pocket-id/frontend/messages/en.json

{
	"$schema": "https://inlang.com/schema/inlang-message-format",
	"my_account": "My account",
	"confirm": "Confirm",
	"docs": "Docs",
	"key": "Key",
	"value": "Value",
	"remove_custom_claim": "Remove custom claim",
	"remove_url": "Remove URL {identifier}",
	"add_custom_claim": "Add custom claim",
	"add_another": "Add another",
	"select_a_date": "Select a date",
	"profile_picture": "Profile picture",
	"no_items_found": "No items found",
	"select_items": "Select items...",
	"search": "Search...",
	"copied": "Copied",
	"something_went_wrong": "Something went wrong",
	"go_back_to_home": "Go back to home",
	"logo": "Logo",
	"one_hour": "1 hour",
	"twelve_hours": "12 hours",
	"one_day": "1 day",
	"one_week": "1 week",
	"one_month": "1 month",
	"name": "Name",
	"an_unknown_error_occurred": "An unknown error occurred",
	"authentication_process_was_aborted": "Passkey verification was canceled",
	"error_occurred_with_authenticator": "Something went wrong while using your passkey",
	"authenticator_does_not_support_discoverable_credentials": "This device does not support the type of passkey required",
	"authenticator_does_not_support_resident_keys": "This device does not support the type of passkey required",
	"passkey_was_previously_registered": "This passkey was previously registered",
	"authenticator_does_not_support_any_of_the_requested_algorithms": "This device does not support a compatible passkey",
	"webauthn_error_invalid_rp_id": "Passkeys are not configured correctly for this domain.",
	"webauthn_error_invalid_domain": "Passkeys cannot be used on the configured domain.",
	"contact_administrator_to_fix": "Contact your administrator to fix this issue.",
	"webauthn_operation_not_allowed_or_timed_out": "The passkey prompt was canceled or timed out",
	"webauthn_not_supported_by_browser": "Passkeys are not supported by this browser. Please use an alternative sign in method.",
	"passkey_request_expired": "Your passkey request has expired",
	"passkey_response_invalid": "We couldn't process the response from your passkey",
	"passkey_verification_failed": "We couldn't verify your passkey",
	"passkey_user_verification_required": "Your passkey couldn't verify you. If you're using a security key, configure a FIDO2 PIN and try again",
	"critical_error_occurred_contact_administrator": "A critical error occurred. Please contact your administrator.",
	"sign_in_to": "Sign in to {name}",
	"use_a_different_account": "Use a different account",
	"email": "Email",
	"groups": "Groups",
	"cancel": "Cancel",
	"sign_in": "Sign in",
	"try_again": "Try again",
	"sign_out": "Sign out",
	"sign_in_to_appname": "Sign in to {appName}",
	"please_try_to_sign_in_again": "Please try to sign in again.",
	"please_try_again": "Please try again.",
	"go_back": "Go back",
	"code": "Code",
	"invalid_redirect_url": "Invalid redirect URL",
	"audit_log": "Audit log",
	"users": "Users",
	"oidc_clients": "OIDC clients",
	"api_keys": "API keys",
	"sqlite_network_storage_warning": "We detected that your SQLite database is stored on a network-attached drive like NFS, SMB, or FUSE. This is unsupported and can lead to your database getting corrupted.",
	"time": "Time",
	"event": "Event",
	"approximate_location": "Approximate Location",
	"ip_address": "IP Address",
	"device": "Device",
	"client": "Client",
	"unknown": "Unknown",
	"profile_picture_updated_successfully": "Profile picture updated successfully. It may take a few minutes to update.",
	"passkeys": "Passkeys",
	"user_verification": "User verification",
	"user_verification_required": "Required",
	"user_verification_preferred": "Preferred",
	"allow_synced_passkeys": "Allow synced passkeys",
	"allowed_authenticator_type": "Allowed authenticator type",
	"any_authenticator": "Any passkey",
	"device_passkeys_only": "Device passkeys only",
	"synced_passkeys_not_allowed": "Synced passkeys are not allowed by your administrator",
	"add_passkey": "Add passkey",
	"first_name": "First name",
	"last_name": "Last name",
	"username": "Username",
	"save": "Save",
	"username_can_only_contain": "Username can only contain lowercase letters, numbers, underscores, dots, hyphens, and '@' symbols",
	"username_must_start_with": "Username must start with an alphanumeric character",
	"username_must_end_with": "Username must end with an alphanumeric character",
	"added_on": "Added on",
	"rename": "Rename",
	"delete": "Delete",
	"are_you_sure_you_want_to_delete_this_passkey": "Are you sure you want to delete this passkey?",
	"passkey_deleted_successfully": "Passkey deleted successfully",
	"delete_passkey_name": "Delete {passkeyName}",
	"passkey_name_updated_successfully": "Passkey name updated successfully",
	"name_passkey": "Name passkey",
	"name_your_passkey_to_easily_identify_it_later": "Name your passkey to easily identify it later.",
	"create_api_key": "Create API key",
	"api_key_created": "API key created",
	"description": "Description",
	"api_key": "API key",
	"close": "Close",
	"expiration_date_must_be_in_the_future": "Expiration date must be in the future",
	"never": "Never",
	"revoke": "Revoke",
	"last_used": "Last used",
	"general": "General",
	"ldap": "LDAP",
	"save_changes_question": "Save changes?",
	"you_have_to_save_the_changes_before_sending_a_test_email_do_you_want_to_save_now": "You have to save the changes before sending a test email. Do you want to save now?",
	"save_and_send": "Save and send",
	"test_email_sent_successfully": "Test email sent successfully to your email address.",
	"failed_to_send_test_email": "Failed to send test email. Check the server logs for more information.",
	"skip_certificate_verification": "Skip certificate verification",
	"skip_consent": "Skip consent screen",
	"login_notification_always": "Every sign-in",
	"login_notification_ip_and_user_agent": "New IP address or browser",
	"login_notification_browser_recognition": "Unrecognized browser",
	"send_test_email": "Send test email",
	"application_name": "Application name",
	"session_duration": "Session duration",
	"ldap_sync_finished": "LDAP sync finished",
	"attribute_mapping": "Attribute mapping",
	"sync_now": "Sync now",
	"enable": "Enable",
	"add_user": "Add user",
	"admin_privileges": "Admin privileges",
	"admins_have_full_access_to_the_admin_panel": "Admins have full access to the admin panel.",
	"role": "Role",
	"admin": "Admin",
	"user": "User",
	"toggle_menu": "Toggle menu",
	"back": "Back",
	"custom_claims": "Custom claims",
	"add_group": "Add group",
	"friendly_name": "Friendly name",
	"add_oidc_client": "Add OIDC client",
	"add": "Add",
	"callback_urls": "Callback URLs",
	"logout_callback_urls": "Logout callback URLs",
	"backchannel_logout_url": "Back-channel logout URL",
	"pkce": "PKCE",
	"requires_reauthentication": "Requires re-authentication",
	"par": "PAR",
	"requires_pushed_authorization_requests": "Requires pushed authorization requests",
	"name_logo": "{name} logo",
	"disabled": "Disabled",
	"client_type": "Client type",
	"client_id_metadata_documents": "Client ID metadata documents",
	"cimd_url_allowlist": "Allowed metadata document URLs",
	"oidc_client_name": "OIDC Client {name}",
	"client_id": "Client ID",
	"client_secret": "Client secret",
	"unrestrict": "Unrestrict",
	"user_groups_restriction_updated_successfully": "User groups restriction updated successfully",
	"favicon": "Favicon",
	"email_logo": "Email logo",
	"language": "Language",
	"reset_profile_picture_question": "Reset profile picture?",
	"this_will_remove_the_uploaded_image_and_reset_the_profile_picture_to_default": "This will remove the uploaded image and reset the profile picture to default. Do you want to continue?",
	"reset": "Reset",
	"reset_to_default": "Reset to default",
	"reset_setting_to_default": "Reset {setting} to default",
	"changed_from_the_default": "Changed from the default",
	"field_optional": "(optional)",
	"advanced": "Advanced",
	"count_changed": "{count} changed",
	"breadcrumb": "Breadcrumb",
	"profile_picture_has_been_reset": "Profile picture has been reset. It may take a few minutes to update.",
	"all_users": "All users",
	"allow_all_users": "Allow all users",
	"allow_all_users_question": "Allow all users to sign in to {name}?",
	"allow_all_users_consequence": "Its allowed groups are removed, and anyone with a {appName} account can sign in.",
	"audit_event_sign_in": "Sign in",
	"audit_event_token_sign_in": "Token Sign In",
	"audit_event_remote_sign_in": "Remote sign in",
	"audit_event_client_authorization": "Client authorization",
	"audit_event_new_client_authorization": "New client authorization",
	"audit_event_account_created": "Account created",
	"audit_event_device_code_authorization": "Device code authorization",
	"audit_event_new_device_code_authorization": "New device code authorization",
	"audit_event_passkey_added": "Passkey added",
	"audit_event_passkey_removed": "Passkey removed",
	"disable_animations": "Disable animations",
	"status": "Status",
	"send_email": "Send email",
	"callback_url_description": "{#link href=|https://pocket-id.org/docs/advanced/callback-url-wildcards|}Wildcards{/link} are supported.",
	"federated_client_credentials": "Federated client credentials",
	"issuer": "Issuer",
	"subject": "Subject",
	"defaults_to_the_client_id": "Defaults to the client ID",
	"audience": "Audience",
	"defaults_to_the_appname_url": "Defaults to the {appName} URL",
	"signing_keys": "Signing keys",
	"jwks_url": "JWKS URL",
	"defaults_to_the_issuer_jwks_url": "Defaults to {issuer}/.well-known/jwks.json",
	"public_keys": "Public keys",
	"public_key": "Public key",
	"add_public_key": "Add public key",
	"remove_public_key": "Remove public key {keyId}",
	"paste_public_key_description": "Paste a public key in JWK format, or a JWKS for multiple keys. Every key must have a key ID.",
	"public_key_already_added": "A key with the key ID \"{keyId}\" has already been added",
	"paste_a_public_key_or_a_jwks": "Paste a public key in JWK format, or a JWKS containing multiple keys",
	"the_value_is_not_valid_json": "The value is not valid JSON",
	"the_value_is_not_a_jwk_or_a_jwks": "The value is not a JWK or a JWKS",
	"the_jwks_does_not_contain_any_key": "The JWKS does not contain any key",
	"jwks_key_is_not_a_jwk": "Key {number} of the JWKS is not a JWK",
	"id_token": "ID token",
	"access_token": "Access token",
	"token_lifetimes": "Token lifetimes",
	"access_token_lifetime": "Access token lifetime",
	"refresh_token_inactivity_timeout": "Refresh token inactivity timeout",
	"token_lifetime_minimum": "Token lifetime must be at least 1 minute.",
	"token_lifetime_maximum": "Token lifetime cannot exceed 365 days.",
	"token_lifetime_whole_minutes": "Token lifetime must use whole-minute increments.",
	"duration_unit_for": "{name} unit",
	"minutes": "Minutes",
	"hours": "Hours",
	"days": "Days",
	"userinfo": "Userinfo",
	"copy": "Copy",
	"select_an_option": "Select an option",
	"select_user": "Select user",
	"usage_limit": "Usage limit",
	"expires": "Expires",
	"signup": "Sign Up",
	"skip_for_now": "Skip for now",
	"create_signup_token": "Create signup token",
	"expired": "Expired",
	"used_up": "Used up",
	"active": "Active",
	"created": "Created",
	"token": "Token",
	"my_apps": "My apps",
	"sort_by": "Sort by",
	"recently_used": "Recently used",
	"name_a_to_z": "Name A–Z",
	"name_z_to_a": "Name Z–A",
	"search_apps": "Search apps…",
	"revoke_access_description": "{#b}{clientName}{/b} can no longer read your account details until you sign in to it again.",
	"invalid_client_id": "Client ID can only contain letters, numbers, underscores, and hyphens",
	"generated": "Generated",
	"administration": "Administration",
	"display_name": "Display name",
	"locale": "Locale",
	"ldap_id": "LDAP ID",
	"reauthentication": "Re-authentication",
	"default_profile_picture": "Default profile picture",
	"light": "Light",
	"dark": "Dark",
	"system": "System",
	"unrestrict_oidc_client": "Unrestrict {clientName}",
	"confirm_unrestrict_oidc_client_description": "Are you sure you want to unrestrict the OIDC client {#b}{clientName}{/b}? This will remove all group assignments for this client and any user will be able to sign in.",
	"yes": "Yes",
	"no": "No",
	"scim_provisioning": "SCIM provisioning",
	"scim_endpoint": "SCIM endpoint",
	"scim_token": "SCIM token",
	"scim_sync_failed": "SCIM sync failed. Check the server logs for more information.",
	"scim_sync_successful": "The SCIM sync has been completed successfully.",
	"save_and_sync": "Save and Sync",
	"scim_save_changes_description": "You have to save the changes before starting a SCIM sync. Do you want to save now?",
	"scopes": "Scopes",
	"api_key_renewed": "API key renewed",
	"app_config_home_page": "Home page",
	"email_verification_warning": "Verify your email address",
	"email_verification": "Email verification",
	"email_verification_optional": "Optional",
	"email_verification_required": "Required",
	"email_verification_required_needs_user_email": "Requiring email verification also requires users to have an email address.",
	"email_verification_required_warning": "Verify your email address to use your account",
	"email_verification_deadline_description": "If you don't, your account will be deleted {time}.",
	"verify_email_address": "Verify email address",
	"email_verification_required_error": "You must verify your email address before you can sign in to applications",
	"email_change_not_started": "Your other changes were saved, but the email to confirm your new email address couldn't be sent. Please try again.",
	"cancel_email_change": "Cancel change",
	"email_change_canceled": "Email change canceled.",
	"email_verification_sent": "Verification email sent successfully.",
	"replay_protection": "Replay protection",
	"apis": "APIs",
	"add_api": "Add API",
	"api_resource": "Resource",
	"api_resource_description": "A unique URI that identifies this API resource. Clients request it with the resource parameter. It can't be changed later.",
	"api_permissions": "Permissions",
	"api_permissions_description": "The permissions (scopes) that clients can request for this API.",
	"add_permission": "Add permission",
	"api_access": "API access",
	"api_access_updated_successfully": "API access updated successfully",
	"access_an_api_on_your_behalf": "Access an API on your behalf",
	"allow_all_metadata_document_clients": "Allow all metadata document clients",
	"allow_all_metadata_document_clients_description": "Every client registered through a metadata document can request tokens for this API on behalf of users.",
	"granted_permissions": "Granted permissions",
	"granted_through_cimd_access": "Granted because this API allows all metadata document clients",
	"access_granted_through_cimd_access": "This API allows all metadata document clients, so the access granted that way is shown here but can only be changed on the API itself.",
	"access": "Access",
	"select_a_client_to_grant_access_to_this_api": "Select the client that should get access to this API.",
	"revoke_access_to_name": "Revoke access to {name}",
	"are_you_sure_you_want_to_revoke_the_access_of_this_client_to_the_api": "Are you sure you want to revoke this client's access to the API? Its access to other APIs is kept.",
	"select_an_api_this_client_should_access": "Select the API this client should get access to.",
	"granted_to_all_cimd_clients": "Granted to all metadata document clients",
	"sign_in_with_another_device": "Sign in with another device",
	"device_login_qr_code": "Device login QR code",
	"deny": "Deny",
	"approve": "Approve",
	"visit_and_enter": "Visit {url} and enter:",
	"oidc": "OIDC",
	"device_login_request_expired": "Your QR-Code has expired. Please start the sign-in process again.",
	"credentials": "Credentials",
	"client_secrets": "Client secrets",
	"no_expiration": "No expiration",
	"days_count": "{count} days",
	"client_secrets_limit_reached": "An app cannot have more than 20 client secrets.",
	"unsaved_changes": "Unsaved changes",
	"one_unsaved_change": "1 unsaved change",
	"count_unsaved_changes": "{count} unsaved changes",
	"changes_saved": "Changes saved",
	"discard": "Discard",
	"could_not_save_check_the_highlighted_fields": "Couldn’t save. Check the highlighted fields.",
	"could_not_save_check_your_connection": "Couldn’t save. Check your connection.",
	"save_or_discard_before_leaving": "Save or discard before leaving",
	"application": "Application",
	"redirects": "Redirects",
	"security": "Security",
	"remove_logo": "Remove logo",
	"choose_logo": "Choose logo",
	"current_logo": "Current logo",
	"upload_light_logo": "Upload light logo",
	"upload_dark_logo": "Upload dark logo",
	"search_icons_or_paste_url": "Search icons or paste an image URL",
	"paste_image_url": "Paste an image URL",
	"use_as_light_logo": "Use as light logo",
	"use_as_dark_logo": "Use as dark logo",
	"icons_provided_by_selfhst": "Icons by {#link href=|https://selfh.st/icons|}selfh.st{/link}, licensed under {#link href=|https://creativecommons.org/licenses/by/4.0/|}CC BY 4.0{/link}.",
	"claims": "Claims",
	"public_client_type_description": "Uses PKCE instead of a secret. For browser, mobile and desktop apps.",
	"color_theme": "Color theme",
	"color_theme_mono": "Mono",
	"color_theme_mist": "Mist",
	"color_theme_sage": "Sage",
	"color_theme_midnight": "Midnight",
	"color_theme_lavender": "Lavender",
	"custom_theme_color": "Custom theme color",
	"custom_theme_color_description": "Any CSS color, like #2f6f4e.",
	"color": "Color",
	"preview": "Preview",
	"sidebar": "Sidebar",
	"use_color": "Use color",
	"enter_a_css_color": "Enter a CSS color, like #2f6f4e.",
	"use_a_color_without_transparency": "Use a color without transparency, like #2f6f4e.",
	"custom_color_note_darkened": "Darkened a little so white text on buttons stays readable.",
	"custom_color_note_lightened": "Lightened in dark mode so buttons stand out from the background.",
	"custom_color_note_edge": "Buttons get a thin border because the color is close to the background.",
	"custom_color_note_near_status": "This color is close to the error, warning or success color, so buttons may read as a status.",
	"custom": "Custom",
	"account": "Account",
	"activity": "Activity",
	"configuration": "Configuration",
	"main": "Main",
	"update_available": "Update available",
	"collapse_sidebar": "Collapse sidebar",
	"expand_sidebar": "Expand sidebar",
	"appearance": "Appearance",
	"account_menu": "Account menu",
	"more": "More",
	"any": "Any",
	"facet_filter_label": "{name}: {value}, filter",
	"clear_name_filter": "Clear {name} filter",
	"filters": "Filters",
	"display": "Display",
	"columns": "Columns",
	"select_all_rows_on_this_page": "Select all rows on this page",
	"pagination": "Pagination",
	"pagination_range": "{#b}{from}–{to}{/b} of {#b}{total}{/b}",
	"per_page": "{count} per page",
	"page_size": "Page size",
	"previous": "Previous",
	"next": "Next",
	"email_address": "Email address",
	"name_username_and_picture": "Name, username and picture",
	"group_membership": "Group membership",
	"no_groups_yet": "No groups yet",
	"actions_for_name": "Actions for {name}",
	"copy_code": "Copy code",
	"copy_link": "Copy link",
	"link": "Link",
	"code_expired": "This code expired",
	"expires_in_countdown": "Expires in {time}",
	"audit_sentence_signed_in_to": "Signed in to {#b}{name}{/b}",
	"audit_sentence_allowed_app": "Allowed {#b}{name}{/b} to use the account",
	"audit_sentence_signed_in_on_device": "Signed in to {#b}{name}{/b} on a TV or device",
	"audit_sentence_allowed_on_device": "Allowed {#b}{name}{/b} on a TV or device",
	"audit_sentence_account_created": "Account created",
	"audit_sentence_added_passkey": "Added passkey {#b}{name}{/b}",
	"audit_sentence_removed_passkey": "Removed passkey {#b}{name}{/b}",
	"audit_via_passkey": "via passkey",
	"audit_via_login_code": "via login code",
	"audit_via_another_device": "via another device",
	"audit_by_actor": "by {name}",
	"passkey": "Passkey",
	"event_id": "Event ID",
	"raw_data": "Raw data",
	"copy_json": "Copy JSON",
	"copy_ip_address": "Copy IP address",
	"copy_event_id": "Copy event ID",
	"account_page_description": "Your profile, passkeys and language.",
	"profile": "Profile",
	"profile_section_description": "How you appear to apps you sign in to with {appName}.",
	"profile_managed_by_ldap": "Managed by LDAP. Changes come from your directory.",
	"profile_editing_disabled": "Your administrator manages your profile.",
	"display_name_helper": "Filled in from your first and last name until you change it.",
	"email_helper_purpose": "Apps you sign in to receive this address.",
	"email_status_verified": "Verified",
	"email_status_unverified": "Unverified",
	"email_status_verification_required": "Verification required",
	"email_change_waiting": "Waiting for you to confirm {email}. We sent a link there.",
	"profile_picture_formats": "PNG, JPEG, WebP, AVIF or HEIC.",
	"profile_picture_from_directory": "Your directory provides this picture.",
	"upload": "Upload",
	"upload_profile_picture": "Upload profile picture",
	"adjust_your_photo": "Adjust your photo",
	"adjust_your_photo_description": "Drag to reposition the photo and zoom to frame it.",
	"photo_crop_area": "Crop area, use the arrow keys to move the photo",
	"zoom": "Zoom",
	"zoom_in": "Zoom in",
	"zoom_out": "Zoom out",
	"passkeys_section_description": "They live on your devices or in your password manager.",
	"add_backup_passkey": "Add a backup passkey",
	"add_backup_passkey_description": "If you lose access to {name}, you’ll need an admin to give you a login code.",
	"no_passkeys_yet": "No passkeys yet",
	"preferences": "Preferences",
	"language_crowdin_description": "Some translations are automatic. Help improve them on {#link href=|https://crowdin.com/project/pocket-id|}Crowdin{/link}",
	"email_verification_send_hint": "Send a verification link from the Email field below.",
	"email_verification_only_page": "Until you do, this is the only page you can use.",
	"email_verified_title": "{email} is verified",
	"email_verification_failed_title": "We couldn’t verify your email",
	"my_apps_description": "Apps you can open with your {appName} account.",
	"apps_count_one": "1 app",
	"apps_count": "{count} apps",
	"apps_without_launch_link_count": "{count} without a launch link",
	"app_matches_query": "1 app matches “{query}”",
	"apps_match_query": "{count} apps match “{query}”",
	"no_apps_match_query": "No apps match “{query}”",
	"clear_search": "Clear search",
	"clear_filters": "Clear filters",
	"app_used_ago": "Used {time}",
	"not_signed_in_yet": "Not signed in yet",
	"apps_without_launch_link": "Apps without a launch link",
	"apps_without_launch_link_note": "You’ve signed in to these, but they have no link to open.",
	"all_apps": "All apps",
	"no_apps_yet": "No apps yet",
	"no_apps_yet_description": "Apps appear here after your administrator gives you access.",
	"no_apps_yet_admin_description": "Connect your first app, like Immich or Jellyfin. It shows up here for everyone you give access.",
	"connect_an_app": "Connect an app",
	"open_in_new_tab": "Open in new tab",
	"edit_client": "Edit client",
	"revoke_access_ellipsis": "Revoke access…",
	"revoke_app_access_title": "Revoke {name}’s access to your {appName} account?",
	"app_access_revoked": "{name}’s access revoked",
	"link_to_name_copied": "Link to {name} copied",
	"activity_description": "Sign-ins and changes to your account.",
	"configuration_categories": "Configuration categories",
	"config_tab_signup": "Sign-up",
	"config_tab_features": "Features",
	"config_features_intro": "Turn on what your setup needs. {appName} shows the pages and tabs of a feature only while it is on.",
	"features_directory": "Directory",
	"features_directory_description": "Bring in people from other systems and add your own claims to their tokens.",
	"features_developers": "Developers",
	"features_developers_description": "Let your own services and scripts work with {appName}.",
	"feature_ldap_description": "Sync people and groups from an LDAP directory.",
	"feature_ldap_adds": "Adds LDAP to Configuration.",
	"feature_ldap_in_use": "Stays on while LDAP sync is turned on.",
	"feature_scim_description": "Send people and groups to apps that support SCIM.",
	"feature_scim_adds": "Adds a SCIM tab to OIDC clients.",
	"feature_scim_in_use": "Stays on while an OIDC client syncs with SCIM.",
	"feature_custom_claims_description": "Add your own claims to the tokens of people and groups.",
	"feature_custom_claims_adds": "Adds a Custom claims tab to people and groups.",
	"feature_custom_claims_in_use": "Stays on while people, groups or sign-up defaults have custom claims.",
	"features_clients": "Clients",
	"features_clients_description": "Other ways for apps to register with {appName} and prove who they are.",
	"feature_cimd_description": "Let apps register themselves with a metadata document instead of an admin adding them.",
	"feature_cimd_adds": "Adds metadata document settings to OIDC and APIs.",
	"feature_cimd_in_use": "Stays on while the allowlist has an entry, a metadata document client exists or an API admits these clients.",
	"feature_federated_credentials_description": "Let OIDC clients authenticate with a token from another identity provider, like a CI system, instead of a secret.",
	"feature_federated_credentials_adds": "Adds federated credentials to OIDC clients.",
	"feature_federated_credentials_in_use": "Stays on while any OIDC client has federated credentials.",
	"feature_apis_description": "Let OIDC clients request access tokens for your own APIs.",
	"feature_apis_adds": "Adds APIs to the sidebar.",
	"feature_apis_in_use": "Stays on while any API exists.",
	"feature_api_keys_description": "Manage {appName} from scripts and other tools.",
	"feature_api_keys_adds": "Adds API keys to the sidebar.",
	"feature_api_keys_in_use": "Stays on while any API key exists.",
	"feature_turned_on": "{feature} turned on",
	"feature_turned_off": "{feature} turned off",
	"config_tab_branding": "Branding",
	"config_general_intro": "Name, sessions and how {appName} looks and moves for everyone.",
	"config_signup_intro": "Whether people can create their own accounts and what new accounts start with.",
	"config_passkeys_intro": "Which passkeys people can add and how they confirm it’s them.",
	"config_email_intro": "Email addresses, verification and the emails {appName} sends.",
	"config_ldap_intro": "Sync people and groups from an LDAP directory.",
	"config_oidc_intro": "Endpoints, defaults for new clients and which metadata documents {appName} accepts.",
	"config_oidc_intro_basic": "Endpoints and defaults for new clients.",
	"config_branding_intro": "Logos and images people see on sign-in pages, in apps and in emails.",
	"config_env_managed_title": "Configuration is managed by environment variables",
	"config_env_managed_description": "Settings here are read-only because UI_CONFIG_DISABLED is set. Change them in your environment and restart Pocket ID.",
	"config_app_name_description": "Shown on sign-in pages, in emails and in browser tabs.",
	"config_session_duration_description": "How long people stay signed in. Up to 30 days.",
	"config_session_duration_maximum": "Enter 30 days or less",
	"config_session_duration_whole_minutes": "Use whole minutes",
	"config_home_page_description": "Where people land after signing in.",
	"config_self_account_editing": "Self-service account editing",
	"config_self_account_editing_description": "Let people change their own name, username and email.",
	"config_disable_animations_description": "Applies to everyone. Devices set to reduce motion already get this.",
	"config_who_can_sign_up": "Who can sign up",
	"config_who_can_sign_up_description": "Admins can always add people on the Users page.",
	"config_signup_disabled": "Only admins",
	"config_signup_with_token": "People with a signup token",
	"config_signup_with_token_description": "People need an invite link from an admin.",
	"config_signup_open": "Anyone",
	"config_signup_open_description": "Anyone who can reach {appName} can create an account.",
	"config_manage_signup_tokens": "Manage signup tokens",
	"config_new_accounts": "New accounts",
	"config_default_groups": "Default groups",
	"config_default_groups_description": "Also preselected for new signup tokens.",
	"config_default_custom_claims": "Default custom claims",
	"config_registration": "Registration",
	"config_registration_description": "Applies to new passkeys. Passkeys people already have keep working unless noted.",
	"config_user_verification_description": "Whether a fingerprint, face or PIN is needed to use a passkey.",
	"config_uv_required_description": "Require a fingerprint, face or PIN. Security keys without one won’t work.",
	"config_uv_preferred_description": "Ask for one when available, and allow touch-only security keys.",
	"config_allow_synced_passkeys_description": "Like iCloud Keychain or Google Password Manager.",
	"config_synced_passkeys_off_note": "People whose only passkey is synced won’t be able to sign in.",
	"config_any_passkey_description": "Device passkeys and security keys.",
	"config_device_passkeys_description": "Passkeys built into phones and computers.",
	"config_security_keys_only": "Security keys only",
	"config_security_keys_only_description": "USB or NFC keys such as YubiKeys.",
	"config_email_addresses": "Email addresses",
	"config_require_email": "Require an email address",
	"config_require_email_description": "Without it, people without an email can’t use login codes or notifications.",
	"config_off": "Off",
	"config_verification_optional_description": "People are asked, but keep full access.",
	"config_verification_required_description": "Unverified people can’t sign in to apps.",
	"config_verification_required_note": "Admins are exempt. Self-signed-up accounts that stay unverified for 24 hours are deleted.",
	"config_treat_as_verified": "Treat new addresses as verified",
	"config_treat_as_verified_locked": "Not available while verification is required.",
	"config_mail_server": "Mail server",
	"config_mail_server_description": "Login codes, verification links and notifications go out through this server.",
	"config_smtp_missing_title": "Emails can’t be sent yet",
	"config_smtp_missing_description": "Fill in the host, port and from address.",
	"config_smtp_host": "Host",
	"config_smtp_port": "Port",
	"config_password": "Password",
	"config_from_address": "From address",
	"config_required_while_emails_on": "Required while email features are on.",
	"config_required_with_mail_server": "Required when a mail server setting is filled in.",
	"config_encryption": "Encryption",
	"config_self_signed_only": "Only for servers with self-signed certificates.",
	"config_emails_app_sends": "Emails {appName} sends",
	"config_signin_notifications": "Sign-in notifications",
	"config_signin_notifications_description": "When people get an email after signing in.",
	"config_notify_ip_description": "From a new IP address and browser combination.",
	"config_notify_browser_description": "From a browser that hasn’t signed in before.",
	"config_admin_login_codes": "Login codes sent by admins",
	"config_admin_login_codes_description": "Lets admins email a login code from a person’s page.",
	"config_api_key_expiry": "API key expiry warnings",
	"config_user_login_codes": "Login codes requested by people",
	"config_user_login_codes_description": "People can get a sign-in code by email instead of using a passkey.",
	"config_user_login_codes_note": "Anyone with access to someone’s inbox can sign in as them.",
	"config_ldap_connected": "Connected",
	"config_ldap_not_connected": "Not connected",
	"config_ldap_syncing": "Syncing…",
	"config_ldap_sync_failed": "Last sync failed",
	"config_enable_ldap": "Enable LDAP…",
	"config_disable_ldap": "Disable LDAP…",
	"config_enable_ldap_title": "Connect to {host}?",
	"config_enable_ldap_message": "{appName} saves these settings and syncs people and groups now. Synced people and groups become read-only here.",
	"config_enable_ldap_confirm": "Enable LDAP",
	"config_disable_ldap_title": "Disable LDAP sync?",
	"config_disable_ldap_message": "People and groups that came from LDAP stay in {appName} and become editable. Nothing is deleted.",
	"config_disable_ldap_confirm": "Disable LDAP",
	"config_ldap_enabled_and_synced": "LDAP enabled and synced",
	"config_ldap_disabled": "LDAP disabled",
	"config_connection": "Connection",
	"config_connection_description": "{appName} reads people and groups as this account and never writes to your directory.",
	"config_search": "Search",
	"config_search_description": "Only entries that match these filters sync to {appName}.",
	"config_server_url": "Server URL",
	"config_bind_dn": "Bind DN",
	"config_bind_password": "Bind password",
	"config_base_dn": "Base DN",
	"config_user_search_filter": "User search filter",
	"config_group_search_filter": "Group search filter",
	"config_keep_removed_ldap_users": "Keep people removed from LDAP",
	"config_keep_removed_ldap_users_description": "They’re disabled instead of deleted.",
	"config_pocket_id_field": "Pocket ID field",
	"config_ldap_attribute": "LDAP attribute",
	"config_notes": "Notes",
	"config_map_user_id": "User ID",
	"config_map_group_members": "Group members",
	"config_map_group_id": "Group ID",
	"config_map_group_name": "Group name",
	"config_map_admin_group": "Admin group",
	"config_note_required": "Required.",
	"config_note_required_never_change": "Required. Must never change.",
	"config_note_picture": "A URL, binary or base64 image.",
	"config_note_group_name": "Required. The attribute in the group’s DN.",
	"config_note_admin_group": "Members become Pocket ID admins.",
	"config_endpoints": "Endpoints",
	"config_discovery_url": "Discovery URL",
	"config_jwks": "JWKS",
	"config_copy_endpoint": "Copy {name}",
	"config_new_clients": "New clients",
	"config_auto_secret": "Create a secret for new clients",
	"config_auto_secret_description": "Confidential clients get a secret without an expiry when they’re added. It’s shown once.",
	"config_cimd_description": "Apps can identify themselves with a URL to a metadata document instead of being registered here.",
	"config_cimd_allowlist_description": "{#link href=|https://pocket-id.org/docs/advanced/callback-url-wildcards|}Wildcards{/link} are supported. An empty list blocks every metadata document client.",
	"config_logo_description": "Shown on sign-in pages, in the sidebar and in My apps.",
	"config_logo_spec": "SVG, PNG or WebP. At least 256 px wide.",
	"config_signin_background": "Sign-in background",
	"config_signin_background_description": "The photo behind the sign-in card.",
	"config_signin_background_spec": "JPEG, PNG or WebP. At least 1920 px wide.",
	"config_no_background": "No background. Sign-in pages use a plain background.",
	"config_email_logo_description": "Shown at the top of every email {appName} sends.",
	"config_email_logo_spec": "PNG or JPEG.",
	"config_favicon_spec": "SVG, PNG or ICO.",
	"config_default_profile_picture_description": "Shown for people who haven’t uploaded a picture. Without one, initials are shown.",
	"config_default_profile_picture_spec": "PNG, JPEG or WebP. Square works best.",
	"config_replace": "Replace",
	"config_reset_image": "Reset to default, {image}",
	"config_remove": "Remove",
	"config_remove_image": "Remove {image}",
	"config_image_light_logo": "light logo",
	"config_image_dark_logo": "dark logo",
	"config_image_background": "sign-in background",
	"config_image_email_logo": "email logo",
	"config_image_favicon": "favicon",
	"config_image_default_profile_picture": "default profile picture",
	"config_image_too_small": "This image is {width} px wide and may look blurry.",
	"config_preview_button": "Sign in with passkey",
	"auth_signed_in": "Signed in",
	"auth_taking_you_to_your_account": "Taking you to your account…",
	"auth_passkey_prompt_closed": "The passkey prompt was closed before you finished.",
	"auth_sign_in_subtitle": "Use the passkey saved on this device or in your password manager.",
	"auth_new_here": "New here?",
	"auth_create_an_account": "Create an account",
	"auth_sign_in_with_passkey": "Sign in with passkey",
	"auth_other_ways_to_sign_in": "Other ways to sign in",
	"auth_taking_you_back": "Taking you back…",
	"auth_use_another_device": "Use another device",
	"auth_use_another_device_description": "Approve this sign-in on a phone or computer that has your passkey.",
	"auth_enter_a_login_code": "Enter a login code",
	"auth_enter_a_login_code_description": "Use a code from your email or from your administrator.",
	"auth_enter_an_admin_login_code_description": "Use a code from your administrator.",
	"auth_email_me_a_login_code": "Email me a login code",
	"auth_email_me_a_login_code_description": "Get a 6-character code at your email address.",
	"auth_other_ways_to_sign_in_description": "Use one of these if your passkey isn’t on this device.",
	"auth_use_your_passkey_instead": "Use your passkey instead",
	"auth_enter_your_login_code": "Enter your login code",
	"auth_login_code_short_description": "Enter the 6-character code from your email.",
	"auth_login_code_long_description": "Enter the 12-character code your administrator gave you.",
	"auth_login_code": "Login code",
	"auth_checking_code": "Checking code…",
	"auth_code_did_not_work": "That code didn’t work. Check it and try again.",
	"auth_spaces_and_dashes_are_ignored": "Spaces and dashes are ignored.",
	"auth_i_have_a_6_character_code": "I have a 6-character code",
	"auth_i_have_a_12_character_code": "I have a 12-character code",
	"auth_check_your_email": "Check your email",
	"auth_email_code_sent": "If {#b}{email}{/b} belongs to a {appName} account, we sent it a code.",
	"auth_resend_code_in": "Resend code in {time}",
	"auth_resend_code": "Resend code",
	"auth_get_a_login_code_by_email": "Get a login code by email",
	"auth_email_login_description": "Enter the email address of your {appName} account.",
	"auth_email_login_helper": "We’ll send a code and a sign-in link.",
	"auth_enter_a_full_email_address": "Enter a full email address, like name@example.com.",
	"auth_email_me_a_code": "Email me a code",
	"auth_another_device_expired": "Codes only work for a few minutes. Get a new one to try again.",
	"auth_another_device_denied": "The sign-in was denied on your other device.",
	"auth_get_a_new_code": "Get a new code",
	"auth_waiting_for_approval": "Waiting for approval on your other device…",
	"auth_creating_sign_in_request": "Creating sign-in request…",
	"oidc_clients_page_description": "Apps that sign people in with {appName}.",
	"who_can_sign_in": "Who can sign in",
	"who_can_sign_in_updated": "Who can sign in updated",
	"selected_groups": "Selected groups",
	"type": "Type",
	"registration": "Registration",
	"metadata_document": "Metadata document",
	"registered_by_an_admin": "By an admin",
	"on": "On",
	"off": "Off",
	"launch_url": "Launch URL",
	"none": "None",
	"open": "Open",
	"no_groups": "No groups",
	"no_one_can_sign_in_until_you_allow_a_group": "No one can sign in until you allow a group",
	"one_group": "1 group",
	"group_count": "{count} groups",
	"public": "Public",
	"confidential": "Confidential",
	"copy_client_id": "Copy client ID",
	"name_client_id_copied": "{name}’s client ID copied",
	"could_not_copy_the_client_id": "Couldn’t copy the client ID",
	"refresh_metadata": "Refresh metadata",
	"metadata_document_for_name_refreshed": "Metadata document for {name} refreshed",
	"delete_ellipsis": "Delete…",
	"delete_client_ellipsis": "Delete client…",
	"delete_name_question": "Delete {name}?",
	"delete_name_action": "Delete {name}",
	"delete_oidc_client_consequence": "Everyone loses access to {name} immediately, and its client ID and secrets stop working.",
	"name_deleted": "{name} deleted",
	"client_name_helper": "Shown on the sign-in and consent screens and in My apps.",
	"confidential_client_tile_description": "Uses a client secret. For apps with a backend, like Grafana.",
	"callback_url": "Callback URL",
	"create_callback_url_helper": "Provided by your app. You can add more later.",
	"set_a_custom_client_id": "Set a custom client ID",
	"custom_client_id_helper": "It can’t be changed later.",
	"new_clients_start_with_no_allowed_groups": "New clients start with no allowed groups. You’ll choose who can sign in next.",
	"create_client": "Create client",
	"name_created": "{name} created",
	"details": "Details",
	"endpoints": "Endpoints",
	"discovery_url": "Discovery URL",
	"authorization": "Authorization",
	"end_session": "End session",
	"jwks": "JWKS",
	"copy_discovery_url": "Copy discovery URL",
	"copy_issuer_url": "Copy issuer URL",
	"copy_authorization_url": "Copy authorization URL",
	"copy_token_url": "Copy token URL",
	"copy_userinfo_url": "Copy userinfo URL",
	"copy_end_session_url": "Copy end session URL",
	"copy_jwks_url": "Copy JWKS URL",
	"no_one_can_sign_in": "No one can sign in",
	"limited_to_one_group": "Limited to 1 group",
	"limited_to_count_groups": "Limited to {count} groups",
	"data_preview": "Data preview",
	"more_actions": "More actions",
	"name_sections": "{name} sections",
	"scim": "SCIM",
	"some_settings_come_from_a_metadata_document": "Some settings come from a metadata document",
	"cimd_client_read_only_description": "{name} describes itself through a Client ID Metadata Document, so the name, redirects and client type can’t be edited here.",
	"copy_it_now_you_wont_see_it_again": "Copy it now. You won’t be able to see it again after you leave this page.",
	"copy_label": "Copy {label}",
	"oidc_client_logo_spec": "SVG, PNG or WebP. Square works best.",
	"name_dark_logo": "{name} dark logo",
	"using_light_logo": "Using light logo",
	"set_by_the_metadata_document": "Set by the metadata document.",
	"count_of_max": "{count} of {max}",
	"opened_when_someone_launches_name_from_my_apps": "Opened from My apps.",
	"no_callback_urls": "No callback URLs",
	"no_logout_callback_urls": "No logout callback URLs",
	"this_url_is_already_in_the_list": "This URL is already in the list",
	"show_all_count": "Show all ({count})",
	"show_less": "Show less",
	"added_url": "Added {url}",
	"oidc_client_advanced_summary": "Sign-out URLs, consent, PAR and token lifetimes",
	"sign_out_section": "Sign-out",
	"backchannel_logout_url_helper": "Notified when someone loses access, for example when they’re disabled.",
	"pkce_row_description": "Protects the sign-in against intercepted authorization codes.",
	"public_clients_always_use_pkce": "Public clients always use PKCE.",
	"name_supports_pkce": "{name} supports PKCE. Turning it on is recommended.",
	"requires_reauthentication_row_description": "People confirm with their passkey on every sign-in.",
	"skip_consent_row_description": "Don’t ask people to approve {name}. Only for apps you trust.",
	"requires_par_row_description": "The app must register its sign-in parameters with the PAR endpoint first.",
	"token_lifetimes_section_description": "Shorter lifetimes are safer but make people sign in again more often.",
	"refresh_token_lifetime_helper": "Restarts whenever {name} refreshes its tokens.",
	"anyone_with_an_appname_account_can_sign_in": "Anyone with a {appName} account can sign in.",
	"only_members_of_the_groups_below_can_sign_in": "Only members of the groups below can sign in.",
	"allowed_groups": "Allowed groups",
	"apis_name_may_request_tokens_for": "APIs {name} may request tokens for",
	"apis_name_may_request_tokens_for_description": "APIs {name} may request tokens for, on behalf of people or as itself.",
	"add_api_ellipsis": "Add API…",
	"count_of_total": "{count} of {total}",
	"no_access_lowercase": "no access",
	"on_behalf_of_people_summary": "On behalf of people: {access}",
	"as_itself_summary": "As itself: {access}",
	"edit_access_ellipsis": "Edit access…",
	"remove_access_ellipsis": "Remove access…",
	"name_cant_request_tokens_for_any_api": "{name} can’t request tokens for any API.",
	"client_secrets_section_description": "Several secrets can be active, so you can rotate one without downtime.",
	"generate_secret_ellipsis": "Generate secret…",
	"new_client_secret": "New client secret",
	"public_clients_dont_have_client_secrets": "Public clients don’t have client secrets.",
	"created_date": "Created {date}",
	"expires_date": "Expires {date}",
	"never_expires": "Never expires",
	"delete_secret_prefix": "Delete secret {prefix}…",
	"name_has_no_client_secrets_yet": "{name} has no client secrets yet.",
	"generate_a_client_secret": "Generate a client secret",
	"expires_after": "Expires after",
	"generate_secret": "Generate secret",
	"new_client_secret_generated": "New client secret generated",
	"delete_client_secret_question": "Delete this client secret?",
	"delete_secret": "Delete secret",
	"delete_client_secret_consequence": "Apps using it can no longer authenticate.",
	"client_secret_deleted": "Client secret deleted",
	"federated_credentials_summary": "Federated credentials from another issuer, like a CI system",
	"federated_credentials_section_description": "Let {name} authenticate with tokens from another issuer, like a CI system, instead of a secret.",
	"add_credential": "Add credential",
	"managed_by_the_clients_metadata_document": "Managed by the client’s metadata document.",
	"credential_number": "Credential {number}",
	"remove_credential_number": "Remove credential {number}",
	"replay_protection_row_description": "A token can be used only once. Turn this off if your provider reuses tokens.",
	"no_federated_credentials": "No federated credentials.",
	"scim_section_description": "Sync {appName} users and groups to {name} automatically.",
	"never_synced": "Never synced",
	"synced_date": "Synced {date}",
	"scim_endpoint_helper": "The SCIM 2.0 base URL {name} gives you.",
	"enable_provisioning": "Enable provisioning",
	"disable_provisioning_ellipsis": "Disable provisioning…",
	"disable_provisioning_question": "Disable provisioning?",
	"disable_provisioning": "Disable provisioning",
	"disable_provisioning_consequence": "{appName} stops creating, updating and removing people and groups in {name}.",
	"provisioning_enabled": "Provisioning enabled",
	"provisioning_disabled": "Provisioning disabled",
	"name_synced": "{name} synced",
	"person": "Person",
	"always_included": "Always included",
	"only_openid": "Only openid",
	"view": "View",
	"couldnt_load_the_preview": "Couldn’t load the preview",
	"audit_log_page_description": "Sign-ins and account changes for everyone at {appName}. Events older than 90 days are deleted.",
	"app": "App",
	"network": "Network",
	"external_networks": "External networks",
	"internal_networks": "Internal networks",
	"add_count_users_to_groups": "Add {count} users to groups",
	"add_name_to_groups": "Add {name} to groups",
	"add_to_count_groups": "Add to {count} groups",
	"add_to_one_group": "Add to 1 group",
	"add_to_groups_ellipsis": "Add to groups…",
	"admins": "Admins",
	"all": "All",
	"clear_selection": "Clear selection",
	"copy_signup_link": "Copy signup link",
	"copy_user_id": "Copy user ID",
	"count_of_users": "{count} of {total} users",
	"count_selected": "{count} selected",
	"count_users_deleted": "{count} users deleted",
	"count_users_disabled": "{count} users disabled",
	"count_users_enabled": "{count} users enabled",
	"create_code": "Create code",
	"delete_count_users": "Delete {count} users",
	"delete_count_users_question": "Delete {count} users?",
	"delete_last_user_passkey_consequence": "{name} won’t be able to sign in with a passkey until they add a new one. Give them a login code so they can.",
	"delete_user_passkey_consequence": "{name} can no longer sign in with it.",
	"delete_last_own_passkey_consequence": "You won’t be able to sign in with a passkey until you add a new one.",
	"delete_own_passkey_consequence": "You can still sign in with your other passkeys.",
	"delete_signup_token_consequence": "The link {token} stops working. People who already signed up with it keep their accounts.",
	"delete_signup_token_name": "Delete signup token {token}",
	"delete_this_signup_token": "Delete this signup token?",
	"delete_token": "Delete token",
	"delete_user_ellipsis": "Delete user…",
	"delete_users_consequence": "{names} can no longer sign in, and their passkeys and group memberships are deleted.",
	"disable_count_users": "Disable {count} users",
	"disable_count_users_question": "Disable {count} users?",
	"disable_ellipsis": "Disable…",
	"disable_name_action": "Disable {name}",
	"disable_name_question": "Disable {name}?",
	"disable_user_consequence": "{name} won’t be able to sign in until you enable the account again.",
	"disable_user_ellipsis": "Disable user…",
	"disable_users_consequence": "{names} won’t be able to sign in until you enable them again.",
	"display_name_follows_names": "Filled in from the first and last name until you change it.",
	"done": "Done",
	"email_address_is_verified": "Email address is verified",
	"email_used_for_login_codes": "Used for login codes and notifications.",
	"enable_user": "Enable user",
	"expired_on_date": "Expired {date}",
	"expires_in_duration_at_time": "Expires in {duration} · {time}",
	"expires_on_date": "Expires {date}",
	"group_memberships_come_from_ldap": "Group memberships come from LDAP.",
	"group_memberships_updated": "Group memberships updated",
	"login_code_description": "{name} can use it once to sign in without a passkey.",
	"login_code_ellipsis": "Login code…",
	"login_code_for_name": "Login code for {name}",
	"login_code_sent_to_email": "Login code sent to {email}",
	"login_code_share_note": "Share it only with {name}. It works once.",
	"members_count": "{count} members",
	"members_count_one": "1 member",
	"name_added": "{name} added",
	"name_disabled": "{name} disabled",
	"name_enabled": "{name} enabled",
	"name_removed_from_group": "{name} removed from {group}",
	"names_and_last": "{names} and {last}",
	"names_and_others": "{names} and {count} others",
	"new_signup_token": "New signup token",
	"no_custom_claims": "No custom claims",
	"no_email_address": "No email address",
	"no_matches_for_query": "No matches for “{query}”",
	"no_matches_for_filters": "No matches for these filters",
	"no_events_match_filters": "No events match these filters",
	"no_signup_tokens": "No signup tokens",
	"not_in_any_group": "Not in any group",
	"nothing_left_to_add": "Everything is already added.",
	"only_you_so_far": "Only you so far",
	"only_you_so_far_description": "Add people, or create a signup token so they can create their own account.",
	"remove_name_from_group": "Remove {name} from {group}",
	"search_groups": "Search groups…",
	"search_users": "Search users…",
	"send_by_email": "Send by email",
	"set_by_the_ldap_admin_group": "Set by the LDAP admin group.",
	"signup_link": "Signup link",
	"signup_link_consequence": "Anyone with this link can create an account until it expires or is used up.",
	"signup_token_created": "Signup token created",
	"signup_token_deleted": "Signup token deleted",
	"signup_token_groups_description": "Added to everyone who signs up with this token.",
	"signup_tokens": "Signup tokens",
	"signup_tokens_description": "Invite links that let people create their own account.",
	"undo": "Undo",
	"unverified": "Unverified",
	"up_to_count_claims": "Up to {count} claims.",
	"usage_of_limit_used": "{used} of {limit} used",
	"user_custom_claims_description": "Added to the ID token with the profile scope. They override claims from groups.",
	"user_has_no_passkeys_yet_give_login_code": "{name} has no passkeys yet. Give them a login code so they can add one.",
	"user_id": "User ID",
	"user_id_copied": "User ID copied",
	"user_passkeys_section_description": "Admins can delete passkeys but can’t add them.",
	"user_scopes": "User scopes",
	"user_sections": "User sections",
	"username_rule": "1 to 30 characters: letters, numbers, dots, dashes, underscores and @. Start and end with a letter or number.",
	"users_count": "{count} users",
	"users_count_one": "1 user",
	"users_page_description": "People who can sign in with {appName}.",
	"you": "You",
	"auth_you_are_signed_out": "You’re signed out",
	"auth_signed_out_description": "Some apps may keep you signed in until you sign out of them too.",
	"auth_sign_in_again": "Sign in again",
	"auth_sign_out_question": "Sign out of {appName} as {name}?",
	"auth_sign_out_failed": "We couldn’t sign you out. Try again.",
	"auth_sign_out_requested": "An app asked {appName} to sign you out on this device.",
	"auth_stay_signed_in": "Stay signed in",
	"auth_signups_invite_only": "Sign-ups are invite-only",
	"auth_signups_invite_only_description": "You need an invite link to create an account. Ask your administrator for one.",
	"auth_signups_closed": "Sign-ups are closed",
	"auth_signups_closed_description": "{appName} isn’t accepting new accounts. If you need one, ask your administrator.",
	"auth_go_to_sign_in": "Go to sign in",
	"auth_create_your_account": "Create your {appName} account",
	"auth_signup_description": "You’ll add a passkey next.",
	"auth_create_account": "Create account",
	"auth_invited_to": "You’ve been invited to",
	"auth_set_up_pocket_id": "Set up Pocket ID",
	"auth_setup_description": "This account becomes the administrator.",
	"auth_create_admin_account": "Create admin account",
	"auth_skip_passkey_title": "Skip adding a passkey?",
	"auth_skip_passkey_description": "Without a passkey, you’ll need an admin’s help to sign in once this session ends.",
	"auth_add_a_passkey": "Add a passkey",
	"auth_passkey_added": "Passkey added",
	"auth_add_passkey_description": "You’ll use it to sign in to {appName}. Your device will ask for Face ID, Touch ID, Windows Hello or your security key.",
	"welcome_question": "Which features do you want to enable?",
	"welcome_description": "Advanced features can overwhelm new users. Enable only what you need for now.",
	"welcome_change_later": "You can change this any time later under Configuration.",
	"auth_taking_you_to": "Taking you to {name}…",
	"auth_continue_to": "Continue to {name}",
	"auth_choose_an_account": "Choose an account",
	"auth_confirm_its_you": "Confirm it’s you",
	"auth_to_continue_to": "to continue to {name}",
	"auth_confirm_with_passkey": "{name} asks you to confirm with your passkey before continuing.",
	"auth_wants_to_sign_you_in": "wants to sign you in with your {appName} account",
	"auth_continue_with_passkey": "Continue with passkey",
	"auth_remove_access_anytime": "You can remove access anytime in My apps.",
	"auth_not_registered_by_admin": "Not registered by your administrator",
	"auth_not_registered_by_admin_description": "It describes itself at {host}. Continue only if you trust that site.",
	"auth_registered_by_admin": "Registered by your administrator",
	"auth_could_not_sign_you_in": "We couldn’t sign you in",
	"auth_missing_interaction": "This sign-in link is incomplete. Start again from the app.",
	"auth_connect_a_device": "Connect a device",
	"auth_authorized": "Authorized",
	"auth_device_authorized_description": "You can close this tab and go back to {name}.",
	"auth_other_device_signed_in": "{device} is now signed in as {name}. You can close this tab.",
	"auth_request_denied": "Request denied",
	"auth_other_device_denied": "{device} wasn’t signed in.",
	"auth_device_wants_to_sign_in": "{device} wants to sign in as you",
	"auth_does_this_code_match": "Does this code match the one on that device?",
	"auth_location": "Location",
	"auth_ip_address": "IP address",
	"auth_approving_asks_for_passkey": "Approving asks for your passkey.",
	"auth_wants_to_use_account_on_device": "wants to use your {appName} account on another device",
	"auth_device_code_expired_description": "Start again on the device to get a new code.",
	"auth_enter_device_code": "Enter the code shown on your TV or other device.",
	"auth_device_code": "Device code",
	"auth_code_has_expired": "This code has expired.",
	"auth_enter_a_new_code": "Enter a new code",
	"auth_continue": "Continue",
	"access_for_name": "Access for {name}",
	"add_client_ellipsis": "Add client…",
	"add_client_to_name": "Add a client to {name}",
	"add_count_members": "Add {count} members",
	"add_one_member": "Add 1 member",
	"add_members_ellipsis": "Add members…",
	"add_members_to_group": "Add members to {group}",
	"allow_clients_ellipsis": "Allow clients…",
	"allow_clients_for_group": "Allow clients for {group}",
	"allow_count_clients": "Allow {count} clients",
	"allow_one_client": "Allow 1 client",
	"allowed": "Allowed",
	"allowed_lowercase": "allowed",
	"allowed_clients": "Allowed clients",
	"allowed_clients_section_description": "Apps limited to selected groups that {group} can sign in to.",
	"allowed_clients_updated": "Allowed clients updated",
	"api": "API",
	"api_access_updated": "API access updated",
	"api_client_access_summary": "On behalf of people: {people} · As itself: {itself}",
	"api_has_no_permissions_yet": "{name} has no permissions yet. Add them on the Permissions tab.",
	"api_id": "API ID",
	"api_id_copied": "API ID copied",
	"api_key_description_placeholder": "What uses this key",
	"api_key_expires_on_helper": "The key stops working at the start of this day.",
	"api_key_renew_expires_on_helper": "The new key stops working at the start of this day.",
	"api_key_name_helper": "So you can tell keys apart. 3 to 50 characters.",
	"api_keys_page_description": "Keys for scripts and tools, like Terraform, that use the Pocket ID API.",
	"api_name_helper": "Shown on the consent screen next to its permissions.",
	"api_name_placeholder": "Bookings API",
	"api_permissions_helper": "Removing a permission also removes it from every client.",
	"api_resource_uri": "Resource URI",
	"api_sections": "API sections",
	"apis_page_description": "Your own services that clients can request access tokens for.",
	"as_itself": "As itself",
	"as_itself_description": "The client may request tokens for this API without a person, through the client credentials grant.",
	"choose_what_the_client_may_ask_for": "Choose what the client may ask for.",
	"clients": "Clients",
	"clients_open_to_everyone": "{clients} are open to all users, so they aren’t listed.",
	"copy_api_id": "Copy API ID",
	"copy_api_key": "Copy API key",
	"copy_group_id": "Copy group ID",
	"copy_name": "Copy {name}",
	"copy_resource_uri": "Copy resource URI",
	"copy_key_now_before_closing": "Copy it now. You won’t be able to see it again after you close this.",
	"delete_api_consequence_cimd": "Metadata document clients lose the permissions they were granted. No other clients have access to it.",
	"delete_api_consequence_clients": "{clients} lose their access to its permissions right away. Tokens already issued for it stay valid until they expire.",
	"delete_api_consequence_no_clients": "No clients have access to it.",
	"delete_api_consequence_one_client": "{client} loses its access to its permissions right away. Tokens already issued for it stay valid until they expire.",
	"delete_api_ellipsis": "Delete API…",
	"delete_empty_group_consequence": "No one is in this group, so no one loses access.",
	"delete_group_consequence": "Its {count} members lose the access and claims this group gives them right away. Their accounts stay.",
	"delete_group_ellipsis": "Delete group…",
	"every_client_already_has_access": "Every client already has access to {name}.",
	"expires_in_days": "Expires in {count} days",
	"expires_tomorrow": "Expires tomorrow",
	"expires_on": "Expires on",
	"group": "Group",
	"group_custom_claims_description": "Added to members’ ID tokens with the profile scope. Claims set on a user override them.",
	"group_friendly_name_placeholder": "Photographers",
	"group_id": "Group ID",
	"group_id_copied": "Group ID copied",
	"group_members_come_from_ldap": "Members come from LDAP.",
	"group_name_change_helper": "Changing it can break apps that check for this group.",
	"group_name_helper": "The value apps receive in the groups claim.",
	"group_name_placeholder": "photographers",
	"group_removed_from_client": "{group} removed from {client}",
	"group_sections": "Group sections",
	"groups_page_description": "Groups decide who can sign in to which app and add claims to tokens.",
	"identifiers": "Identifiers",
	"loading": "Loading…",
	"members": "Members",
	"members_added": "Members added",
	"metadata_document_clients": "Metadata document clients",
	"metadata_document_clients_description": "Clients that identify themselves with a metadata document instead of being registered here.",
	"metadata_documents": "Metadata documents",
	"name_and_identifiers": "Name and identifiers",
	"name_revoked": "{name} revoked",
	"names": "Names",
	"no_api_keys_yet_description": "Create a key to manage {appName} from scripts or Terraform through the Pocket ID API.",
	"no_apis_yet_description": "Register an API when a client needs access tokens for one of your own services.",
	"no_clients_can_request_tokens_for_this_api": "No clients can request tokens for this API yet.",
	"no_clients_limited_to_this_group": "No apps are limited to this group.",
	"no_members_yet": "No members yet",
	"not_allowed": "Not allowed",
	"not_available_public_client": "not available (public client)",
	"on_behalf_of_people": "On behalf of people",
	"on_behalf_of_people_description": "The client may request tokens for this API for the signed-in person.",
	"permission": "Permission",
	"permissions": "Permissions",
	"public_clients_cant_act_as_themselves": "Public clients can’t use the client credentials grant, so they can’t act as themselves.",
	"remove_access": "Remove access",
	"remove_client_access_consequence": "{client} can no longer request tokens for this API. Its access to other APIs stays.",
	"remove_client_access_question": "Remove {client}’s access to {api}?",
	"remove_group": "Remove group",
	"remove_group_from_client": "Remove {group} from {client}",
	"remove_last_group_from_client_consequence": "No one will be able to sign in to {client} until you allow another group.",
	"remove_last_group_from_client_question": "Remove the last group from {client}?",
	"remove_permission_name": "Remove permission {name}",
	"renew_api_key_consequence": "Renewing creates a new key. Update every integration that uses the old one.",
	"renew_ellipsis": "Renew…",
	"renew_key": "Renew key",
	"renew_name_question": "Renew {name}?",
	"resource_no_whitespace_or_fragment": "The resource can’t contain spaces or a # fragment",
	"resource_uri_copied": "Resource URI copied",
	"resource_uris_cant_be_changed": "Resource URIs can’t be changed after the API is created.",
	"revoke_api_key_consequence": "Scripts and tools using this API key stop working immediately.",
	"revoke_ellipsis": "Revoke…",
	"revoke_name_action": "Revoke {name}",
	"revoke_name_question": "Revoke {name}?",
	"save_access": "Save access",
	"search_clients": "Search clients…",
	"search_members": "Search members…",
	"search_people": "Search people…",
	"add_to_groups": "Add to groups",
	"add_members": "Add members",
	"allow_clients": "Allow clients",
	"client_open_to_everyone": "{client} is open to all users, so it isn’t listed.",
	"count_more": "{count} more",
	"expires_today": "Expires today",
	"register_your_first_api": "Register your first API",
	"create_your_first_api_key": "Create your first API key",
	"add_your_first_group": "Add your first group",
	"add_your_first_oidc_client": "Add your first OIDC client",
	"validation_required": "Required",
	"validation_min_length": "Enter at least {count} characters",
	"validation_max_length": "Enter at most {count} characters",
	"validation_min_number": "Enter {minimum} or more",
	"validation_max_number": "Enter {maximum} or less",
	"validation_min_items": "Choose at least {count}",
	"validation_max_items": "Choose at most {count}",
	"validation_email": "Enter a valid email address",
	"validation_url": "Enter a valid URL",
	"validation_number": "Enter a number"
}