hash of the filter value and tests for a match with "
"the locally held value."
msgstr ""
#: ../../docstring 8c7c1fcc8a2c40ddb28827f5d90e609a
#: canaille.core.models.User.password:38 of
msgid ""
"The mutability of the password attribute is \"writeOnly\", indicating "
"that the value MUST NOT be returned by a service provider in any form "
"(the attribute characteristic \"returned\" is \"never\")."
msgstr ""
#: ../../docstring canaille.core.models.User.phone_numbers:1
#: f6270635316b47c0a082bc419e9f3d50 of
msgid "Phone numbers for the user."
msgstr ""
#: ../../docstring 0e5dd015ff6445b0ad2d657e3c478a60
#: canaille.core.models.User.phone_numbers:3 of
msgid ""
"The value SHOULD be specified according to the format defined in "
"[RFC3966], e.g., 'tel:+1-201-555-0123'. Service providers SHOULD "
"canonicalize the value according to [RFC3966] format, when appropriate. "
"The \"display\" sub-attribute MAY be used to return the canonicalized "
"representation of the phone number value. The sub- attribute \"type\" "
"often has typical values of \"work\", \"home\", \"mobile\", \"fax\", "
"\"pager\", and \"other\" and MAY allow more types to be defined by the "
"SCIM clients."
msgstr ""
#: ../../docstring b4393fc3b75d4cc7a2f4a12ea66f570e
#: canaille.core.models.User.photo:1 of
msgid ""
"A URI that is a uniform resource locator (as defined in Section 1.1.3 of "
"[RFC3986]) that points to a resource location representing the user's "
"image."
msgstr ""
#: ../../docstring 29a0cbb891f54b0f8cb2bbb1c1dfd13f
#: canaille.core.models.User.photo:5 of
msgid ""
"The resource MUST be a file (e.g., a GIF, JPEG, or PNG image file) rather"
" than a web page containing an image. Service providers MAY return the "
"same image in different sizes, although it is recognized that no standard"
" for describing images of various sizes currently exists. Note that this"
" attribute SHOULD NOT be used to send down arbitrary photos taken by this"
" user; instead, profile photos of the user that are suitable for display "
"when describing the user should be sent. Instead of the standard "
"canonical values for type, this attribute defines the following canonical"
" values to represent popular photo sizes: \"photo\" and \"thumbnail\"."
msgstr ""
#: ../../docstring 4dd6128b926146c28e324323b623bb34
#: canaille.core.models.User.postal_code:1 of
msgid "The zip code or postal code component."
msgstr ""
#: ../../docstring 04b523711b5442bcbe64131a0508dedd
#: canaille.core.models.User.preferred_language:1 of
msgid ""
"Indicates the user's preferred written or spoken languages and is "
"generally used for selecting a localized user interface."
msgstr ""
#: ../../docstring canaille.core.models.User.preferred_language:4
#: e1772c7ebcd44649bf29311713835b49 of
msgid ""
"The value indicates the set of natural languages that are preferred. The "
"format of the value is the same as the HTTP Accept-Language header field "
"(not including \"Accept-Language:\") and is specified in Section 5.3.5 of"
" [RFC7231]. The intent of this value is to enable cloud applications to "
"perform matching of language tags [RFC4647] to the user's language "
"preferences, regardless of what may be indicated by a user agent (which "
"might be shared), or in an interaction that does not involve a user (such"
" as in a delegated OAuth 2.0 [RFC6749] style interaction) where normal "
"HTTP Accept-Language header negotiation cannot take place."
msgstr ""
#: ../../docstring 6aa9c30d875f4ab5bcbfc7bee601f517
#: canaille.core.models.User.profile_url:1 of
msgid ""
"A URI that is a uniform resource locator (as defined in Section 1.1.3 of "
"[RFC3986]) and that points to a location representing the user's online "
"profile (e.g., a web page)."
msgstr ""
#: ../../docstring canaille.core.models.User.profile_url:5
#: fc7d54c2056b44aba5e2b2bd60e33a21 of
msgid "URIs are canonicalized per Section 6.2 of [RFC3986]."
msgstr ""
#: 8edaeac977064f1b874aeb0682c95aad canaille.core.models.User.readable_fields:1
#: of
msgid ""
"The fields the user can read according to the :class:`configuration "
"<canaille.core.configuration.ACLSettings>` configuration."
msgstr ""
#: 0cc7f45175d04ae78b035d1ca4a589c8 canaille.core.models.User.readable_fields:4
#: of
msgid ""
"This does not include the :attr:`writable "
"<canaille.core.models.User.writable_fields>` fields."
msgstr ""
#: ../../docstring 4146c490dcf2422d8c284a1c4aba8c6b
#: canaille.core.models.User.region:1 of
msgid "The state or region component."
msgstr ""
#: ../../docstring 049e8a5b7701411f9da7ba9c3c754d04
#: canaille.core.models.User.street:1 of
msgid ""
"The full street address component, which may include house number, street"
" name, P.O."
msgstr ""
#: ../../docstring 0ab2e0885bc24c46b7ad9e6f55f7ebb0
#: canaille.core.models.User.street:4 of
msgid ""
"box, and multi-line extended street address information. This attribute "
"MAY contain newlines."
msgstr ""
#: ../../docstring 75afc62c58134ad8a38e8d59f0743994
#: canaille.core.models.User.title:1 of
msgid "The user's title, such as \"Vice President\"."
msgstr ""
#: ../../docstring 5850e73e21a642efaa0e6ae54a55f0cd
#: canaille.core.models.User.user_name:1 of
msgid ""
"A service provider's unique identifier for the user, typically used by "
"the user to directly authenticate to the service provider."
msgstr ""
#: ../../docstring 4555ed2797644feaa577f9edc6284ab6
#: canaille.core.models.User.user_name:4 of
msgid ""
"Often displayed to the user as their unique identifier within the system "
"(as opposed to \"id\" or \"externalId\", which are generally opaque and "
"not user-friendly identifiers). Each User MUST include a non-empty "
"userName value. This identifier MUST be unique across the service "
"provider's entire set of Users. This attribute is REQUIRED and is case "
"insensitive."
msgstr ""
#: 0a3321c9a0bc481c830aed35014cd2e8 canaille.core.models.User.writable_fields:1
#: of
msgid ""
"The fields the user can write according to the :class:`configuration "
"<canaille.core.configuration.ACLSettings>`."
msgstr ""
#: canaille.oidc.basemodels.AuthorizationCode:1
#: fe9d924164fb4587b942938d012016b9 of
msgid "OpenID Connect temporary authorization code definition."
msgstr ""
#: canaille.oidc.basemodels.Client:1 d1fa5a8cbf7d458494679089a2aba2fb of
msgid ""
"OpenID Connect client definition, based on the `OAuth 2.0 Dynamic Client "
"Registration protocols "
"<https://datatracker.ietf.org/doc/html/rfc7591.html>`_ and the `OpenID "
"Connect RP-Initiated Logout <https://openid.net/specs/openid-connect-"
"rpinitiated-1_0.html>`_ specifications."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.client_id:3
#: d80b7305a4714ac4a3d9de849ffa97bf of
msgid ""
"OAuth 2.0 client identifier string. It SHOULD NOT be currently valid for"
" any other registered client, though an authorization server MAY issue "
"the same client identifier to multiple instances of a registered client "
"at its discretion."
msgstr ""
#: ../../docstring 1b11125f523948e1b47df25bea51d9cf
#: 2300f7bc0bc24c79b9c75cfd19e27b95 b395648712ba4ce8934afebc751f1618
#: canaille.oidc.basemodels.Client.client_id_issued_at:1
#: canaille.oidc.basemodels.Client.client_secret:1
#: canaille.oidc.basemodels.Client.post_logout_redirect_uris:1 of
msgid "OPTIONAL."
msgstr ""
#: ../../docstring 11a22bc5758e4a6ab4b916f3bada85fe
#: canaille.oidc.basemodels.Client.client_id_issued_at:3 of
msgid ""
"Time at which the client identifier was issued. The time is represented "
"as the number of seconds from 1970-01-01T00:00:00Z as measured in UTC "
"until the date/time of issuance."
msgstr ""
#: ../../docstring 406f7421746d4f0d84fd323c6975589f
#: canaille.oidc.basemodels.Client.client_name:1 of
msgid ""
"Human-readable string name of the client to be presented to the end-user "
"during authorization."
msgstr ""
#: ../../docstring b1a271e42321484f8ab7e02e8a0630f8
#: canaille.oidc.basemodels.Client.client_name:4 of
msgid ""
"If omitted, the authorization server MAY display the raw \"client_id\" "
"value to the end-user instead. It is RECOMMENDED that clients always "
"send this field. The value of this field MAY be internationalized, as "
"described in Section 2.2."
msgstr ""
#: ../../docstring a57ad017042549a0b814e77b12849fba
#: canaille.oidc.basemodels.Client.client_secret:3 of
msgid ""
"OAuth 2.0 client secret string. If issued, this MUST be unique for each "
"\"client_id\" and SHOULD be unique for multiple instances of a client "
"using the same \"client_id\". This value is used by confidential clients"
" to authenticate to the token endpoint, as described in OAuth 2.0 "
"[RFC6749], Section 2.3.1."
msgstr ""
#: ../../docstring 22f18a7e3b184e04bf11533077bccd1b
#: canaille.oidc.basemodels.Client.client_secret_expires_at:1 of
msgid "REQUIRED if \"client_secret\" is issued."
msgstr ""
#: ../../docstring 07641c93932b45f4a7b2b98f6761fa98
#: canaille.oidc.basemodels.Client.client_secret_expires_at:3 of
msgid ""
"Time at which the client secret will expire or 0 if it will not expire. "
"The time is represented as the number of seconds from "
"1970-01-01T00:00:00Z as measured in UTC until the date/time of "
"expiration."
msgstr ""
#: ../../docstring 00ecf7b29a6241ab8cc7f8480cc13729
#: canaille.oidc.basemodels.Client.client_uri:1 of
msgid "URL string of a web page providing information about the client."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.client_uri:3
#: df7fc4a043c14b4d8822ebb2d2ef8f32 of
msgid ""
"If present, the server SHOULD display this URL to the end-user in a "
"clickable fashion. It is RECOMMENDED that clients always send this "
"field. The value of this field MUST point to a valid web page. The "
"value of this field MAY be internationalized, as described in Section "
"2.2."
msgstr ""
#: ../../docstring 19d18f0b6e0b430fad3a38ccadcbec70
#: canaille.oidc.basemodels.Client.contacts:1 of
msgid ""
"Array of strings representing ways to contact people responsible for this"
" client, typically email addresses."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.contacts:4
#: fe619b319fd54f0e9f6a3b61b19545e8 of
msgid ""
"The authorization server MAY make these contact addresses available to "
"end-users for support requests for the client. See Section 6 for "
"information on Privacy Considerations."
msgstr ""
#: ../../docstring 90b56e1723dd4c049ab3a6f560d33a87
#: canaille.oidc.basemodels.Client.grant_types:1 of
msgid ""
"Array of OAuth 2.0 grant type strings that the client can use at the "
"token endpoint. These grant types are defined as follows:"
msgstr ""
#: ../../docstring 5873bfc5a02b48a29bf739b576f71410
#: canaille.oidc.basemodels.Client.grant_types:4 of
msgid ""
"\"authorization_code\": The authorization code grant type defined in "
"OAuth 2.0, Section 4.1."
msgstr ""
#: ../../docstring 167a4b7521454d9c8d9852c06cc76155
#: canaille.oidc.basemodels.Client.grant_types:7 of
msgid "\"implicit\": The implicit grant type defined in OAuth 2.0, Section 4.2."
msgstr ""
#: ../../docstring b069ce3e42914633ae69a552557497af
#: canaille.oidc.basemodels.Client.grant_types:10 of
msgid ""
"\"password\": The resource owner password credentials grant type defined "
"in OAuth 2.0, Section 4.3."
msgstr ""
#: ../../docstring c5923a28a3fb4d8eaa3f837afe9d4357
#: canaille.oidc.basemodels.Client.grant_types:13 of
msgid ""
"\"client_credentials\": The client credentials grant type defined in "
"OAuth 2.0, Section 4.4."
msgstr ""
#: ../../docstring 07d597d9e6a84f94a8152e04d1eedf38
#: canaille.oidc.basemodels.Client.grant_types:16 of
msgid ""
"\"refresh_token\": The refresh token grant type defined in OAuth 2.0, "
"Section 6."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.grant_types:19
#: cf54246868494647903b6b790ddac962 of
msgid ""
"\"urn:ietf:params:oauth:grant-type:jwt-bearer\": The JWT Bearer Token "
"Grant Type defined in OAuth JWT Bearer Token Profiles [RFC7523]."
msgstr ""
#: ../../docstring a6d3ab8808914df3b7a5e1c747f03b64
#: canaille.oidc.basemodels.Client.grant_types:23 of
msgid ""
"\"urn:ietf:params:oauth:grant-type:saml2-bearer\": The SAML 2.0 Bearer "
"Assertion Grant defined in OAuth SAML 2 Bearer Token Profiles [RFC7522]."
msgstr ""
#: ../../docstring 2de10f7660364aab907a404d9245c9af
#: canaille.oidc.basemodels.Client.grant_types:27 of
msgid ""
"If the token endpoint is used in the grant type, the value of this "
"parameter MUST be the same as the value of the \"grant_type\" parameter "
"passed to the token endpoint defined in the grant type definition. "
"Authorization servers MAY allow for other values as defined in the grant "
"type extension process described in OAuth 2.0, Section 4.5. If omitted, "
"the default behavior is that the client will use only the "
"\"authorization_code\" Grant Type."
msgstr ""
#: ../../docstring b5bd2dd5cc7c46f1b61f0cfda03150bb
#: canaille.oidc.basemodels.Client.jwk:1 of
msgid ""
"Client's JSON Web Key Set [RFC7517] document value, which contains the "
"client's public keys."
msgstr ""
#: ../../docstring 9bab75b252bc414e9634643834bf50c8
#: canaille.oidc.basemodels.Client.jwk:4 of
msgid ""
"The value of this field MUST be a JSON object containing a valid JWK Set."
" These keys can be used by higher-level protocols that use signing or "
"encryption. This parameter is intended to be used by clients that cannot"
" use the \"jwks_uri\" parameter, such as native clients that cannot host "
"public URLs. The \"jwks_uri\" and \"jwks\" parameters MUST NOT both be "
"present in the same request or response."
msgstr ""
#: ../../docstring 57578f71f8f54719934081048136176d
#: canaille.oidc.basemodels.Client.jwks_uri:1 of
msgid ""
"URL string referencing the client's JSON Web Key (JWK) Set [RFC7517] "
"document, which contains the client's public keys."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.jwks_uri:4
#: f740381df0634148950cc7fed3b62285 of
msgid ""
"The value of this field MUST point to a valid JWK Set document. These "
"keys can be used by higher-level protocols that use signing or "
"encryption. For instance, these keys might be used by some applications "
"for validating signed requests made to the token endpoint when using JWTs"
" for client authentication [RFC7523]. Use of this parameter is preferred"
" over the \"jwks\" parameter, as it allows for easier key rotation. The "
"\"jwks_uri\" and \"jwks\" parameters MUST NOT both be present in the same"
" request or response."
msgstr ""
#: ../../docstring 398cacd6dae7426c896accbef1b05031
#: canaille.oidc.basemodels.Client.logo_uri:1 of
msgid "URL string that references a logo for the client."
msgstr ""
#: ../../docstring b54bb5d58c8b4590a5780f56de3684fc
#: canaille.oidc.basemodels.Client.logo_uri:3 of
msgid ""
"If present, the server SHOULD display this image to the end-user during "
"approval. The value of this field MUST point to a valid image file. The "
"value of this field MAY be internationalized, as described in Section "
"2.2."
msgstr ""
#: ../../docstring 7b8c071af0e541b4a1cd23ccab94537c
#: canaille.oidc.basemodels.Client.policy_uri:1 of
msgid ""
"URL string that points to a human-readable privacy policy document that "
"describes how the deployment organization collects, uses, retains, and "
"discloses personal data."
msgstr ""
#: ../../docstring 0d53a7af1fe74511bb2cffa04042c471
#: 4930f030916748c3a07eb59f0466950f
#: canaille.oidc.basemodels.Client.policy_uri:5
#: canaille.oidc.basemodels.Client.tos_uri:5 of
msgid ""
"The authorization server SHOULD display this URL to the end-user if it is"
" provided. The value of this field MUST point to a valid web page. The "
"value of this field MAY be internationalized, as described in Section "
"2.2."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.post_logout_redirect_uris:3
#: ff29a92b953f491e8c9d916adbffffa3 of
msgid ""
"Array of URLs supplied by the RP to which it MAY request that the End-"
"User's User Agent be redirected using the post_logout_redirect_uri "
"parameter after a logout has been performed. These URLs SHOULD use the "
"https scheme and MAY contain port, path, and query parameter components; "
"however, they MAY use the http scheme, provided that the Client Type is "
"confidential, as defined in Section 2.1 of OAuth 2.0 [RFC6749], and "
"provided the OP allows the use of http RP URIs."
msgstr ""
#: ../../docstring 2741c91c5c934f318d4268fc9848e2cc
#: canaille.oidc.basemodels.Client.redirect_uris:1 of
msgid ""
"Array of redirection URI strings for use in redirect-based flows such as "
"the authorization code and implicit flows."
msgstr ""
#: ../../docstring 5f7e65eb067c4b819749078240746df7
#: canaille.oidc.basemodels.Client.redirect_uris:4 of
msgid ""
"As required by Section 2 of OAuth 2.0 [RFC6749], clients using flows with"
" redirection MUST register their redirection URI values. Authorization "
"servers that support dynamic registration for redirect-based flows MUST "
"implement support for this metadata value."
msgstr ""
#: ../../docstring 54d3901cbefe4700bd6b94c8f20b8984
#: canaille.oidc.basemodels.Client.response_types:1 of
msgid ""
"Array of the OAuth 2.0 response type strings that the client can use at "
"the authorization endpoint. These response types are defined as follows:"
msgstr ""
#: ../../docstring 0f5f76aef1d5434bbb01e66b6b427c17
#: canaille.oidc.basemodels.Client.response_types:5 of
msgid ""
"\"code\": The authorization code response type defined in OAuth 2.0, "
"Section 4.1."
msgstr ""
#: ../../docstring 5ba120e7f7d64db498c53f4fcedbcdc1
#: canaille.oidc.basemodels.Client.response_types:8 of
msgid "\"token\": The implicit response type defined in OAuth 2.0, Section 4.2."
msgstr ""
#: ../../docstring 9c7d0bdc0f0240a38535d2575a44ff9c
#: canaille.oidc.basemodels.Client.response_types:11 of
msgid ""
"If the authorization endpoint is used by the grant type, the value of "
"this parameter MUST be the same as the value of the \"response_type\" "
"parameter passed to the authorization endpoint defined in the grant type "
"definition. Authorization servers MAY allow for other values as defined "
"in the grant type extension process is described in OAuth 2.0, Section "
"4.5. If omitted, the default is that the client will use only the "
"\"code\" response type."
msgstr ""
#: ../../docstring ac1eac1d27b642d8a7cebbf513181629
#: canaille.oidc.basemodels.Client.scope:1 of
msgid ""
"String containing a space-separated list of scope values (as described in"
" Section 3.3 of OAuth 2.0 [RFC6749]) that the client can use when "
"requesting access tokens."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.scope:5
#: d960080bf7574b5283c226b0ab2b9372 of
msgid ""
"The semantics of values in this list are service specific. If omitted, "
"an authorization server MAY register a client with a default set of "
"scopes."
msgstr ""
#: ../../docstring canaille.oidc.basemodels.Client.software_id:1
#: d1f72b9bc83c41bb88c7ffcf09937ce5 of
msgid ""
"A unique identifier string (e.g., a Universally Unique Identifier (UUID))"
" assigned by the client developer or software publisher used by "
"registration endpoints to identify the client software to be dynamically "
"registered."
msgstr ""
#: ../../docstring a94bd506bcb84e018b965df1597fb0b1
#: canaille.oidc.basemodels.Client.software_id:6 of
msgid ""
"Unlike \"client_id\", which is issued by the authorization server and "
"SHOULD vary between instances, the \"software_id\" SHOULD remain the same"
" for all instances of the client software. The \"software_id\" SHOULD "
"remain the same across multiple updates or versions of the same piece of "
"software. The value of this field is not intended to be human readable "
"and is usually opaque to the client and authorization server."
msgstr ""
#: ../../docstring 0ae66a5b4e724bd8b4f80cc69f3fd44b
#: canaille.oidc.basemodels.Client.software_version:1 of
msgid ""
"A version identifier string for the client software identified by "
"\"software_id\"."
msgstr ""
#: ../../docstring 59f8fb95a6ec452bba957f87795edec6
#: canaille.oidc.basemodels.Client.software_version:4 of
msgid ""
"The value of the \"software_version\" SHOULD change on any update to the "
"client software identified by the same \"software_id\". The value of "
"this field is intended to be compared using string equality matching and "
"no other comparison semantics are defined by this specification. The "
"value of this field is outside the scope of this specification, but it is"
" not intended to be human readable and is usually opaque to the client "
"and authorization server. The definition of what constitutes an update "
"to client software that would trigger a change to this value is specific "
"to the software itself and is outside the scope of this specification."
msgstr ""
#: ../../docstring 0c628b480a714a86b406cd36d8d80275
#: canaille.oidc.basemodels.Client.token_endpoint_auth_method:1 of
msgid ""
"String indicator of the requested authentication method for the token "
"endpoint. Values defined by this specification are:"
msgstr ""
#: ../../docstring 546228d2e7e54942a2ae632997ab67c6
#: canaille.oidc.basemodels.Client.token_endpoint_auth_method:4 of
msgid ""
"\"none\": The client is a public client as defined in OAuth 2.0, Section "
"2.1, and does not have a client secret."
msgstr ""
#: ../../docstring 73c66cc275a34ba68ee43b9fb40c21f5
#: canaille.oidc.basemodels.Client.token_endpoint_auth_method:7 of
msgid ""
"\"client_secret_post\": The client uses the HTTP POST parameters as "
"defined in OAuth 2.0, Section 2.3.1."
msgstr ""
#: ../../docstring 084496ca247d426c8e295865ee194907
#: canaille.oidc.basemodels.Client.token_endpoint_auth_method:10 of
msgid ""
"\"client_secret_basic\": The client uses HTTP Basic as defined in OAuth "
"2.0, Section 2.3.1."
msgstr ""
#: ../../docstring 6c77b2e92a9242a1a1ac779a50a6b959
#: canaille.oidc.basemodels.Client.token_endpoint_auth_method:13 of
msgid ""
"Additional values can be defined via the IANA \"OAuth Token Endpoint "
"Authentication Methods\" registry established in Section 4.2. Absolute "
"URIs can also be used as values for this parameter without being "
"registered. If unspecified or omitted, the default is "
"\"client_secret_basic\", denoting the HTTP Basic authentication scheme as"
" specified in Section 2.3.1 of OAuth 2.0."
msgstr ""
#: ../../docstring 36417da6c2f44c7e92cae7cb3f0ba7cb
#: canaille.oidc.basemodels.Client.tos_uri:1 of
msgid ""
"URL string that points to a human-readable terms of service document for "
"the client that describes a contractual relationship between the end-user"
" and the client that the end-user accepts when authorizing the client."
msgstr ""
#: canaille.oidc.basemodels.Consent:1 f160b96459c64852b6038a5bede57527 of
msgid "Long-term user consent to an application."
msgstr ""
#: 3be00302014441608d644b1a2a2de130 canaille.oidc.basemodels.Token:1 of
msgid "OpenID Connect token definition."
msgstr ""

466
doc/locales/fr_FR/LC_MESSAGES/tutorial.po Normal file
View file

@ -0,0 +1,466 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:35+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/databases.rst:2
msgid "Databases"
msgstr ""
#: ../../doc/tutorial/databases.rst:4
msgid ""
"Canaille can read and save data in different databases. This page "
"presents the different database backends and their specificities:"
msgstr ""
#: ../../doc/tutorial/databases.rst:8
msgid "Memory"
msgstr ""
#: ../../doc/tutorial/databases.rst:10
msgid ""
"Canaille comes with a lightweight inmemory backend by default. It is used"
" when no other backend has been configured."
msgstr ""
#: ../../doc/tutorial/databases.rst:13
msgid ""
"This backend is only for test purpose and should not be used in "
"production environments."
msgstr ""
#: ../../doc/tutorial/databases.rst:16
msgid "SQL"
msgstr ""
#: ../../doc/tutorial/databases.rst:18
msgid ""
"Canaille can use any database supported by `SQLAlchemy "
"<https://www.sqlalchemy.org/>`_, such as sqlite, postgresql or mariadb."
msgstr ""
#: ../../doc/tutorial/databases.rst:21
msgid ""
"It is used when the ``CANAILLE_SQL`` configuration parameter is defined. "
"For instance:"
msgstr ""
#: ../../doc/tutorial/databases.rst:23 ../../doc/tutorial/databases.rst:37
msgid "config.toml"
msgstr ""
#: ../../doc/tutorial/databases.rst:29
msgid ""
"You can find more details on the SQL configuration in the "
":class:`dedicated section "
"<canaille.backends.sql.configuration.SQLSettings>`."
msgstr ""
#: ../../doc/tutorial/databases.rst:32
msgid "LDAP"
msgstr ""
#: ../../doc/tutorial/databases.rst:34
msgid ""
"Canaille can use OpenLDAP as its main database. It is used when the "
"``CANAILLE_LDAP`` configuration parameter is defined. For instance:"
msgstr ""
#: ../../doc/tutorial/databases.rst:52
msgid ""
"You can find more details on the LDAP configuration in the "
":class:`dedicated section "
"<canaille.backends.ldap.configuration.LDAPSettings>`."
msgstr ""
#: ../../doc/tutorial/databases.rst:55
msgid ""
"Currently, only the ``inetOrgPerson`` and ``groupOfNames`` schemas have "
"been tested. If you want to use different schemas or LDAP servers, "
"adaptations may be needed. Patches are welcome."
msgstr ""
#: ../../doc/tutorial/databases.rst:60
msgid "OpenLDAP overlays integration"
msgstr ""
#: ../../doc/tutorial/databases.rst:62
msgid "Canaille can integrate with several OpenLDAP overlays:"
msgstr ""
#: ../../doc/tutorial/databases.rst:65
msgid "memberof / refint"
msgstr ""
#: ../../doc/tutorial/databases.rst:67
#, python-format
msgid ""
"`memberof "
"<https://www.openldap.org/doc/admin26/overlays.html#Reverse%20Group%20Membership%20Maintenance>`_"
" and `refint "
"<https://www.openldap.org/doc/admin26/overlays.html#Referential%20Integrity>`_"
" overlays are needed for the Canaille group membership to work correctly."
msgstr ""
#: ../../doc/tutorial/databases.rst:71 ../../doc/tutorial/databases.rst:94
msgid "Here is a configuration example compatible with canaille:"
msgstr ""
#: ../../doc/tutorial/databases.rst:73
msgid "memberof-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:77
msgid "refint-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:81 ../../doc/tutorial/databases.rst:104
msgid "You can adapt and load those configuration files with:"
msgstr ""
#: ../../doc/tutorial/databases.rst:90
msgid "ppolicy"
msgstr ""
#: ../../doc/tutorial/databases.rst:92
msgid ""
"If the `ppolicy <https://www.ietf.org/archive/id/draft-behera-ldap-"
"password-policy-11.html>`_ overlay is configured and the ``pwdEndTime`` "
"attribute is available (since OpenLDAP 2.6), then account locking support"
" will be enabled in canaille. To allow users to manage account "
"expiration, they need to have a *write* permission on the "
":attr:`~canaille.core.models.User.lock_date` attribute."
msgstr ""
#: ../../doc/tutorial/databases.rst:96
msgid "ppolicy-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:100
msgid "ppolicy.ldif"
msgstr ""
#: ../../doc/tutorial/deployment.rst:2
msgid "Deployment"
msgstr ""
#: ../../doc/tutorial/deployment.rst:5
msgid "Application service"
msgstr ""
#: ../../doc/tutorial/deployment.rst:7
msgid ""
"After having finished Canaille installation you have to run it in a WSGI "
"application server. Here are some WSGI server configuration examples you "
"can pick. Do not forget to update the paths."
msgstr ""
#: ../../doc/tutorial/deployment.rst:11
msgid "gunicorn"
msgstr ""
#: ../../doc/tutorial/deployment.rst:13
msgid "Todo"
msgstr ""
#: ../../doc/tutorial/deployment.rst:15
msgid "Write a gunicorn configuration sample file."
msgstr ""
#: ../../doc/tutorial/deployment.rst:18
msgid "uwsgi"
msgstr ""
#: ../../doc/tutorial/deployment.rst:42
msgid "Webserver"
msgstr ""
#: ../../doc/tutorial/deployment.rst:44
msgid ""
"Now you have to plug your WSGI application server to your webserver so it"
" is accessible on the internet. Here are some webserver configuration "
"examples you can pick:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:48
msgid "Nginx"
msgstr ""
#: ../../doc/tutorial/deployment.rst:114
msgid "Apache"
msgstr ""
#: ../../doc/tutorial/deployment.rst:153
msgid "Recurrent jobs"
msgstr ""
#: ../../doc/tutorial/deployment.rst:155
msgid ""
"You might want to clean up your database to avoid it growing too much. "
"You can regularly delete expired tokens and authorization codes with:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:164
msgid "Webfinger"
msgstr ""
#: ../../doc/tutorial/deployment.rst:166
msgid ""
"You may want to configure a `WebFinger`_ endpoint on your main website to"
" allow the automatic discovery of your Canaille installation based on the"
" account name of one of your users. For instance, suppose your domain is "
"``mydomain.example`` and your Canaille domain is "
"``auth.mydomain.example`` and there is a user ``john.doe``. A third-party"
" application could require to authenticate the user and ask them for a "
"user account. The user would give their account "
"``john.doe@mydomain.example``, then the application would perform a "
"WebFinger request at ``https://mydomain.example/.well-known/webfinger`` "
"and the response would contain the address of the authentication server "
"``https://auth.mydomain.example``. With this information the third party "
"application can redirect the user to the Canaille authentication page."
msgstr ""
#: ../../doc/tutorial/deployment.rst:168
msgid ""
"The difficulty here is that the WebFinger endpoint must be hosted at the "
"top-level domain (i.e. ``mydomain.example``) while the authentication "
"server might be hosted on a sublevel (i.e. ``auth.mydomain.example``). "
"Canaille provides a WebFinger endpoint, but if it is not hosted at the "
"top-level domain, a web redirection is required on the ``/.well-"
"known/webfinger`` path."
msgstr ""
#: ../../doc/tutorial/deployment.rst:170
msgid "Here are configuration examples for Nginx or Apache:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:172
msgid "Nginx webfinger configuration for a top level domain"
msgstr ""
#: ../../doc/tutorial/deployment.rst:181
msgid "Apache webfinger configuration for a top level domain"
msgstr ""
#: ../../doc/tutorial/deployment.rst:191
msgid "Create the first user"
msgstr ""
#: ../../doc/tutorial/deployment.rst:193
msgid ""
"Once canaille is installed, soon enough you will need to add users. To "
"create your first user you can use the :ref:`canaille create "
"<cli_create>` CLI."
msgstr ""
#: ../../doc/tutorial/index.rst:2
msgid "Tutorial"
msgstr ""
#: ../../doc/tutorial/install.rst:2
msgid "Installation"
msgstr ""
#: ../../doc/tutorial/install.rst:6
msgid ""
"Canaille is under heavy development and may not fit a production "
"environment yet."
msgstr ""
#: ../../doc/tutorial/install.rst:8
msgid ""
"The installation of canaille consist in several steps, some of which you "
"can do manually or with command line tool:"
msgstr ""
#: ../../doc/tutorial/install.rst:11
msgid "Get the code"
msgstr ""
#: ../../doc/tutorial/install.rst:13
msgid ""
"As the moment there is no distribution package for canaille. However, it "
"can be installed with the ``pip`` package manager. Let us choose a place "
"for the canaille environment, like ``/opt/canaille/env``."
msgstr ""
#: ../../doc/tutorial/install.rst:24
msgid "Extras"
msgstr ""
#: ../../doc/tutorial/install.rst:26
msgid "Canaille provides different package options:"
msgstr ""
#: ../../doc/tutorial/install.rst:28
msgid "`front` provides all the things needed to produce the user interface;"
msgstr ""
#: ../../doc/tutorial/install.rst:29
msgid "`oidc` provides the dependencies to perform OAuth2/OIDC authentication;"
msgstr ""
#: ../../doc/tutorial/install.rst:30
msgid "`ldap` provides the dependencies to enable the LDAP backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:31
msgid "`sqlite` provides the dependencies to enable the SQLite backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:32
msgid "`postgresql` provides the dependencies to enable the PostgreSQL backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:33
msgid "`mysql` provides the dependencies to enable the MySQL backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:34
msgid "`sentry` provides sentry integration to watch Canaille exceptions;"
msgstr ""
#: ../../doc/tutorial/install.rst:35
msgid "`all` provides all the extras above."
msgstr ""
#: ../../doc/tutorial/install.rst:37
msgid "They can be installed with:"
msgstr ""
#: ../../doc/tutorial/install.rst:44
msgid "Configure"
msgstr ""
#: ../../doc/tutorial/install.rst:46
msgid ""
"Choose a path where to store your configuration file. You can pass any "
"configuration path with the ``CONFIG`` environment variable."
msgstr ""
#: ../../doc/tutorial/install.rst:54
msgid ""
"You should then edit your configuration file to adapt the values to your "
"needs. Look at the configuration details in the :doc:`configuration "
"<../references/configuration>` page."
msgstr ""
#: ../../doc/tutorial/install.rst:57
msgid "Install"
msgstr ""
#: ../../doc/tutorial/install.rst:59
msgid ""
"The :ref:`install command <cli_install>` will apply most of the things "
"needed to get Canaille working. Depending on the configured "
":doc:`database <databases>` it will create the SQL tables, or install the"
" LDAP schemas for instance."
msgstr ""
#: ../../doc/tutorial/install.rst:68
msgid "Check"
msgstr ""
#: ../../doc/tutorial/install.rst:70
msgid ""
"After a manual installation, you can check your configuration file using "
"the :ref:`check command <cli_install>`:"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:2
msgid "Troubleshooting"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:5
msgid "The web interface throws useless error messages"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:7
msgid ""
"Unless the current user has admin :class:`permissions "
"<canaille.core.configuration.Permission>`, or the installation is in "
":attr:`~canaille.app.configuration.RootSettings.DEBUG` mode, error "
"messages won't be too technical. For instance, you can see *The request "
"you made is invalid*. To enable detailed error messages, you can "
"**temporarily** enable the "
":attr:`~canaille.app.configuration.RootSettings.DEBUG` configuration "
"parameter."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:12
msgid "How to manually install LDAP schemas?"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:16
msgid ""
"Schema installation can be automatically done using the :ref:`install "
"command <cli_install>`."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:18
msgid "As of OpenLDAP 2.4, two configuration methods are available:"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:20
msgid ""
"The `deprecated <https://www.openldap.org/doc/admin26/slapdconf2.html>`_ "
"one, based on a configuration file (generally ``/etc/ldap/slapd.conf``);"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:21
msgid ""
"The new one, based on a configuration directory (generally "
"``/etc/ldap/slapd.d``)."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:23
msgid ""
"Depending on the configuration method you use with your OpenLDAP "
"installation, you need to chose how to add the canaille schemas:"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:26
msgid "Old fashion: Copy the schemas in your filesystem"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:35
msgid "New fashion: Use slapadd to add the schemas"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:37
msgid "Be careful to stop your ldap server before running ``slapadd``"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:46
msgid "How to manually generate the OIDC keypair?"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:50
msgid ""
"The keypair generation can be automatically done using the :ref:`install "
"command <cli_install>`."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:52
msgid ""
"Canaille needs a key pair to sign OIDC tokens. You can customize those "
"commands, as long as they match the ``JWT`` section of your configuration"
" file."
msgstr ""

161
doc/locales/fr_FR/LC_MESSAGES/tutorial/databases.po Normal file
View file

@ -0,0 +1,161 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/databases.rst:2 13be28a98aa44e67ad2da068019679b0
msgid "Databases"
msgstr ""
#: ../../doc/tutorial/databases.rst:4 34d3c5ad89ca430a847e45d05e2f5019
msgid ""
"Canaille can read and save data in different databases. This page "
"presents the different database backends and their specificities:"
msgstr ""
#: ../../doc/tutorial/databases.rst:8 2e496b7a0aee4d17b567eb4dc478ea17
msgid "Memory"
msgstr ""
#: ../../doc/tutorial/databases.rst:10 ceb74ab4c8774778844a94ed861484f0
msgid ""
"Canaille comes with a lightweight inmemory backend by default. It is used"
" when no other backend has been configured."
msgstr ""
#: ../../doc/tutorial/databases.rst:13 81d31cff81344214af9be762d9e2d86b
msgid ""
"This backend is only for test purpose and should not be used in "
"production environments."
msgstr ""
#: ../../doc/tutorial/databases.rst:16 230473fa22cf4e1ea512779b93a88d50
msgid "SQL"
msgstr ""
#: ../../doc/tutorial/databases.rst:18 cbb94e64da22446d94826e4b2d8aa841
msgid ""
"Canaille can use any database supported by `SQLAlchemy "
"<https://www.sqlalchemy.org/>`_, such as sqlite, postgresql or mariadb."
msgstr ""
#: ../../doc/tutorial/databases.rst:21 f1512d513bd543719e9fc2b41a002ec4
msgid ""
"It is used when the ``CANAILLE_SQL`` configuration parameter is defined. "
"For instance:"
msgstr ""
#: ../../doc/tutorial/databases.rst:23 ../../doc/tutorial/databases.rst:37
#: 1652808637864b219ffc895ff0b385e2 26343cfad8b1468e857c9af6a929296f
msgid "config.toml"
msgstr ""
#: ../../doc/tutorial/databases.rst:29 20d5bb9612194746981991360681be81
msgid ""
"You can find more details on the SQL configuration in the "
":class:`dedicated section "
"<canaille.backends.sql.configuration.SQLSettings>`."
msgstr ""
#: ../../doc/tutorial/databases.rst:32 7666e750708b4faa8ed74fbe9dd71455
msgid "LDAP"
msgstr ""
#: ../../doc/tutorial/databases.rst:34 d76fc51f518344c1ad042668dc0f6f7f
msgid ""
"Canaille can use OpenLDAP as its main database. It is used when the "
"``CANAILLE_LDAP`` configuration parameter is defined. For instance:"
msgstr ""
#: ../../doc/tutorial/databases.rst:52 343f1bb31591486da7186300d79ff254
msgid ""
"You can find more details on the LDAP configuration in the "
":class:`dedicated section "
"<canaille.backends.ldap.configuration.LDAPSettings>`."
msgstr ""
#: ../../doc/tutorial/databases.rst:55 61cd64aa6b24444eb95c7b328a9bb80a
msgid ""
"Currently, only the ``inetOrgPerson`` and ``groupOfNames`` schemas have "
"been tested. If you want to use different schemas or LDAP servers, "
"adaptations may be needed. Patches are welcome."
msgstr ""
#: ../../doc/tutorial/databases.rst:60 2945818fe9854775be50bbbe9bd4920c
msgid "OpenLDAP overlays integration"
msgstr ""
#: ../../doc/tutorial/databases.rst:62 a37ceed58a974812bf0449864b97bc36
msgid "Canaille can integrate with several OpenLDAP overlays:"
msgstr ""
#: ../../doc/tutorial/databases.rst:65 d6b79a05710643b5ac394738613ef6d7
msgid "memberof / refint"
msgstr ""
#: ../../doc/tutorial/databases.rst:67 5afe1236e936402584f1478f77e90a8c
#, python-format
msgid ""
"`memberof "
"<https://www.openldap.org/doc/admin26/overlays.html#Reverse%20Group%20Membership%20Maintenance>`_"
" and `refint "
"<https://www.openldap.org/doc/admin26/overlays.html#Referential%20Integrity>`_"
" overlays are needed for the Canaille group membership to work correctly."
msgstr ""
#: ../../doc/tutorial/databases.rst:71 ../../doc/tutorial/databases.rst:94
#: 43fe5b2a235e4e779a591dfb57e5bd9f 7cadb14c4e324d4d82eaa6503a4f7d5c
msgid "Here is a configuration example compatible with canaille:"
msgstr ""
#: ../../doc/tutorial/databases.rst:73 f4492ab7254f48958441eb03ee6cafa0
msgid "memberof-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:77 5a5c78def64b4d699a257b2e407b9c9d
msgid "refint-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:81 ../../doc/tutorial/databases.rst:104
#: 211625cc561840cfa82975d79ca478ef c4486a215813426b82fcc0d4fecd212b
msgid "You can adapt and load those configuration files with:"
msgstr ""
#: ../../doc/tutorial/databases.rst:90 b123a4b628d84343858da2932e77fbfc
msgid "ppolicy"
msgstr ""
#: ../../doc/tutorial/databases.rst:92 6e77957f1af14258a453f712e7e4b5ce
msgid ""
"If the `ppolicy <https://www.ietf.org/archive/id/draft-behera-ldap-"
"password-policy-11.html>`_ overlay is configured and the ``pwdEndTime`` "
"attribute is available (since OpenLDAP 2.6), then account locking support"
" will be enabled in canaille. To allow users to manage account "
"expiration, they need to have a *write* permission on the "
":attr:`~canaille.core.models.User.lock_date` attribute."
msgstr ""
#: ../../doc/tutorial/databases.rst:96 25a6006c6ec0431d9a6e5e979aedf2c6
msgid "ppolicy-config.ldif"
msgstr ""
#: ../../doc/tutorial/databases.rst:100 84603122ff0c46c7b8f149e8af826433
msgid "ppolicy.ldif"
msgstr ""

134
doc/locales/fr_FR/LC_MESSAGES/tutorial/deployment.po Normal file
View file

@ -0,0 +1,134 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/deployment.rst:2 ae73f16a212144ffa313290a207b141f
msgid "Deployment"
msgstr ""
#: ../../doc/tutorial/deployment.rst:5 35937b9f04b4457f937ec96e1ba29caf
msgid "Application service"
msgstr ""
#: ../../doc/tutorial/deployment.rst:7 9e7fd12c32644a11b26be30abdb8fbb9
msgid ""
"After having finished Canaille installation you have to run it in a WSGI "
"application server. Here are some WSGI server configuration examples you "
"can pick. Do not forget to update the paths."
msgstr ""
#: ../../doc/tutorial/deployment.rst:11 113eacd3942647f4a67709d106074aae
msgid "gunicorn"
msgstr ""
#: ../../doc/tutorial/deployment.rst:13 49056a8d4181451b9d442e040ef58134
msgid "Todo"
msgstr ""
#: ../../doc/tutorial/deployment.rst:15 ab8cb26415874d7dac41d27e0fd09196
msgid "Write a gunicorn configuration sample file."
msgstr ""
#: ../../doc/tutorial/deployment.rst:18 275e76607f394394925fd8e72baa1bdd
msgid "uwsgi"
msgstr ""
#: ../../doc/tutorial/deployment.rst:42 7dd0c119f3ca4d34af4b365848855c7e
msgid "Webserver"
msgstr ""
#: ../../doc/tutorial/deployment.rst:44 2642973dba1e4c229c8cafd6b53d1e2e
msgid ""
"Now you have to plug your WSGI application server to your webserver so it"
" is accessible on the internet. Here are some webserver configuration "
"examples you can pick:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:48 6e1d1fb0d1de408da0f959d2dda936fd
msgid "Nginx"
msgstr ""
#: ../../doc/tutorial/deployment.rst:114 271a543d8077413c8450cb62d811cd49
msgid "Apache"
msgstr ""
#: ../../doc/tutorial/deployment.rst:153 468c9bd93bf94365a1e7203d93fa1654
msgid "Recurrent jobs"
msgstr ""
#: ../../doc/tutorial/deployment.rst:155 d3f3c6197cdd4664a013462aaea3d735
msgid ""
"You might want to clean up your database to avoid it growing too much. "
"You can regularly delete expired tokens and authorization codes with:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:164 503958ca36f24b0f96d906166e54b4eb
msgid "Webfinger"
msgstr ""
#: ../../doc/tutorial/deployment.rst:166 4c4d784e493a44e082095fa18c278023
msgid ""
"You may want to configure a `WebFinger`_ endpoint on your main website to"
" allow the automatic discovery of your Canaille installation based on the"
" account name of one of your users. For instance, suppose your domain is "
"``mydomain.example`` and your Canaille domain is "
"``auth.mydomain.example`` and there is a user ``john.doe``. A third-party"
" application could require to authenticate the user and ask them for a "
"user account. The user would give their account "
"``john.doe@mydomain.example``, then the application would perform a "
"WebFinger request at ``https://mydomain.example/.well-known/webfinger`` "
"and the response would contain the address of the authentication server "
"``https://auth.mydomain.example``. With this information the third party "
"application can redirect the user to the Canaille authentication page."
msgstr ""
#: ../../doc/tutorial/deployment.rst:168 8b5733a39b024333812a79f6415a2d7f
msgid ""
"The difficulty here is that the WebFinger endpoint must be hosted at the "
"top-level domain (i.e. ``mydomain.example``) while the authentication "
"server might be hosted on a sublevel (i.e. ``auth.mydomain.example``). "
"Canaille provides a WebFinger endpoint, but if it is not hosted at the "
"top-level domain, a web redirection is required on the ``/.well-"
"known/webfinger`` path."
msgstr ""
#: ../../doc/tutorial/deployment.rst:170 004318975e4d42f9b9df8a4bd60b702e
msgid "Here are configuration examples for Nginx or Apache:"
msgstr ""
#: ../../doc/tutorial/deployment.rst:172 7654879ea9db4641898c7d3d54743625
msgid "Nginx webfinger configuration for a top level domain"
msgstr ""
#: ../../doc/tutorial/deployment.rst:181 c853d3e4d63943a587bd51261c17fea9
msgid "Apache webfinger configuration for a top level domain"
msgstr ""
#: ../../doc/tutorial/deployment.rst:191 e4ab313e4d6744fda9814e13e6921bed
msgid "Create the first user"
msgstr ""
#: ../../doc/tutorial/deployment.rst:193 4586783257664fe8b2d4ca1a1b56585f
msgid ""
"Once canaille is installed, soon enough you will need to add users. To "
"create your first user you can use the :ref:`canaille create "
"<cli_create>` CLI."
msgstr ""

25
doc/locales/fr_FR/LC_MESSAGES/tutorial/index.po Normal file
View file

@ -0,0 +1,25 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/index.rst:2 33f796e322b4451abd546832196ba97a
msgid "Tutorial"
msgstr ""

131
doc/locales/fr_FR/LC_MESSAGES/tutorial/install.po Normal file
View file

@ -0,0 +1,131 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/install.rst:2 b59e204f09ac48f492b7ef7bcff6ed98
msgid "Installation"
msgstr ""
#: ../../doc/tutorial/install.rst:6 f99a48aee6984df9af6e2ad5347ffa8b
msgid ""
"Canaille is under heavy development and may not fit a production "
"environment yet."
msgstr ""
#: ../../doc/tutorial/install.rst:8 3fcf21bae744418ea435e09abb6b6f66
msgid ""
"The installation of canaille consist in several steps, some of which you "
"can do manually or with command line tool:"
msgstr ""
#: ../../doc/tutorial/install.rst:11 3bd6c3c41fcd4b0bb8c3f0059f55411c
msgid "Get the code"
msgstr ""
#: ../../doc/tutorial/install.rst:13 0d6d6b5d40714920a8ca25b145d1e568
msgid ""
"As the moment there is no distribution package for canaille. However, it "
"can be installed with the ``pip`` package manager. Let us choose a place "
"for the canaille environment, like ``/opt/canaille/env``."
msgstr ""
#: ../../doc/tutorial/install.rst:24 681b57e7aae841408d6fa27aace13c4f
msgid "Extras"
msgstr ""
#: ../../doc/tutorial/install.rst:26 6da6e156d7794a87845411e6d5fd0715
msgid "Canaille provides different package options:"
msgstr ""
#: ../../doc/tutorial/install.rst:28 698250951765438faba672f8a3ac0ac3
msgid "`front` provides all the things needed to produce the user interface;"
msgstr ""
#: ../../doc/tutorial/install.rst:29 f4c143c1e2a04213bffeca345be71dd7
msgid "`oidc` provides the dependencies to perform OAuth2/OIDC authentication;"
msgstr ""
#: ../../doc/tutorial/install.rst:30 65190b5b12d44ba78da8de94f10f75eb
msgid "`ldap` provides the dependencies to enable the LDAP backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:31 717175ded51a448aa8dee2d5858e2dc1
msgid "`sqlite` provides the dependencies to enable the SQLite backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:32 03fe8dbedce84ffeb777a09b324c4a37
msgid "`postgresql` provides the dependencies to enable the PostgreSQL backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:33 cdf98e8f28654e60a1f148ffcc82b212
msgid "`mysql` provides the dependencies to enable the MySQL backend;"
msgstr ""
#: ../../doc/tutorial/install.rst:34 41ae127f217d4408a769a03f744277ff
msgid "`sentry` provides sentry integration to watch Canaille exceptions;"
msgstr ""
#: ../../doc/tutorial/install.rst:35 e6018990bd354799b4d78bd2ff1e5511
msgid "`all` provides all the extras above."
msgstr ""
#: ../../doc/tutorial/install.rst:37 bf0755d51529446887714d41b0bc99cd
msgid "They can be installed with:"
msgstr ""
#: ../../doc/tutorial/install.rst:44 a1915e091b694983b8c9e0718492f3b0
msgid "Configure"
msgstr ""
#: ../../doc/tutorial/install.rst:46 bd3950b464614404a89bec231f6944d5
msgid ""
"Choose a path where to store your configuration file. You can pass any "
"configuration path with the ``CONFIG`` environment variable."
msgstr ""
#: ../../doc/tutorial/install.rst:54 3fc38f1d84e340a48a5009fe5204df38
msgid ""
"You should then edit your configuration file to adapt the values to your "
"needs. Look at the configuration details in the :doc:`configuration "
"<../references/configuration>` page."
msgstr ""
#: ../../doc/tutorial/install.rst:57 a1b9b7f8f97749a195ec325b70a5e3b4
msgid "Install"
msgstr ""
#: ../../doc/tutorial/install.rst:59 a4718a66711141cf8951f1db8cc14a0a
msgid ""
"The :ref:`install command <cli_install>` will apply most of the things "
"needed to get Canaille working. Depending on the configured "
":doc:`database <databases>` it will create the SQL tables, or install the"
" LDAP schemas for instance."
msgstr ""
#: ../../doc/tutorial/install.rst:68 b4ac66f046dd462882bff4bede7c3857
msgid "Check"
msgstr ""
#: ../../doc/tutorial/install.rst:70 d64b4d582c434a3d95382a11911ff4d7
msgid ""
"After a manual installation, you can check your configuration file using "
"the :ref:`check command <cli_install>`:"
msgstr ""

102
doc/locales/fr_FR/LC_MESSAGES/tutorial/troubleshooting.po Normal file
View file

@ -0,0 +1,102 @@
# SOME DESCRIPTIVE TITLE.
# Copyright (C) 2024, Yaal Coop
# This file is distributed under the same license as the canaille package.
# FIRST AUTHOR <EMAIL@ADDRESS>, 2024.
#
#, fuzzy
msgid ""
msgstr ""
"Project-Id-Version: canaille 0.0.56\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2024-11-22 15:37+0100\n"
"PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language: fr_FR\n"
"Language-Team: fr_FR <LL@li.org>\n"
"Plural-Forms: nplurals=2; plural=(n > 1);\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=utf-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Generated-By: Babel 2.16.0\n"
#: ../../doc/tutorial/troubleshooting.rst:2 ce37b77d21724400acbd80e265a4ac54
msgid "Troubleshooting"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:5 0c6a32db27d64339a9abdadb2cbb407e
msgid "The web interface throws useless error messages"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:7 b2fa75eb63c74b3f8da9c6a0c900e358
msgid ""
"Unless the current user has admin :class:`permissions "
"<canaille.core.configuration.Permission>`, or the installation is in "
":attr:`~canaille.app.configuration.RootSettings.DEBUG` mode, error "
"messages won't be too technical. For instance, you can see *The request "
"you made is invalid*. To enable detailed error messages, you can "
"**temporarily** enable the "
":attr:`~canaille.app.configuration.RootSettings.DEBUG` configuration "
"parameter."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:12 5bb67c25df7941c8a4e6986a24df3e17
msgid "How to manually install LDAP schemas?"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:16 d37ddcef8efa4a45bf43d91bae3df68a
msgid ""
"Schema installation can be automatically done using the :ref:`install "
"command <cli_install>`."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:18 876a00863ba444f79f41613dcc59d7fe
msgid "As of OpenLDAP 2.4, two configuration methods are available:"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:20 a127193eeb824165901ce7fa3db06052
msgid ""
"The `deprecated <https://www.openldap.org/doc/admin26/slapdconf2.html>`_ "
"one, based on a configuration file (generally ``/etc/ldap/slapd.conf``);"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:21 fbad067339a546e993f5e244136f4742
msgid ""
"The new one, based on a configuration directory (generally "
"``/etc/ldap/slapd.d``)."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:23 3a21e5904bab4c8d91739b12ee4c82a4
msgid ""
"Depending on the configuration method you use with your OpenLDAP "
"installation, you need to chose how to add the canaille schemas:"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:26 4b537fceb6554f588635a7bc5e09a63e
msgid "Old fashion: Copy the schemas in your filesystem"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:35 15ed45a91e074ec1b677c5682212c20d
msgid "New fashion: Use slapadd to add the schemas"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:37 295f1424bd904942bb28064cd696b85a
msgid "Be careful to stop your ldap server before running ``slapadd``"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:46 dd05d2ab930743b19e40359b27c22652
msgid "How to manually generate the OIDC keypair?"
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:50 a5c7b03ca6c44029bf326dc44be3c7e5
msgid ""
"The keypair generation can be automatically done using the :ref:`install "
"command <cli_install>`."
msgstr ""
#: ../../doc/tutorial/troubleshooting.rst:52 0dd3ae7d46dc416dbec633b5e6e7b8ed
msgid ""
"Canaille needs a key pair to sign OIDC tokens. You can customize those "
"commands, as long as they match the ``JWT`` section of your configuration"
" file."
msgstr ""

29
doc/locales/readme.rst Normal file
View file

@ -0,0 +1,29 @@
Documentation translation
Translations are done with `Weblate <https://hosted.weblate.org/projects/canaille/canaille>`_.
The following commands are there as documentation, only the message extraction and the language addition is needed for contributors.
Message extraction
~~~~~~~~~~~~~~~~~~
After you have edited translatable strings, you should extract the messages with:
.. code-block:: bash
sphinx-build --builder gettext doc doc/gettext
Language addition
~~~~~~~~~~~~~~~~~
You can add a new language manually with the following command, however this should not be needed as Weblate takes car of this:
.. code-block:: bash
sphinx-intl update --pot-dir build/gettext --locale-dir doc/locales -l fr_FR
Build the documentation in another language
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.. code-block:: bash
sphinx-build --builder html --define language=fr_FR doc build/html/fr_FR

3
pyproject.toml
View file

@ -117,7 +117,6 @@ dev = [
# https://peps.python.org/pep-0632/
"setuptools >= 50.0.0; python_version>='3.12'"
]
doc = [
"autodoc-pydantic >= 2.0.1",
"shibuya >= 2024.3.1",
@ -125,8 +124,8 @@ doc = [
"sphinx-design >= 0.6.0",
"sphinx-issues >= 5.0.0",
"sphinx-click >= 6.0.0",
"sphinx-intl>=2.3.0",
]
demo = [
"faker",
"honcho",

17
uv.lock
View file

@ -203,6 +203,7 @@ doc = [
{ name = "sphinx" },
{ name = "sphinx-click" },
{ name = "sphinx-design" },
{ name = "sphinx-intl" },
{ name = "sphinx-issues" },
]
@ -271,6 +272,7 @@ doc = [
{ name = "sphinx", specifier = ">=7.0.0" },
{ name = "sphinx-click", specifier = ">=6.0.0" },
{ name = "sphinx-design", specifier = ">=0.6.0" },
{ name = "sphinx-intl", specifier = ">=2.3.0" },
{ name = "sphinx-issues", specifier = ">=5.0.0" },
]
@ -1596,6 +1598,21 @@ wheels = [
{ url = "https://files.pythonhosted.org/packages/c6/43/65c0acbd8cc6f50195a3a1fc195c404988b15c67090e73c7a41a9f57d6bd/sphinx_design-0.6.1-py3-none-any.whl", hash = "sha256:b11f37db1a802a183d61b159d9a202314d4d2fe29c163437001324fe2f19549c", size = 2215338 },
]
[[package]]
name = "sphinx-intl"
version = "2.3.0"
source = { registry = "https://pypi.org/simple" }
dependencies = [
{ name = "babel" },
{ name = "click" },
{ name = "setuptools" },
{ name = "sphinx" },
]
sdist = { url = "https://files.pythonhosted.org/packages/74/67/c7e73f8cf020db01d052d0507ba60fbd10eae018e47be8294a2cda5b940e/sphinx_intl-2.3.0.tar.gz", hash = "sha256:4ddc63be820c94e23393538cc3d4c31631acab7001b0052e4530ff5bf623af97", size = 24176 }
wheels = [
{ url = "https://files.pythonhosted.org/packages/3e/b6/7ea313a6796d8a43f2a48fcb158230115789705b32e4d2358fcb74d8467c/sphinx_intl-2.3.0-py3-none-any.whl", hash = "sha256:d753168145035a1378715523e0203fbcfe350b574bfab4d7ae432b36d338b4cf", size = 13802 },
]
[[package]]
name = "sphinx-issues"
version = "5.0.0"