feat: implement OAuth Client ID Metadata Document (#1525) (#1526)

Co-authored-by: Elias Schneider <login@eliasschneider.com>

frontend/messages/en.json

@@ -7,6 +7,7 @@
 	"key": "Key",
 	"value": "Value",
 	"remove_custom_claim": "Remove custom claim",
+	"remove_url": "Remove URL {identifier}",
 	"add_custom_claim": "Add custom claim",
 	"add_another": "Add another",
 	"select_a_date": "Select a date",
@@ -296,6 +297,17 @@
 	"enabled": "Enabled",
 	"disabled": "Disabled",
 	"oidc_client_updated_successfully": "OIDC client updated successfully",
+	"client_type": "Type",
+	"client_type_standard": "Standard",
+	"client_type_metadata_document": "Metadata Document",
+	"cimd_client_managed_fields_title": "Some properties are read-only",
+	"cimd_client_managed_fields_description": "This client is managed through a Client ID Metadata Document (CIMD), so properties supplied by the document can't be edited here.",
+	"client_id_metadata_documents": "Client ID Metadata Documents",
+	"client_id_metadata_documents_description": "Client ID Metadata Documents (CIMD) let OAuth clients identify themselves using a URL. No preregistration necessary.",
+	"cimd_url_allowlist": "Allowed metadata document URLs",
+	"cimd_url_allowlist_description": "Restrict which client ID metadata document URLs are accepted. <link href='https://pocket-id.org/docs/advanced/callback-url-wildcards'>Wildcards</link> are supported. An empty list blocks all URLs.",
+	"refresh": "Refresh",
+	"oidc_client_metadata_refreshed_successfully": "Client metadata document refreshed successfully",
 	"create_new_client_secret": "Create new client secret",
 	"are_you_sure_you_want_to_create_a_new_client_secret": "Are you sure you want to create a new client secret? The old one will be invalidated.",
 	"generate": "Generate",
@@ -563,5 +575,6 @@
 	"approve": "Approve",
 	"or": "or",
 	"visit_and_enter": "Visit {url} and enter:",
+	"oidc": "OIDC",
 	"device_login_request_expired": "Your QR-Code has expired. Please start the sign-in process again."
 }