masks-server 0.7.0

data/config/locales/en/account.yml

@@ -0,0 +1,278 @@
+en:
+  account:
+    index:
+      none_yet: "Nothing yet."
+      sign_out: "Sign out"
+      title: "Your account"
+      manage: "Manage this server"
+      lede: "This is where you change how you sign in, see the devices you are signed in on, and check what has been happening to your account."
+
+      signing_in:
+        heading: "Signing in"
+
+      email:
+        heading: "Email address"
+        state:
+          none: "None"
+          unconfirmed: "Not confirmed"
+        none_set: "This account has no email address. Nothing can be sent to it, and you cannot reset your own password."
+        body: "Password resets and confirmations go to %{email}."
+        send_link: "Send confirmation link"
+
+      phone:
+        heading: "Phone number"
+        state:
+          none: "None"
+          unconfirmed: "Not confirmed"
+        none: "This account has no phone number."
+        body: "SMS codes go to %{phone}."
+        remove: "Remove"
+        confirm_remove: "Remove this phone number?"
+
+      addresses:
+        email: "New email address"
+        phone: "New phone number"
+        phone_hint: "Include the country code, as in +1 555 123 4567."
+        send: "Send a code"
+        again: "Sign in again to change this"
+        sent: "Enter the code sent to %{to}."
+        code: "Code"
+        confirm: "Confirm"
+        directed: "Your organization's directory manages this address."
+        undeliverable:
+          email: "This server cannot send email yet, so the address cannot be changed here."
+          phone: "This server cannot send SMS yet, so the number cannot be changed here."
+
+      password:
+        heading: "Password"
+        state: "Change it"
+        state_none: "Not set"
+        none: "This account has no password. It signs in with a passkey or another account instead. Setting one signs you out everywhere else."
+        set: "Set a password"
+        set_again: "Sign in again to set a password"
+        current: "Your current password"
+        new: "Your new password"
+        hint: "At least %{minimum} characters. Changing it signs you out everywhere else."
+        submit: "Change password"
+
+      passkeys:
+        heading: "Passkeys"
+        state:
+          none: "Not set up"
+          set:
+            one: "1 set up"
+            other: "%{count} set up"
+        explained: "Instead of typing a password, your device checks it is you the way it already unlocks. It counts as both factors at once, so there is no code to wait for."
+        used: "last used %{age} ago"
+        never_used: "never used"
+        remove: "Remove"
+        confirm_remove: "Remove this?"
+        compromised: "The FIDO Alliance reports a problem with this model (%{report}). Replace it."
+        name: "What is this device called?"
+        name_placeholder: "My laptop"
+        save_name: "Save name"
+        add: "Set this up"
+
+      authenticator:
+        heading: "Authenticator app"
+        state:
+          "on": "On"
+          "off": "Not set up"
+        explained: "After your password, a sign-in can be confirmed with a six-digit code from an app on your phone. The code changes every 30 seconds and works without a signal."
+        scan: "Scan this with your authenticator app, or type the key into it."
+        key: "Key"
+        code: "The code the app shows"
+        submit: "Turn on"
+        again: "Sign in again before you set this up. It has been a while since you did."
+        submit_again: "Sign in again"
+        remove: "Remove"
+        confirm_remove: "Stop asking for codes from this app?"
+        enabled: "Sign-ins ask for a code from your authenticator app."
+
+      backup_codes:
+        heading: "Backup codes"
+        state:
+          one: "1 left"
+          other: "%{count} left"
+        explained: "Each code signs in once, when your phone or passkey is not to hand. Keep them somewhere safe, away from this device."
+        fresh: "Write these down now. They are not shown again."
+        make: "Make new codes"
+        confirm_make: "The codes you have now will stop working."
+        make_again: "Sign in again to make new codes"
+
+      codes:
+        state:
+          "on": "On"
+          "off": "Off"
+        sent_to: "Codes go to %{to}."
+        turn_on: "Turn on"
+        turn_off: "Turn off"
+        confirm_turn_off: "Stop confirming sign-ins this way?"
+        email:
+          heading: "Email codes"
+          explained: "After your password, a sign-in can be confirmed with a code sent to your email address. A password reset by email turns it off, because the reset link goes to the same inbox."
+          unconfirmed: "Confirm your email address first."
+          undeliverable: "This server cannot send email yet."
+        sms:
+          heading: "SMS codes"
+          explained: "After your password, a sign-in can be confirmed with a code sent to your phone by SMS. An authenticator app or a passkey is harder to steal."
+          unconfirmed: "Add and confirm a phone number first."
+          undeliverable: "This server cannot send SMS yet."
+
+      approve:
+        heading: "Approve a sign-in"
+        label: "A code from another device"
+        state:
+          ready: "Ready"
+          waiting: "Waiting for you"
+        explained: "This device is trusted, so it can confirm a sign-in happening somewhere else. Enter the code the other screen shows. Only enter a code you are looking at yourself."
+        code: "Code on the other screen"
+        submit: "Continue"
+        confirm: "This device is asking to sign in to your account. Approve it only if it is yours."
+        asked: "asked %{age} ago"
+        approve: "Approve"
+        deny: "Deny"
+
+      devices:
+        heading: "Devices"
+        lede: "Every phone, tablet and computer that has signed in to this account."
+        none: "Nothing has signed in yet."
+        state:
+          here: "This device"
+          signed_in: "Signed in"
+          signed_out: "Signed out"
+          blocked: "Blocked"
+        seen: "Last seen %{age} ago."
+        from: "Last used from %{address}."
+        skips_code: "This device does not have to enter a code."
+        sign_out: "Sign this device out"
+        save_name: "Save name"
+
+      organizations:
+        heading: "Organizations"
+        invited_by_manager: "Someone a manager invited"
+        role: "You are %{role}"
+        lede_owner: "As an owner, you decide who belongs here and what role each person holds. Apps that ask for your organization see the role."
+        lede_member: "Apps that ask for your organization see that you belong here, and your role."
+        members: "Members"
+        people:
+          one: "1 member"
+          other: "%{count} members"
+        owners:
+          one: "1 owner"
+          other: "%{count} owners"
+        waiting_count:
+          one: "1 invitation open"
+          other: "%{count} invitations open"
+        you: "you"
+        invited: "invited"
+        expired: "expired"
+        waiting: "Waiting for you"
+        asked: "%{by} added you to %{organization} as %{role}. Nothing changes until you accept."
+        invited_ago: "Invited %{age} ago"
+        expired_ago: "Invitation expired %{age} ago"
+        expires_in: "expires in %{age}"
+        by: "by %{by}"
+        joined_ago: "Joined %{age} ago"
+        sent_to: "sent to %{address}"
+        sent_elsewhere: "This invitation went to %{address}. Sign in with that address to accept it, or ask an owner to invite the address on this account."
+        confirm_first_html: "Confirm %{address} under <a href=\"#email\">Email address</a> before you accept."
+        someone: "An owner"
+        accept: "Join %{organization}"
+        decline: "Decline"
+        confirm_decline: "Decline the invitation to %{organization}? An owner has to invite you again."
+        set_role: "Set role"
+        role_of: "Role of %{person}"
+        remove: "Remove"
+        withdraw: "Withdraw"
+        resend: "Send again"
+        confirm_remove: "Remove %{identifier} from %{organization}? Anything they signed in to as a member stops working."
+        confirm_withdraw: "Withdraw the invitation to %{identifier}?"
+        add_email: "Add someone by email"
+        add_placeholder: "name@example.com"
+        add_role: "Role"
+        add: "Add"
+        add_hint: "They join once they accept. Someone without an account here gets an invitation first."
+        leave: "Leave %{organization}"
+        confirm_leave: "Leave %{organization}? Anything you signed in to as a member stops working, and an owner has to add you again."
+        last_owner: "You are its only owner, so you cannot leave or change your role until you make someone else an owner."
+
+      launcher:
+        heading: "Your apps"
+
+      apps:
+        heading: "Apps and accounts"
+        state:
+          none: "None"
+
+      applications:
+        remembered: "%{label}, without asking until %{date}"
+        heading: "Apps you have let in"
+        none_yet: "Nothing has asked yet. An app appears here once you sign in to it, with what you agreed it may see."
+        revoke: "Revoke access"
+        more:
+          one: "and one more"
+          other: "and %{count} more"
+        confirm_revoke: "Revoke %{client}? Anything it is holding stops working, and it has to ask again the next time you sign in."
+
+      connections:
+        heading: "Connected accounts"
+        lede: "An account somewhere else — a work account, say — that is linked to this one. It can be a way of signing in here."
+        signs_you_in: "signs you in"
+        link: "Connect %{provider}"
+        disconnect: "Disconnect"
+        confirm_disconnect: "Disconnect %{provider}? If you sign in with it, you will need another way in. Every application using it stops."
+        delegated: "%{client} can use it while you are away"
+        stop: "Stop"
+        confirm_stop: "Stop %{client} using your %{provider} account? It has to ask you again."
+
+      info:
+        heading: "Details"
+
+      profile:
+        heading: "Name"
+        name: "Your name"
+        nickname: "Nickname"
+        nickname_hint: "Letters, numbers, dots, dashes, and underscores. You can sign in with it."
+        submit: "Save"
+        directed: "Your organization's directory manages your name."
+
+      picture:
+        change: "Change your photo"
+        remove: "Remove photo"
+        confirm_remove: "Remove your photo?"
+
+      notifications:
+        heading: "Emails we send you"
+        state:
+          zero: "All of them"
+          one: "One turned off"
+          other: "%{count} turned off"
+        lede: "Everything here is on until you turn it off. These arrive as they happen, and none of them can be replied to."
+        silent: "Nothing is being sent, because these only go to a confirmed email address."
+        submit: "Save"
+
+      export:
+        heading: "Download your account"
+        state: "JSON"
+        lede: "A file with your profile, how you sign in, your organizations, apps, connected accounts, and devices, and the activity masks has kept. It holds no passwords, codes, or keys."
+        again: "You signed in a while ago, so you will be asked to sign in again first."
+        submit: "Download"
+        submit_again: "Sign in again"
+
+      delete:
+        heading: "Delete your account"
+        state: "Permanent"
+        lede: "Deleting your account signs you out of every app and device, and removes your passkeys, connected accounts, and photo. It cannot be undone."
+        again: "You signed in a while ago, so you will be asked to sign in again first."
+        confirm_html: "Type <b>%{identifier}</b> to confirm"
+        submit: "Delete my account"
+        submit_again: "Sign in again"
+
+      activity:
+        heading: "Activity"
+        entry: "Recent activity"
+        lede: "What has happened to your account lately. Anything you do not recognise is worth changing your password over."
+        ago: "%{age} ago"
+        check_this: "worth a look"
+

data/config/locales/en/actors.yml

@@ -0,0 +1,8 @@
+en:
+  activerecord:
+    errors:
+      models:
+        actor:
+          attributes:
+            base:
+              unnamed: "An account needs a nickname or an email address."

data/config/locales/en/application.yml

@@ -0,0 +1,6 @@
+en:
+  application:
+    person:
+      manager: "Manager"
+      unconfirmed: "unconfirmed"
+      sign_out: "Sign out"

data/config/locales/en/authorize.yml

@@ -0,0 +1,7 @@
+en:
+  authorize:
+    error:
+      page_title: "This request cannot be completed"
+      stopped: "Stopped"
+      heading: "The app asked for something this server will not do."
+      contact: "Nothing was shared. The app has to fix this."

data/config/locales/en/device_verifications.yml

@@ -0,0 +1,15 @@
+en:
+  device_verifications:
+    show:
+      page_title: "Sign in a device"
+      title: "Sign in a device"
+      lede: "Type the code the device is showing you."
+      code: "Code"
+      unknown: "That code is not one this server is waiting on. It may have expired, or already been answered — ask the device for a new one."
+      declined: "Nothing was signed in. The device is still waiting, and will give up on its own."
+
+    approved:
+      page_title: "The device is signed in"
+      signed_in: "Signed in"
+      title: "%{name} is signed in"
+      lede: "You can put this away and go back to %{name}."

data/config/locales/en/events.yml

@@ -0,0 +1,189 @@
+en:
+  events:
+    actions:
+      session:
+        started: "Signed in"
+        ended: "Signed out"
+        revoked: "Session revoked"
+        expired: "Session timed out"
+      logout:
+        undelivered: "Sign-out not delivered to an app"
+      login:
+        refused: "Sign-in refused"
+        throttled: "Sign-ins throttled"
+      account:
+        created: "Signed up"
+        exported: "Account data downloaded"
+      invitation:
+        sent: "Invitation sent"
+        accepted: "Invitation accepted"
+      password:
+        changed: "Password changed"
+        reset_requested: "Password reset requested"
+        reset_completed: "Password reset"
+      email:
+        verification_sent: "Email confirmation sent"
+        verified: "Email confirmed"
+        changed: "Email address changed"
+      phone:
+        verification_sent: "Phone confirmation sent"
+        verified: "Phone confirmed"
+        changed: "Phone number changed"
+        removed: "Phone number removed"
+      approval:
+        requested: "Approval requested"
+      passkey:
+        added: "Passkey added"
+        renamed: "Passkey renamed"
+        removed: "Passkey removed"
+      backup_codes:
+        generated: "Backup codes generated"
+      backup_code:
+        spent: "Backup code used"
+      recovery:
+        requested: "Asked for help signing in"
+        dismissed: "Request for help dismissed"
+      second_factors:
+        reset: "Second factors reset"
+      group:
+        created: "Group created"
+        deleted: "Group deleted"
+        member_added: "Added to a group"
+        member_removed: "Removed from a group"
+      authenticator:
+        enabled: "Authenticator app added"
+        disabled: "Authenticator app removed"
+      email_codes:
+        enabled: "Email codes turned on"
+        disabled: "Email codes turned off"
+      text_codes:
+        enabled: "SMS codes turned on"
+        disabled: "SMS codes turned off"
+      device_code:
+        issued: "Device sign-in requested"
+        approved: "Device signed in"
+        refused: "Device sign-in refused"
+      sign_in:
+        approved: "Sign-in approved from a trusted device"
+        denied: "Sign-in denied from a trusted device"
+        risky: "Unusual sign-in"
+      device:
+        trusted: "Device trusted"
+        named: "Device renamed"
+        forgotten: "Device signed out"
+        blocked: "Device blocked"
+        unblocked: "Device unblocked"
+      avatar:
+        uploaded: "Photo uploaded"
+        removed: "Photo removed"
+      consent:
+        granted: "App allowed"
+        revoked: "App access revoked"
+      connection:
+        linked: "Account connected"
+        unlinked: "Account disconnected"
+        signed_in: "Signed in with a connected account"
+        refused: "Connected account sign-in refused"
+      delegation:
+        granted: "Delegation granted"
+        released: "Delegated token released"
+        refused: "Delegated token refused"
+        revoked: "Delegation revoked"
+      exchange:
+        granted: "Token exchanged"
+        refused: "Token exchange refused"
+      actor:
+        approved: "Account approved"
+        created: "Person added"
+        provisioned: "Person added by a provider"
+        updated: "Profile changed"
+        deleted: "Person deleted"
+        scopes_changed: "Scopes changed"
+        signed_out: "Signed out everywhere"
+        suspended: "Person suspended"
+        restored: "Person restored"
+        idle_warned: "Idle account warned"
+      client:
+        created: "Client added"
+        registered: "Client registered"
+        approved: "Client approved"
+        updated: "Client changed"
+        archived: "Client archived"
+        restored: "Client restored"
+        secret_rotated: "Client secret rotated"
+        logo_refused: "Client logo could not be used"
+      token:
+        revoked: "Token revoked"
+      saml:
+        asserted: "Signed into a SAML application"
+      provisioning_token:
+        issued: "Provisioning token issued"
+        revoked: "Provisioning token revoked"
+      ldap_credential:
+        issued: "LDAP credential issued"
+        revoked: "LDAP credential revoked"
+      ldap:
+        bound: "Signed in over LDAP"
+      refresh:
+        reused: "Refresh token replayed"
+      signing_key:
+        staged: "Signing key staged"
+        rotated: "Signing key rotated"
+        activated: "Signing key activated"
+        discarded: "Signing key discarded"
+      namespace:
+        released: "Namespace released"
+      provider:
+        created: "Provider added"
+        updated: "Provider changed"
+        archived: "Provider archived"
+      tenant:
+        updated: "Settings changed"
+      sign_in_policy:
+        created: "Policy added"
+        updated: "Policy changed"
+        archived: "Policy archived"
+      sender:
+        created: "Sending service added"
+        updated: "Sending service changed"
+        archived: "Sending service archived"
+        tested: "Sending service tested"
+      events:
+        exported: "Activity exported"
+      mail_template:
+        updated: "Email template changed"
+      stream:
+        created: "Event stream added"
+        updated: "Event stream changed"
+        archived: "Event stream archived"
+        secret_rotated: "Event stream secret rotated"
+        tested: "Event stream tested"
+        failed: "Event stream gave up"
+      signal_stream:
+        created: "Shared signals stream added"
+        updated: "Shared signals stream changed"
+        deleted: "Shared signals stream removed"
+      signal:
+        undelivered: "Shared signal not delivered"
+        received: "Provider signaled sign-out"
+      organization:
+        created: "Organization added"
+        updated: "Organization changed"
+        archived: "Organization archived"
+        ownerless: "Organization left without an owner"
+      membership:
+        added: "Added to an organization"
+        role_changed: "Organization role changed"
+        removed: "Removed from an organization"
+        accepted: "Joined an organization"
+        role_kept: "Organization role kept against the provider"
+        suspended: "Organization archived while a member"
+        resent: "Organization invitation sent again"
+        expired: "Organization invitation expired"
+      domain:
+        claimed: "Domain claimed"
+        verified: "Domain proven"
+        released: "Domain released"
+      custom_domain:
+        served: "Sign-in served from a custom domain"
+        stopped: "Custom domain no longer served"

data/config/locales/en/flashes.yml

@@ -0,0 +1,164 @@
+en:
+  devices:
+    unknown: "There is no such device on this account."
+    refused_agent: "This browser cannot sign in here."
+    blocked: "This device is blocked."
+    renamed: "Device renamed."
+    shared: "Someone else has signed in on that device too, so it cannot be renamed here."
+    signed_out: "That device has been signed out."
+
+  organization_members:
+    unknown: "You are not a member of that organization."
+    not_a_member: "That person is not a member of this organization."
+    invitee: "Someone invited"
+    owners_only: "Only an owner of %{organization} can change its members."
+    added: "%{identifier} is a member of %{organization}."
+    assigned: "%{identifier} is %{role} now."
+    removed: "%{identifier} is no longer a member of %{organization}."
+    left: "You have left %{organization}. Anything signed in as a member of it stops working."
+    accepted: "You are %{role} in %{organization} now."
+    declined: "You declined %{organization}."
+    confirm_first: "Confirm %{address} before joining %{organization}: send it a confirmation from your email settings on this page, then accept."
+    elsewhere: "%{organization} invited %{address}, which is not the address on this account. Change your email to it and confirm it to join."
+    slow_down: "That is a lot of people at once. Wait a minute and try again."
+    resent: "The invitation to %{identifier} was sent again. It expires in %{age}."
+    expired: "The invitation to %{organization} has expired. Ask an owner to send it again."
+
+  apps:
+    unknown: "There is no such app on this account."
+    revoked: "Access for %{client} has been revoked. Anything it was holding stops working, and it has to ask again."
+
+  connections:
+    unknown: "There is no such connected account."
+    disconnected: "%{provider} has been disconnected."
+    linked: "%{provider} is connected. You can sign in with it from now on."
+    unavailable: "That provider cannot be connected here."
+    stale: "Sign in again before connecting another account. It has been a while since you did."
+    expired: "That attempt to connect an account expired. Try again."
+    failed: "%{provider} did not confirm who you are, so nothing was connected."
+    taken: "That %{provider} account is already connected to somebody else here."
+
+  delegations:
+    unknown: "There is no such application using that account."
+    stopped: "%{client} can no longer use your %{provider} account."
+
+  passkeys:
+    renamed: "Passkey renamed."
+    unnamed: "A passkey name is at most %{limit} characters."
+    expired: "That enrolment expired. Try again."
+    crowded: "You already have as many passkeys as this server keeps."
+    unusable: "That passkey could not be added."
+    unknown: "There is no such passkey on this account."
+    last_way_in: "That passkey is the only way into this account. Add another before removing it."
+    added: "Passkey added."
+    removed: "Passkey removed."
+    again: "Sign in again to change your passkeys. It has been a while since you did."
+
+  authenticator_apps:
+    again: "Sign in again to change your authenticator app. It has been a while since you did."
+    already: "This account already has an authenticator app. Remove it before adding another."
+    unoffered: "This server does not offer authenticator apps."
+    invalid_code: "That code did not match. Check the time on your phone and try the next code."
+    too_many_attempts: "Too many codes were tried. Wait a few minutes and try again."
+    none: "This account has no authenticator app."
+    added: "Authenticator app added. Signing in now asks for its code."
+    removed: "Authenticator app removed."
+
+  addresses:
+    again: "Sign in again to change your email address or phone number. It has been a while since you did."
+    directed: "Your organization's directory manages this account's addresses."
+    too_many_requests: "Too many codes were sent. Wait a few minutes and try again."
+    too_many_attempts: "Too many codes were tried. Wait a few minutes and try again."
+    expired: "That code expired. Send a new one."
+    invalid_code: "That code did not match."
+    email:
+      invalid: "That is not an email address."
+      same: "That is already your email address."
+      undeliverable: "This server cannot send email yet."
+      sent: "A code is on its way to %{to}."
+      taken: "Another account uses that email address."
+      changed: "Email address changed."
+    phone:
+      invalid: "That is not a phone number. Include the country code, as in +1 555 123 4567."
+      same: "That is already your phone number."
+      undeliverable: "This server cannot send SMS yet."
+      sent: "A code is on its way to %{to}."
+      taken: "Another account uses that phone number."
+      changed: "Phone number changed."
+      none: "This account has no phone number."
+      required: "This server requires a phone number, so it cannot be removed. Change it instead."
+      removed: "Phone number removed."
+
+  backup_codes:
+    again: "Sign in again to make new backup codes. It has been a while since you did."
+    unoffered: "This server does not offer backup codes."
+    no_second_factor: "Backup codes stand in for a second factor. Add an authenticator app or a passkey first."
+    generated: "New backup codes made. The old ones no longer work."
+
+  code_factors:
+    again: "Sign in again to change how sign-ins are confirmed. It has been a while since you did."
+    unoffered: "This server does not offer that way of confirming a sign-in."
+    unconfirmed: "Confirm that address before codes are sent to it."
+    undeliverable: "This server cannot send those codes yet."
+    enabled:
+      email: "Sign-ins can now be confirmed with a code sent to your email."
+      sms: "Sign-ins can now be confirmed with a code sent to your phone."
+    disabled:
+      email: "Email codes are off."
+      sms: "SMS codes are off."
+
+  sign_in_approvals:
+    untrusted: "Only a device you trusted when signing in can approve a sign-in."
+    no_match: "No sign-in on this account is waiting for that code."
+    expired: "That sign-in stopped waiting. Ask for a new code on the other screen."
+    too_many_attempts: "Too many attempts. Wait a few minutes and try again."
+    approved: "Sign-in approved."
+    denied: "Sign-in denied."
+
+  passwords:
+    too_many_attempts: "Too many attempts. Wait a few minutes and try again."
+    short_password: "A password here needs at least %{minimum} characters."
+    common_password: "That password is one of the most common. Choose another."
+    breached_password: "That password has appeared in a data breach. Choose another."
+    wrong_current: "That is not your current password."
+    changed: "Your password has been changed, and every other session signed out."
+    set: "Your account has a password now, and every other session signed out."
+    again: "Sign in again to set a password. It has been a while since you did."
+
+  profiles:
+    directed: "Your organization's directory manages your name."
+    invalid: "%{errors}"
+    updated: "Your details have been saved."
+
+  verifications:
+    too_many_requests: "Too many requests. Wait a few minutes."
+    no_address: "There is no address on this account to confirm."
+    already_confirmed: "That address is already confirmed."
+    no_mailer: "This server cannot send email. Ask a manager."
+    sent: "A confirmation link is on its way to %{email}."
+
+  avatars:
+    updated: "Your photo has been updated."
+    removed: "Your photo has been removed."
+
+  handshakes:
+    answered: "that connection request has already been answered"
+    none_in_progress: "no connection request is in progress"
+    not_permitted: "connecting an app is not something this account may do"
+    already_connected: "%{resource} is already connected; a manager must reconnect it"
+    beyond_account: "%{scopes} is more than this account holds"
+    too_soon: "Nothing was registered. Read what it asks for, then approve once the countdown ends."
+
+  account_export:
+    again: "Sign in again to download your account. It has been a while since you did."
+    throttled: "Your account was downloaded several times in the last hour. Try again later."
+  account_deletion:
+    again: "Sign in again to delete your account. It has been a while since you did."
+    mismatch: "Type your account's name exactly as it is shown to delete it."
+    manager: "You are the last person who manages this server, so your account cannot be deleted."
+    provisioned: "Your organization manages this account, so only it can delete the account."
+    deleted: "Your account was deleted."
+
+  forward_auth:
+    unknown: "No app behind a proxy is registered at that address."
+    not_admitted: "Your account may not use %{app}."