# SOME DESCRIPTIVE TITLE. # Copyright (C) 2024, Yaal Coop # This file is distributed under the same license as the canaille package. # FIRST AUTHOR , 2024. # #, fuzzy msgid "" msgstr "" "Project-Id-Version: canaille 0.0.56\n" "Report-Msgid-Bugs-To: \n" "POT-Creation-Date: 2024-11-22 17:26+0100\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME \n" "Language-Team: fr \n" "Language: fr\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=(n > 1);\n" "Generated-By: Babel 2.16.0\n" #: ../features.rst:9 3a39687e5bb049d585c3109447fa1161 msgid "Features" msgstr "" #: ../features.rst:11 ec85227d7e8a415b9d94c7e8a290495d msgid "" "Here are the different features that Canaille provides. You can enable any " "of those features with the :doc:`configuration ` " "to fit any :doc:`use cases ` you may meet. Check our :ref:" "`roadmap ` to see what is coming next." msgstr "" #: ../features.rst:15 1d01709835b447ffb8daf9945e64d9c4 msgid "" "Users can interact with Canaille through its :ref:`web interface ` and administrators can also use its :ref:`command line " "interface `. Canaille can handle data " "stored in different :ref:`database backends `." msgstr "" #: ../features.rst:19 446f2f01004a4f3c828b318afd18bcfe msgid "Web interface" msgstr "" #: ../features.rst:21 297d50ea1e8f4b90928ff18dc836cfde msgid "" "Canaille web interface can be used either in :doc:`production environments " "` or locally for development purposes." msgstr "" #: ../features.rst:26 2a5db38617a44ed596d35c10bc540bd8 msgid "Profile management" msgstr "" #: ../features.rst:28 ../features.rst:217 9d832867dc5e4b0285f6b185b0ee547b #: 581a25e539814b12a1c252f0242be431 msgid "Profile" msgstr "" #: ../features.rst:33 877ea17f9ff844119de7ba5e5e5cd0a5 msgid "Canaille provides an interface to manage user profiles." msgstr "" #: ../features.rst:35 45d88de9e4524c44a5e80daf0b1357b1 msgid "" "The exact list of displayed fields, and whether they are :attr:`writable " "` or :attr:`read-only " "` depends on the user :class:" "`Access Control List settings (ACL) `." msgstr "" #: ../features.rst:37 74f24b0d610a49bf84dd6c96ff53146e msgid "" "Depending on their ACL :class:`permissions `, users can either be allowed to edit their own profile, edit " "any user profile, or do nothing at all." msgstr "" #: ../features.rst:42 087ae1a46d26413ea42ce44662933f0b msgid "Email confirmation" msgstr "" #: ../features.rst:44 82810b7b19d94141b8547b43bd9d8ce8 msgid "" "If the :attr:`email confirmation feature ` is enabled, any modification or addition " "of a profile email will send a confirmation mail to the new address. The " "mail will contain a link that users will need to click on to confirm their " "email address." msgstr "" #: ../features.rst:46 80defdc6c0aa4920a5fa8577acaf6fa6 msgid "" "Users with :attr:`user management permission ` can set user emails without confirmation though." msgstr "" #: ../features.rst:51 351ea71b5b1a4827a53592645bb8a80c msgid "Group management" msgstr "" #: ../features.rst:53 ../features.rst:140 e4a31dade59b407a9d8df7a0314d1cf2 #: 54541ece476c4d408288f0337784a03c msgid "Group edition" msgstr "" #: ../features.rst:58 a2cfe7269999424bb8748a13a95a10da msgid "" "In a similar fashion than :ref:`profile management " "` Canaille provides an interface to manage user " "groups." msgstr "" #: ../features.rst:60 fbb7991d7a63424c9ae6e0fc89f8242c msgid "" "The group management is quite simple at the moment and consists in a group " "name and description, and the list of its members. Group membership can be " "use as :attr:`ACL Filter ` " "to define user permissions." msgstr "" #: ../features.rst:63 ../features.rst:83 ../features.rst:149 #: 7b47c38d02644c89a065a8cfb094e012 766b52d4eab245d2b3f3aa8aa7e0c282 #: e0236e78322244a3841b0724694a48d3 msgid "Todo" msgstr "" #: ../features.rst:64 39c58580da09403bbb22cfe1d5598ce3 msgid "" "At the moment adding an user to a group can only be achieved by the user " "settings page, but we are :issue:`working to improve this <192>`." msgstr "" #: ../features.rst:66 c60fc3e5961e42758063d4367d906411 msgid "" "Group management can be enable with a :attr:`dedicated user permission " "`." msgstr "" #: ../features.rst:69 a78a3715d55844b0900f9916b6f2e7b2 msgid "" "Due to limitations in the :ref:`LDAP backend `, " "groups must have at least one member. Thus it is not possible to remove the " "last user of a group without removing the group." msgstr "" #: ../features.rst:75 8f7758bdc0ac4769a31161c485c1ec8e msgid "User authentication" msgstr "" #: ../features.rst:77 4b2d976568b14c4688f875adf9ccc562 msgid "" "Unless their account is :ref:`locked `, users can " "authenticate with a login and a password." msgstr "" #: ../features.rst:81 e682b2ba5dd74bdd9ffaa86d2abc9f3f msgid "" "For security reasons, it won't be told to users if they try to sign in with " "an unexisting logging, unless explicitly :attr:`set in the configuration " "`." msgstr "" #: ../features.rst:83 dfc328ffe1af4b918e2192b2ed14c637 msgid "" ":ref:`LDAP backend ` users can define which :class:" "`user field ` should be used as the login (such " "as :attr:`~canaille.core.models.User.user_name` or :attr:`~canaille.core." "models.User.emails`) using a :attr:`configuration parameter `, but other backends " "can only login using :attr:`~canaille.core.models.User.user_name`. We are :" "issue:`working to improve this <196>`." msgstr "" #: ../features.rst:88 3fefd07ff8c24b16a00c2120e46e291a msgid "User registration" msgstr "" #: ../features.rst:90 b18b55ebc00a442db9a09ea5a58f1a9a msgid "" "Users can create accounts on Canaille if the feature :attr:`registration " "feature ` is " "enabled. They will be able to fill a registration form with the fields " "detailed in the default :class:`ACL settings `." msgstr "" #: ../features.rst:92 517379413a544000b36f09ab035a2f4b msgid "" "If :attr:`email confirmation ` is also enabled, users will be sent a confirmation link " "to their email address, on which they will need to click in order to " "finalize their registration." msgstr "" #: ../features.rst:97 ../features.rst:99 ba38afb338ce43c39b44dd7678121504 #: 037e813626fc424fa2cc303b6de32626 msgid "User invitation" msgstr "" #: ../features.rst:104 67a415dce2ce449ca0f56e5feb2361d0 msgid "" "If a :class:`mail server ` is " "configured, users with :attr:`user management permission ` can create an invitation link for " "one user." msgstr "" #: ../features.rst:106 d591d5398e774b3197cef2e740c83efd msgid "" "The link goes to a registration form, even if regular :ref:`user " "registration ` is disabled." msgstr "" #: ../features.rst:108 aefa9516cd6d42dd8a736bc06a34fa39 msgid "It can be automatically sent by email to the new user." msgstr "" #: ../features.rst:113 7c82637f2cc94bbb9d331b0f22869ed0 msgid "Account locking" msgstr "" #: ../features.rst:115 358a5fa4e02744ed91fa6a8826130611 msgid "" "If Canaille is plugged to a :ref:`backend ` that supports " "it, user accounts can be locked by users with :attr:`user management " "permission `. The lock " "date can be set instantly or at a given date in the future." msgstr "" #: ../features.rst:118 712ea6e2257f4ba482b7e89f2ff5c19a msgid "At the moment a user account is locked:" msgstr "" #: ../features.rst:120 d681a46a4db2457cba4192322da21184 msgid "their open sessions will be closed;" msgstr "" #: ../features.rst:121 fdc693b1bf024fb2a7bbf3097f24d022 msgid "they won't be able to sign in again;" msgstr "" #: ../features.rst:122 23cd8877517d4f3c908e8ea1092dc9a6 msgid "no new OIDC token will be issued;" msgstr "" #: ../features.rst:124 9882d29f0007492aae9caf2506288533 msgid "" "User accounts must be manually unlocked by an administrator for the users to " "regain access to those actions." msgstr "" #: ../features.rst:129 e712f4f9b0a2427b8dccd43a4b4544d8 msgid "Account deletion" msgstr "" #: ../features.rst:131 81f0498b175a421da02ae969416b916f msgid "" "Users with the :attr:`account deletion permission ` are allowed to delete their own " "account." msgstr "" #: ../features.rst:133 2d5535359306451d834db61758cbe926 msgid "" "Users that also have the :attr:`user management permission ` are also allowed to delete other " "users accounts." msgstr "" #: ../features.rst:138 f6e498c86dbd4e17b624c321fecf54d1 msgid "Password recovery" msgstr "" #: ../features.rst:145 61f35c72876242e8bf43e9eb0d75995b msgid "" "If a :class:`mail server ` is " "configured and the :attr:`password recovery feature ` is enabled, then users " "can ask for a password reset email if they cannot remember their password." msgstr "" #: ../features.rst:147 d4555d16bbe249b7979cbb34c57f7055 msgid "" "The email will be sent to the email addresses filled in their profile, and " "will contain a link that will allow them to choose a new password. ." msgstr "" #: ../features.rst:151 297ffc93f03d4d43b6c47646eca19f13 msgid "Check that password recovery is disabled on locked accounts." msgstr "" #: ../features.rst:156 2ddc03cfab5c4c31881424d5944c493c msgid "Password reset" msgstr "" #: ../features.rst:158 9049c1cbc2f84041b403c388f29ad854 msgid "" "If a :class:`mail server ` is " "configured, :attr:`user management permission ` can send password reset mails to users. The mails " "contains a link that allow users to choose a new password without having to " "retrieve the old one." msgstr "" #: ../features.rst:164 53795873eea346f2b2daab2be04d8fd3 msgid "Password initialization" msgstr "" #: ../features.rst:166 22da6b0b0f9a477098237bf75b5ffc4b msgid "" "User :attr:`passwords ` are optional. If " "a :class:`mail server ` is " "configured, when users with no password attempt to sign in, they are invited " "to click a button that will send them a password initialization mail. The " "mail contains a link that leads to a form that allows users to choose a " "password." msgstr "" #: ../features.rst:173 2426c9af237c4b3ea3edf39378ee2058 msgid "Password compromission check" msgstr "" #: ../features.rst:175 a154a903f2f0465da6ba9cb8444bbdac msgid "" "If :attr:`password compromission check feature ` is enabled, Canaille will " "check for password compromise on HIBP (https://haveibeenpwned.com/) every " "time a new password is register. You will need to set an :attr:`admin email " "`." msgstr "" #: ../features.rst:180 91a7eae46075432fab0f6529e0ead921 msgid "Internationalization" msgstr "" #: ../features.rst:182 3793ed670fe140729604efbd86ea8865 msgid "Translation state" msgstr "" #: ../features.rst:187 a482d12153c5462eab6e6ef518bb541e msgid "" "Canaile will display in your :attr:`preferred language ` if available, or your browser language if " "available (and if it is not you can :ref:`help us with the translation " "`). If you prefer, you can also :" "attr:`force a language ` " "for every users." msgstr "" #: ../features.rst:193 64f68b0347c643d28ca265fa7577c95c msgid "Lightweight" msgstr "" #: ../features.rst:195 c3559f4e91a74373b92d046a875eac79 msgid "" "The web interface is lightweight, so everything should load quickly. There " "is a few Javascript here and there to smooth the experience, but no " "Javascript at all is needed to use Canaille." msgstr "" #: ../features.rst:199 21b1a787a1074ddc8ae6fe66545a181a msgid "Customizable" msgstr "" #: ../features.rst:201 d7748aa3f91b475ebed5edb2d35f759b msgid "" "The default theme should be good enough for most usages. It has a dark " "theme, display well on mobile, and let you choose a :attr:`logo ` and a :attr:`favicon `." msgstr "" #: ../features.rst:204 5fe5c111cd0f4d3ca2a8e7ca01ef43c6 msgid "" "If you need more you can also use a :attr:`custom theme `." msgstr "" #: ../features.rst:209 6fb933f34307459880de26e3d0f76c6a msgid "OpenID Connect" msgstr "" #: ../features.rst:211 bd2005e331d64c979880b847a8fa5a6f msgid "" "Canaille implements a :ref:`subset` of the OAuth2/OpenID Connect specifications . This " "allows to provide :abbr:`SSO (Single Sign-On)` and :abbr:`SLO (Single Log-" "On)` to applications plugged to Canaille." msgstr "" #: ../features.rst:215 3235a6f44bd444d38fd7581ffdeadd6a msgid "Consent management" msgstr "" #: ../features.rst:223 168e125d08c041a79098cb1bfa3d13e9 msgid "" "Users can give their consent to application requesting access to their " "personal information, and then revoke those consent at their will." msgstr "" #: ../features.rst:227 aa606f0a64b84ebdb4e29bee96f4b414 msgid "Application management" msgstr "" #: ../features.rst:229 eaa719c553584eb6954da4d45778454b msgid "" "Users with the right :attr:`permission ` can manager OIDC clients through the web interface." msgstr "" #: ../features.rst:231 9256e6eaf7174fa8a4e7347cd03b6ac8 msgid "" "In some cases, it might be useful to avoid the consent page for some trusted " "applications, so clients can be pre-consented." msgstr "" #: ../features.rst:234 3faf6b2661f3434bbca8b2aaa9b7d6d7 msgid "Discovery" msgstr "" #: ../features.rst:236 e935be55bc964a48a582e36f9791c15a msgid "" "Canaille implements the :doc:`Discovery specifications ` so most of the applications plugged to Canaille can auto-" "configure themselves." msgstr "" #: ../features.rst:239 695ba3a2a77640908c9f4d2f02a4f8b2 msgid "Dynamic Client Registration" msgstr "" #: ../features.rst:241 43c52faa27c84af18f3ada9bffe6d19d msgid "" "Canaille implements the :doc:`Dynamic Client Registration specifications " "`, so when the :attr:`feature is enabled " "`, clients can register themselves on " "Canaille without an administrator intervention." msgstr "" #: ../features.rst:246 f8ce532f519349f48429c1b170cdb484 msgid "Command Line Interface" msgstr "" #: ../features.rst:248 2f40208e5c1347a48420317d62aaa74d msgid "" "Canaille comes with a :abbr:`CLI (Command Line Interface)` to help " "administrators in hosting and management." msgstr "" #: ../features.rst:250 f29e92c5ddaf47ce9483715190c894bb msgid "" "There are tools to :ref:`check your configuration ` or to :ref:" "`install missing parts `. You can use the CLI to :ref:`create " "`, :ref:`read `, :ref:`update ` and :ref:" "`delete ` models such as :class:`users `, :class:`groups ` or :class:`OIDC " "clients `." msgstr "" #: ../features.rst:253 22885696b0da40219dbbabf940320082 msgid "" "There are also tools to :ref:`fill your database ` with random " "objects, for tests purpose for instance." msgstr "" #: ../features.rst:258 a094d21d84254528a930c248f4a593b4 msgid "Backends" msgstr "" #: ../features.rst:260 7fb43b7df88a4baea1dfda09d24dffcd msgid "" "Canaille can handle data from the most :ref:`common SQL databases ` such as PostgreSQL, MariaDB or SQLite, as well as :ref:" "`OpenLDAP `. It also comes with a no-dependency :" "ref:`in-memory database ` that can be used in " "unit tests suites." msgstr "" #: ../features.rst:264 df7ac02ac2a945069ee389b77b9b5a6b msgid "Miscellaneous" msgstr "" #: ../features.rst:269 bf688d8476c643a68687292de9336a89 msgid "Logging" msgstr "" #: ../features.rst:271 38d1832a542446019b042e1f939b488f msgid "" "Canaille writes :attr:`logs ` for every important event happening, to help administrators " "understand what is going on and debug funky situations." msgstr "" #: ../features.rst:273 42a168890026463880fcc0464d7e681a msgid "" "The following security events are logged with the tag [SECURITY] for easy " "retrieval :" msgstr "" #: ../features.rst:275 7876d69b9324404c8b5d6b8211f22a38 msgid "Authentication attempt" msgstr "" #: ../features.rst:276 5fc6499706b74b38a3bcc4d328a4267f msgid "Password update" msgstr "" #: ../features.rst:277 59baea279a0444c7a03276f643a9a546 msgid "Email update" msgstr "" #: ../features.rst:278 316b8f1a64d0492a89a3a3165985ad5b msgid "Forgotten password mail sent to user" msgstr "" #: ../features.rst:279 d7b3795158de483783e4c7ee82348b46 msgid "Token emission" msgstr "" #: ../features.rst:280 5e4175d55093488c8125b636c395129c msgid "Token refresh" msgstr "" #: ../features.rst:281 6dbf275ffef842c1bc6f3bb0989af951 msgid "Token revokation" msgstr "" #: ../features.rst:282 aefb033cc70946629968cda2c5659143 msgid "New consent given for client application" msgstr "" #: ../features.rst:283 bdd21f6ee436441db570665db0c47242 msgid "Consent revokation" msgstr "" #: ../features.rst:288 1665d88722ec4f1bb7686957622bb5d1 msgid "A tool for your development and tests" msgstr "" #: ../features.rst:290 1bdff890d0da4b7aa3b3df7a1270068e msgid "" "Thanks to its lightweight :ref:`in-memory database ` and its curated :ref:`dependency list `, Canaille can be used in the unit test suite of your application, so " "you can check how it behaves against a real world OpenID Connect server. If " "you work with python you might want to check :doc:`pytest-iam:index`." msgstr "" #: ../features.rst:292 466b386bf92b499696f22cf6f9889b22 msgid "" "It can also being launched in your development environment, if you find that " "launching a Keycloak in a Docker container is too heavy for your little web " "application." msgstr "" #: ../features.rst:294 02bd7bfe0c194ca2a4ed5b305d64174d msgid "" "It also fits well in continuous integration scenarios. Thanks to its :ref:" "`CLI `, you can prepare data in Canaille, let your application " "interact with it, and then check the side effects." msgstr "" #: ../features.rst:297 e0c00b45559342139b38b56d45c12df5 msgid "Roadmap" msgstr "" #: ../features.rst:300 889eb75d6c2f4c2fb2491c38b16c2cd5 msgid "BĂȘta version" msgstr "" #: ../features.rst:302 e4634fcad59b43549f2ac5d023fe25da msgid "" "To go out of the current Alpha version we want to achieve the following " "tasks:" msgstr "" #: ../features.rst:304 c24037d78a274d81a945064251654805 msgid ":issue:`Configuration validation using pydantic <138>`" msgstr "" #: ../features.rst:307 1a8941a892c041c98e2bdfe731944341 msgid "Stable version" msgstr "" #: ../features.rst:309 8bcca1796eb34ea39311fadde971e5df msgid "" "Before we push Canaille in stable version we want to achieve the following " "tasks:" msgstr "" #: ../features.rst:312 429e891c2c4a41d9882840e8901807c2 msgid "Security" msgstr "" #: ../features.rst:314 99812b3d9e054b92829a1d06207fd56f msgid ":issue:`Password hashing configuration <175>`" msgstr "" #: ../features.rst:315 5fc38e63289c4376aafefbdae1d08ad1 msgid ":issue:`Authentication logging policy <177>`" msgstr "" #: ../features.rst:316 172f15d0a07a475495af94228857aa19 msgid ":issue:`Intruder lockout <173>`" msgstr "" #: ../features.rst:317 7413890a044d4860a69e304c463b2075 msgid ":issue:`Password expiry policy <176>`" msgstr "" #: ../features.rst:318 1af8ce062a2f49dea0719295031dac36 msgid ":issue:`Multi-factor authentication: Email <47>`" msgstr "" #: ../features.rst:319 559b8aac8ec1464e9de0fc12d7cef1e3 msgid ":issue:`Multi-factor authentication: SMS <47>`" msgstr "" #: ../features.rst:320 0fa5c83275464d2daef9a61ff962068f msgid ":issue:`Multi-factor authentication: OTP <47>`" msgstr "" #: ../features.rst:323 80a148a15619443f96604259f8ce7936 msgid "Packaging" msgstr "" #: ../features.rst:325 783c51aa863f4dc694f5e51d8a364d62 msgid ":issue:`Nix package <190>`" msgstr "" #: ../features.rst:326 22df588b38954d95ba47de753196bbbd msgid ":issue:`Docker / OCI package <59>`" msgstr "" #: ../features.rst:329 4e6d78ec6bcf49e3aebeae146bd874b1 msgid "And beyond" msgstr "" #: ../features.rst:331 851c474a5f55472bb69e0980e85d2c53 msgid ":issue:`OpenID Connect certification <182>`" msgstr "" #: ../features.rst:332 ea230b81c9854692a1fe56d26fe831ba msgid ":issue:`SCIM support <116>`" msgstr ""