@authup/i18n 1.0.0-beta.52 → 1.0.0-beta.53

package/dist/index.mjs

@@ -31,7 +31,15 @@ let TranslatorTranslationClientKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationClientKey["NAME_HINT"] = "nameHint";
 	TranslatorTranslationClientKey["DESCRIPTION_HINT"] = "descriptionHint";
 	TranslatorTranslationClientKey["REDIRECT_URI_HINT"] = "redirectURIHint";
-	TranslatorTranslationClientKey["IS_CONFIDENTIAL"] = "isConfidential";
+	TranslatorTranslationClientKey["AUTH_METHOD"] = "authMethod";
+	TranslatorTranslationClientKey["AUTH_METHOD_NONE"] = "authMethodNone";
+	TranslatorTranslationClientKey["AUTH_METHOD_SECRET"] = "authMethodSecret";
+	TranslatorTranslationClientKey["AUTH_METHOD_TLS"] = "authMethodTls";
+	TranslatorTranslationClientKey["TOKEN_BINDING_METHOD"] = "tokenBindingMethod";
+	TranslatorTranslationClientKey["TOKEN_BINDING_METHOD_NONE"] = "tokenBindingMethodNone";
+	TranslatorTranslationClientKey["TOKEN_BINDING_METHOD_TLS"] = "tokenBindingMethodTls";
+	TranslatorTranslationClientKey["CLIENT_CERTIFICATE_URI"] = "clientCertificateUri";
+	TranslatorTranslationClientKey["CLIENT_CERTIFICATE_URI_HINT"] = "clientCertificateUriHint";
 	TranslatorTranslationClientKey["IS_ACTIVE"] = "isActive";
 	TranslatorTranslationClientKey["HASH_SECRET"] = "hashSecret";
 	TranslatorTranslationClientKey["LOGIN_FAILED"] = "loginFailed";
@@ -96,10 +104,54 @@ let TranslatorTranslationClientKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationClientKey["SIGNED_IN_AS"] = "signedInAs";
 	TranslatorTranslationClientKey["NOT_YOU"] = "notYou";
 	TranslatorTranslationClientKey["AUTHORIZE_ABORTED"] = "authorizeAborted";
+	TranslatorTranslationClientKey["ACCESS_DENIED_TITLE"] = "accessDeniedTitle";
+	TranslatorTranslationClientKey["ACCESS_DENIED_TEXT"] = "accessDeniedText";
+	TranslatorTranslationClientKey["CLIENT_ACCESS_POLICY_HINT"] = "clientAccessPolicyHint";
+	TranslatorTranslationClientKey["CONSENT_STATUS_LOADING"] = "consentStatusLoading";
 	TranslatorTranslationClientKey["LOGOUT_CONFIRM_TITLE"] = "logoutConfirmTitle";
 	TranslatorTranslationClientKey["LOGOUT_CONFIRM_TEXT"] = "logoutConfirmText";
 	TranslatorTranslationClientKey["LOGOUT_DONE"] = "logoutDone";
 	TranslatorTranslationClientKey["SIGN_OUT"] = "signOut";
+	TranslatorTranslationClientKey["MFA_TITLE"] = "mfaTitle";
+	TranslatorTranslationClientKey["MFA_CHALLENGE_INTRO"] = "mfaChallengeIntro";
+	TranslatorTranslationClientKey["MFA_CODE"] = "mfaCode";
+	TranslatorTranslationClientKey["MFA_CODE_HINT"] = "mfaCodeHint";
+	TranslatorTranslationClientKey["MFA_VERIFY"] = "mfaVerify";
+	TranslatorTranslationClientKey["MFA_USE_RECOVERY"] = "mfaUseRecovery";
+	TranslatorTranslationClientKey["MFA_USE_AUTHENTICATOR"] = "mfaUseAuthenticator";
+	TranslatorTranslationClientKey["MFA_RECOVERY_CODE"] = "mfaRecoveryCode";
+	TranslatorTranslationClientKey["MFA_FAILED"] = "mfaFailed";
+	TranslatorTranslationClientKey["MFA_SETUP_REQUIRED"] = "mfaSetupRequired";
+	TranslatorTranslationClientKey["MFA_USE_EMAIL"] = "mfaUseEmail";
+	TranslatorTranslationClientKey["MFA_USE_PASSKEY"] = "mfaUsePasskey";
+	TranslatorTranslationClientKey["MFA_PASSKEY_PROMPT"] = "mfaPasskeyPrompt";
+	TranslatorTranslationClientKey["MFA_SEND_CODE"] = "mfaSendCode";
+	TranslatorTranslationClientKey["MFA_CODE_SENT"] = "mfaCodeSent";
+	TranslatorTranslationClientKey["MFA_ENROLL_TITLE"] = "mfaEnrollTitle";
+	TranslatorTranslationClientKey["MFA_ENROLL_TOTP"] = "mfaEnrollTotp";
+	TranslatorTranslationClientKey["MFA_ENROLL_RECOVERY"] = "mfaEnrollRecovery";
+	TranslatorTranslationClientKey["MFA_ENROLL_EMAIL"] = "mfaEnrollEmail";
+	TranslatorTranslationClientKey["MFA_ENROLL_WEBAUTHN"] = "mfaEnrollWebauthn";
+	TranslatorTranslationClientKey["KEY_USE_SIGNATURE"] = "keyUseSignature";
+	TranslatorTranslationClientKey["KEY_USE_ENCRYPTION"] = "keyUseEncryption";
+	TranslatorTranslationClientKey["KEY_IMPORT_MATERIAL"] = "keyImportMaterial";
+	TranslatorTranslationClientKey["KEY_MATERIAL_OCT"] = "keyMaterialOct";
+	TranslatorTranslationClientKey["KEY_MATERIAL_PRIVATE"] = "keyMaterialPrivate";
+	TranslatorTranslationClientKey["KEY_MATERIAL_PUBLIC"] = "keyMaterialPublic";
+	TranslatorTranslationClientKey["MFA_SCAN_QR"] = "mfaScanQr";
+	TranslatorTranslationClientKey["MFA_MANUAL_KEY"] = "mfaManualKey";
+	TranslatorTranslationClientKey["MFA_CONFIRM_INTRO"] = "mfaConfirmIntro";
+	TranslatorTranslationClientKey["MFA_CONFIRM"] = "mfaConfirm";
+	TranslatorTranslationClientKey["MFA_RECOVERY_INTRO"] = "mfaRecoveryIntro";
+	TranslatorTranslationClientKey["MFA_RECOVERY_SAVE"] = "mfaRecoverySave";
+	TranslatorTranslationClientKey["MFA_DOWNLOAD"] = "mfaDownload";
+	TranslatorTranslationClientKey["MFA_ENROLLED"] = "mfaEnrolled";
+	TranslatorTranslationClientKey["MFA_DEVICE_NAME"] = "mfaDeviceName";
+	TranslatorTranslationClientKey["MFA_NO_DEVICES"] = "mfaNoDevices";
+	TranslatorTranslationClientKey["MFA_DEVICE_UNCONFIRMED"] = "mfaDeviceUnconfirmed";
+	TranslatorTranslationClientKey["MFA_RECOVERY_NUDGE"] = "mfaRecoveryNudge";
+	TranslatorTranslationClientKey["MFA_RECOVERY_NUDGE_GENERATE"] = "mfaRecoveryNudgeGenerate";
+	TranslatorTranslationClientKey["MFA_RECOVERY_NUDGE_SKIP"] = "mfaRecoveryNudgeSkip";
 	return TranslatorTranslationClientKey;
 }({});
 /**
@@ -146,11 +198,23 @@ let TranslatorTranslationAppKey = /* @__PURE__ */ function(TranslatorTranslation
 	TranslatorTranslationAppKey["SESSION_REVOKE_OTHERS_CONFIRM_TITLE"] = "sessionRevokeOthersConfirmTitle";
 	TranslatorTranslationAppKey["SESSION_REVOKE_OTHERS_CONFIRM_DESCRIPTION"] = "sessionRevokeOthersConfirmDescription";
 	TranslatorTranslationAppKey["SESSION_REVOKE_OTHERS_SUCCESS"] = "sessionRevokeOthersSuccess";
+	TranslatorTranslationAppKey["KEY_DELETE_FORCE_CONFIRM_TITLE"] = "keyDeleteForceConfirmTitle";
+	TranslatorTranslationAppKey["KEY_DELETE_FORCE_CONFIRM_DESCRIPTION"] = "keyDeleteForceConfirmDescription";
 	TranslatorTranslationAppKey["SESSION_REVOKE_ALL"] = "sessionRevokeAll";
 	TranslatorTranslationAppKey["SESSION_REVOKE_ALL_CONFIRM_TITLE"] = "sessionRevokeAllConfirmTitle";
 	TranslatorTranslationAppKey["SESSION_REVOKE_ALL_CONFIRM_DESCRIPTION"] = "sessionRevokeAllConfirmDescription";
 	TranslatorTranslationAppKey["SESSION_REVOKE_ALL_SUCCESS"] = "sessionRevokeAllSuccess";
 	TranslatorTranslationAppKey["SESSION_CURRENT"] = "sessionCurrent";
+	TranslatorTranslationAppKey["AUTHENTICATOR"] = "authenticator";
+	TranslatorTranslationAppKey["MFA_SECURITY_TITLE"] = "mfaSecurityTitle";
+	TranslatorTranslationAppKey["MFA_SECURITY_HINT"] = "mfaSecurityHint";
+	TranslatorTranslationAppKey["APPLICATIONS"] = "applications";
+	TranslatorTranslationAppKey["CONSENT_EMPTY"] = "consentEmpty";
+	TranslatorTranslationAppKey["CONSENT_REVOKE"] = "consentRevoke";
+	TranslatorTranslationAppKey["CONSENT_REVOKE_ALL"] = "consentRevokeAll";
+	TranslatorTranslationAppKey["CONSENT_REVOKE_ALL_TITLE"] = "consentRevokeAllTitle";
+	TranslatorTranslationAppKey["CONSENT_REVOKE_ALL_DESCRIPTION"] = "consentRevokeAllDescription";
+	TranslatorTranslationAppKey["CONSENT_SCOPES"] = "consentScopes";
 	return TranslatorTranslationAppKey;
 }({});
 /**
@@ -171,6 +235,10 @@ let TranslatorTranslationMailKey = /* @__PURE__ */ function(TranslatorTranslatio
 	TranslatorTranslationMailKey["PASSWORD_RESET_ACTION"] = "passwordResetAction";
 	TranslatorTranslationMailKey["PASSWORD_RESET_EXPIRY"] = "passwordResetExpiry";
 	TranslatorTranslationMailKey["PASSWORD_RESET_HINT"] = "passwordResetHint";
+	TranslatorTranslationMailKey["MFA_EMAIL_OTP_SUBJECT"] = "mfaEmailOtpSubject";
+	TranslatorTranslationMailKey["MFA_EMAIL_OTP_INTRO"] = "mfaEmailOtpIntro";
+	TranslatorTranslationMailKey["MFA_EMAIL_OTP_EXPIRY"] = "mfaEmailOtpExpiry";
+	TranslatorTranslationMailKey["MFA_EMAIL_OTP_HINT"] = "mfaEmailOtpHint";
 	return TranslatorTranslationMailKey;
 }({});
 /**
@@ -181,7 +249,10 @@ let TranslatorTranslationMailKey = /* @__PURE__ */ function(TranslatorTranslatio
 */
 let TranslatorTranslationEntityKey = /* @__PURE__ */ function(TranslatorTranslationEntityKey) {
 	TranslatorTranslationEntityKey["CLIENT"] = "client";
+	TranslatorTranslationEntityKey["CONSENT"] = "consent";
+	TranslatorTranslationEntityKey["EVENT"] = "event";
 	TranslatorTranslationEntityKey["IDENTITY_PROVIDER"] = "identityProvider";
+	TranslatorTranslationEntityKey["KEY"] = "key";
 	TranslatorTranslationEntityKey["PERMISSION"] = "permission";
 	TranslatorTranslationEntityKey["POLICY"] = "policy";
 	TranslatorTranslationEntityKey["REALM"] = "realm";
@@ -189,6 +260,7 @@ let TranslatorTranslationEntityKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationEntityKey["ROLE"] = "role";
 	TranslatorTranslationEntityKey["SCOPE"] = "scope";
 	TranslatorTranslationEntityKey["SESSION"] = "session";
+	TranslatorTranslationEntityKey["TRUST_ANCHOR"] = "trustAnchor";
 	TranslatorTranslationEntityKey["USER"] = "user";
 	return TranslatorTranslationEntityKey;
 }({});
@@ -252,6 +324,16 @@ let TranslatorTranslationFieldKey = /* @__PURE__ */ function(TranslatorTranslati
 	TranslatorTranslationFieldKey["USER_INFO"] = "userInfo";
 	TranslatorTranslationFieldKey["DISCOVERY"] = "discovery";
 	TranslatorTranslationFieldKey["REDIRECT_URL"] = "redirectUrl";
+	TranslatorTranslationFieldKey["ACCESS_POLICY"] = "accessPolicy";
+	TranslatorTranslationFieldKey["ACTOR"] = "actor";
+	TranslatorTranslationFieldKey["REF"] = "ref";
+	TranslatorTranslationFieldKey["PATH"] = "path";
+	TranslatorTranslationFieldKey["METHOD"] = "method";
+	TranslatorTranslationFieldKey["USE"] = "use";
+	TranslatorTranslationFieldKey["STATUS"] = "status";
+	TranslatorTranslationFieldKey["PRIORITY"] = "priority";
+	TranslatorTranslationFieldKey["SIGNATURE_ALGORITHM"] = "signatureAlgorithm";
+	TranslatorTranslationFieldKey["CERTIFICATE"] = "certificate";
 	return TranslatorTranslationFieldKey;
 }({});
 /**
@@ -310,6 +392,8 @@ let TranslatorTranslationCommonKey = /* @__PURE__ */ function(TranslatorTranslat
 	TranslatorTranslationCommonKey["GROUP"] = "group";
 	TranslatorTranslationCommonKey["NO_ITEMS"] = "noItems";
 	TranslatorTranslationCommonKey["PROCESSING"] = "processing";
+	TranslatorTranslationCommonKey["REQUEST"] = "request";
+	TranslatorTranslationCommonKey["DATA"] = "data";
 	return TranslatorTranslationCommonKey;
 }({});
 //#endregion
@@ -376,7 +460,19 @@ const TranslatorTranslationAppEnglish = {
 	["sessionRevokeAllConfirmTitle"]: "Log this user out everywhere?",
 	["sessionRevokeAllConfirmDescription"]: "This revokes every session of this user on all devices.",
 	["sessionRevokeAllSuccess"]: "Logged out {{amount}} session(s).",
-	["sessionCurrent"]: "This device"
+	["sessionCurrent"]: "This device",
+	["authenticator"]: "Authenticators",
+	["mfaSecurityTitle"]: "Two-factor authentication",
+	["mfaSecurityHint"]: "Add an extra layer of security with an authenticator app or recovery codes.",
+	["applications"]: "Applications",
+	["consentEmpty"]: "You have not granted any application access yet.",
+	["consentRevoke"]: "Revoke",
+	["consentRevokeAll"]: "Revoke access",
+	["consentRevokeAllTitle"]: "Revoke application access",
+	["consentRevokeAllDescription"]: "The application will ask for your consent again on the next sign-in.",
+	["consentScopes"]: "Granted permissions",
+	["keyDeleteForceConfirmTitle"]: "Crypto-shred encryption key?",
+	["keyDeleteForceConfirmDescription"]: "This key is still referenced by {{count}} encrypted secret(s). Deleting it makes them permanently unrecoverable."
 };
 //#endregion
 //#region src/catalogs/en/client.ts
@@ -384,7 +480,15 @@ const TranslatorTranslationClientEnglish = {
 	["nameHint"]: "Something users will recognize and trust",
 	["descriptionHint"]: "Displayed to all users of this application",
 	["redirectURIHint"]: "URI pattern a browser can redirect to after a successful login",
-	["isConfidential"]: "Is confidential?",
+	["authMethod"]: "Authentication method",
+	["authMethodNone"]: "None",
+	["authMethodSecret"]: "Shared secret",
+	["authMethodTls"]: "TLS certificate",
+	["tokenBindingMethod"]: "Token binding",
+	["tokenBindingMethodNone"]: "Disabled",
+	["tokenBindingMethodTls"]: "TLS certificate",
+	["clientCertificateUri"]: "Certificate client URI",
+	["clientCertificateUriHint"]: "The certificate must contain this exact URI SAN once.",
 	["isActive"]: "Is active?",
 	["hashSecret"]: "Hash secret?",
 	["loginFailed"]: "The login operation failed",
@@ -449,10 +553,54 @@ const TranslatorTranslationClientEnglish = {
 	["signedInAs"]: "Signed in as {{name}}",
 	["notYou"]: "Not you?",
 	["authorizeAborted"]: "The authorization request was denied. Returning to the application automatically is not possible — you can close this window.",
+	["accessDeniedTitle"]: "Access denied",
+	["accessDeniedText"]: "You are not permitted to access this application.",
+	["clientAccessPolicyHint"]: "Without a policy, every identity in the realm may sign in.",
+	["consentStatusLoading"]: "Checking granted permissions…",
 	["logoutConfirmTitle"]: "Sign out",
 	["logoutConfirmText"]: "Do you want to sign out?",
 	["logoutDone"]: "You have been signed out.",
-	["signOut"]: "Sign out"
+	["signOut"]: "Sign out",
+	["mfaTitle"]: "Two-factor authentication",
+	["mfaChallengeIntro"]: "Enter the code from your authenticator app to continue.",
+	["mfaCode"]: "Verification code",
+	["mfaCodeHint"]: "The 6-digit code from your authenticator app.",
+	["mfaVerify"]: "Verify",
+	["mfaUseRecovery"]: "Use a recovery code",
+	["mfaUseAuthenticator"]: "Use your authenticator app",
+	["mfaRecoveryCode"]: "Recovery code",
+	["mfaFailed"]: "The verification code is not valid.",
+	["mfaSetupRequired"]: "Set up two-factor authentication to continue.",
+	["mfaEnrollTitle"]: "Add a second factor",
+	["mfaEnrollTotp"]: "Authenticator app",
+	["mfaEnrollRecovery"]: "Recovery codes",
+	["mfaScanQr"]: "Scan this QR code with your authenticator app.",
+	["mfaManualKey"]: "Or enter this key manually:",
+	["mfaConfirmIntro"]: "Enter the generated code to confirm the setup.",
+	["mfaConfirm"]: "Confirm",
+	["mfaRecoveryIntro"]: "Store these codes somewhere safe. Each code can be used once.",
+	["mfaRecoverySave"]: "You will not be able to see these codes again.",
+	["mfaDownload"]: "Download",
+	["mfaEnrolled"]: "The second factor was added.",
+	["mfaDeviceName"]: "Device name",
+	["mfaNoDevices"]: "No authenticator devices have been added yet.",
+	["mfaDeviceUnconfirmed"]: "not confirmed",
+	["mfaRecoveryNudge"]: "Add backup recovery codes so you can still sign in if you lose access to this second factor.",
+	["mfaRecoveryNudgeGenerate"]: "Generate recovery codes",
+	["mfaRecoveryNudgeSkip"]: "Skip for now",
+	["mfaUseEmail"]: "Use an email code",
+	["mfaSendCode"]: "Send code",
+	["mfaCodeSent"]: "A code was sent to your email address.",
+	["mfaEnrollEmail"]: "Email code",
+	["mfaUsePasskey"]: "Use a passkey",
+	["mfaPasskeyPrompt"]: "Use your passkey or security key to continue.",
+	["mfaEnrollWebauthn"]: "Passkey / security key",
+	["keyUseSignature"]: "Signature (sig)",
+	["keyUseEncryption"]: "Encryption (enc)",
+	["keyImportMaterial"]: "Import existing key material",
+	["keyMaterialOct"]: "Key material (32 bytes, base64)",
+	["keyMaterialPrivate"]: "Private key (PKCS#8, base64 or PEM)",
+	["keyMaterialPublic"]: "Public key (SPKI, base64 or PEM)"
 };
 //#endregion
 //#region src/catalogs/en/common.ts
@@ -481,7 +629,9 @@ const TranslatorTranslationCommonEnglish = {
 	["details"]: "Details",
 	["group"]: "Group",
 	["noItems"]: "The list has no items yet.",
-	["processing"]: "Processing"
+	["processing"]: "Processing",
+	["request"]: "Request",
+	["data"]: "Data"
 };
 //#endregion
 //#region src/catalogs/en/entity.ts
@@ -490,10 +640,22 @@ const TranslatorTranslationEntityEnglish = {
 		one: "Client",
 		other: "Clients"
 	}),
+	["consent"]: definePlural({
+		one: "Consent",
+		other: "Consents"
+	}),
+	["event"]: definePlural({
+		one: "Event",
+		other: "Events"
+	}),
 	["identityProvider"]: definePlural({
 		one: "Identity provider",
 		other: "Identity providers"
 	}),
+	["key"]: definePlural({
+		one: "Key",
+		other: "Keys"
+	}),
 	["permission"]: definePlural({
 		one: "Permission",
 		other: "Permissions"
@@ -522,6 +684,10 @@ const TranslatorTranslationEntityEnglish = {
 		one: "Session",
 		other: "Sessions"
 	}),
+	["trustAnchor"]: definePlural({
+		one: "Trusted CA",
+		other: "Trusted CAs"
+	}),
 	["user"]: definePlural({
 		one: "User",
 		other: "Users"
@@ -544,6 +710,9 @@ const TranslatorTranslationErrorEnglish = {
 	[ErrorCode.PASSWORD_RECOVERY_DISABLED]: "Password recovery is currently disabled.",
 	[ErrorCode.EMAIL_VERIFICATION_REQUIRED]: "Your email address must be verified first.",
 	[ErrorCode.RESET_TOKEN_EXPIRED]: "The reset token has expired. Please request a new one.",
+	[ErrorCode.LOGIN_ATTEMPT_THROTTLED]: "Too many failed login attempts. Please try again later.",
+	[ErrorCode.MFA_ATTEMPT_THROTTLED]: "Too many failed verification attempts. Please try again later.",
+	[ErrorCode.MFA_NOT_CONFIGURABLE]: "Multi-factor authentication is not available on this server.",
 	[ErrorCode.STORAGE_INSUFFICIENT]: "There is not enough storage available to complete this action.",
 	[ErrorCode.JWK_INVALID]: "The JSON web key is invalid.",
 	[ErrorCode.JWK_NOT_FOUND]: "The JSON web key could not be found.",
@@ -557,6 +726,8 @@ const TranslatorTranslationErrorEnglish = {
 	[ErrorCode.OAUTH_GRANT_TYPE_UNSUPPORTED]: "The grant type is not supported.",
 	[ErrorCode.OAUTH_REQUEST_INVALID]: "The request is invalid.",
 	[ErrorCode.OAUTH_LOGIN_REQUIRED]: "You must sign in to continue.",
+	[ErrorCode.OAUTH_MFA_REQUIRED]: "A second factor is required to continue.",
+	[ErrorCode.OAUTH_ACCESS_DENIED]: "You are not permitted to access this application.",
 	[ErrorCode.OAUTH_INTERACTION_REQUIRED]: "Interaction is required to continue.",
 	[ErrorCode.OAUTH_ACCOUNT_SELECTION_REQUIRED]: "Please select an account to continue.",
 	[ErrorCode.OAUTH_CONSENT_REQUIRED]: "Your consent is required to continue.",
@@ -627,7 +798,17 @@ const TranslatorTranslationFieldEnglish = {
 	["token"]: "Token",
 	["userInfo"]: "UserInfo",
 	["discovery"]: "Discovery",
-	["redirectUrl"]: "Redirect URL"
+	["redirectUrl"]: "Redirect URL",
+	["accessPolicy"]: "Access policy",
+	["actor"]: "Actor",
+	["ref"]: "Reference",
+	["path"]: "Path",
+	["method"]: "Method",
+	["use"]: "Usage",
+	["status"]: "Status",
+	["priority"]: "Priority",
+	["signatureAlgorithm"]: "Signature algorithm",
+	["certificate"]: "Certificate"
 };
 //#endregion
 //#region src/catalogs/en/mail.ts
@@ -641,7 +822,11 @@ const TranslatorTranslationMailEnglish = {
 	["passwordResetIntro"]: "Use the code below to reset your account password.",
 	["passwordResetAction"]: "Reset password",
 	["passwordResetExpiry"]: "The code expires in {{minutes}} minutes.",
-	["passwordResetHint"]: "If you did not request a password reset, you can safely ignore this email — your password stays unchanged."
+	["passwordResetHint"]: "If you did not request a password reset, you can safely ignore this email — your password stays unchanged.",
+	["mfaEmailOtpSubject"]: "Your verification code",
+	["mfaEmailOtpIntro"]: "Use the code below to complete your sign-in.",
+	["mfaEmailOtpExpiry"]: "The code expires in {{minutes}} minutes.",
+	["mfaEmailOtpHint"]: "If you did not try to sign in, you can safely ignore this email."
 };
 //#endregion
 //#region src/catalogs/en/vuecs.ts
@@ -710,7 +895,19 @@ const TranslatorTranslationAppGerman = {
 	["sessionRevokeAllConfirmTitle"]: "Diesen Benutzer überall abmelden?",
 	["sessionRevokeAllConfirmDescription"]: "Dadurch werden alle Sitzungen dieses Benutzers auf allen Geräten abgemeldet.",
 	["sessionRevokeAllSuccess"]: "{{amount}} Sitzung(en) abgemeldet.",
-	["sessionCurrent"]: "Dieses Gerät"
+	["sessionCurrent"]: "Dieses Gerät",
+	["authenticator"]: "Authentifikatoren",
+	["mfaSecurityTitle"]: "Zwei-Faktor-Authentifizierung",
+	["mfaSecurityHint"]: "Füge mit einer Authenticator-App oder Wiederherstellungscodes eine zusätzliche Sicherheitsebene hinzu.",
+	["applications"]: "Anwendungen",
+	["consentEmpty"]: "Du hast noch keiner Anwendung Zugriff gewährt.",
+	["consentRevoke"]: "Widerrufen",
+	["consentRevokeAll"]: "Zugriff widerrufen",
+	["consentRevokeAllTitle"]: "Anwendungszugriff widerrufen",
+	["consentRevokeAllDescription"]: "Die Anwendung wird bei der nächsten Anmeldung erneut um deine Einwilligung bitten.",
+	["consentScopes"]: "Gewährte Berechtigungen",
+	["keyDeleteForceConfirmTitle"]: "Verschlüsselungsschlüssel unwiderruflich löschen?",
+	["keyDeleteForceConfirmDescription"]: "Dieser Schlüssel wird noch von {{count}} verschlüsselten Geheimnissen referenziert. Das Löschen macht sie dauerhaft unlesbar."
 };
 //#endregion
 //#region src/catalogs/de/client.ts
@@ -718,7 +915,15 @@ const TranslatorTranslationClientGerman = {
 	["nameHint"]: "Etwas, das Benutzer erkennen und dem sie vertrauen",
 	["descriptionHint"]: "Wird allen Benutzern dieser Anwendung angezeigt",
 	["redirectURIHint"]: "URI-Muster, zu dem ein Browser nach einem erfolgreichen Login weiterleiten kann",
-	["isConfidential"]: "Ist vertraulich?",
+	["authMethod"]: "Authentifizierungsmethode",
+	["authMethodNone"]: "Keine",
+	["authMethodSecret"]: "Gemeinsames Geheimnis",
+	["authMethodTls"]: "TLS-Zertifikat",
+	["tokenBindingMethod"]: "Tokenbindung",
+	["tokenBindingMethodNone"]: "Deaktiviert",
+	["tokenBindingMethodTls"]: "TLS-Zertifikat",
+	["clientCertificateUri"]: "Zertifikat-Client-URI",
+	["clientCertificateUriHint"]: "Das Zertifikat muss genau einmal diese exakte URI-SAN enthalten.",
 	["isActive"]: "Ist aktiv?",
 	["hashSecret"]: "Geheimnis hashen?",
 	["loginFailed"]: "Der Anmeldevorgang ist fehlgeschlagen",
@@ -783,10 +988,54 @@ const TranslatorTranslationClientGerman = {
 	["signedInAs"]: "Angemeldet als {{name}}",
 	["notYou"]: "Nicht Sie?",
 	["authorizeAborted"]: "Die Autorisierungsanfrage wurde abgelehnt. Eine automatische Rückkehr zur Anwendung ist nicht möglich — Sie können dieses Fenster schließen.",
+	["accessDeniedTitle"]: "Zugriff verweigert",
+	["accessDeniedText"]: "Sie sind nicht berechtigt, auf diese Anwendung zuzugreifen.",
+	["clientAccessPolicyHint"]: "Ohne Richtlinie darf sich jede Identität des Realms anmelden.",
+	["consentStatusLoading"]: "Gewährte Berechtigungen werden geprüft…",
 	["logoutConfirmTitle"]: "Abmelden",
 	["logoutConfirmText"]: "Möchten Sie sich abmelden?",
 	["logoutDone"]: "Sie wurden abgemeldet.",
-	["signOut"]: "Abmelden"
+	["signOut"]: "Abmelden",
+	["mfaTitle"]: "Zwei-Faktor-Authentifizierung",
+	["mfaChallengeIntro"]: "Gib den Code aus deiner Authenticator-App ein, um fortzufahren.",
+	["mfaCode"]: "Bestätigungscode",
+	["mfaCodeHint"]: "Der 6-stellige Code aus deiner Authenticator-App.",
+	["mfaVerify"]: "Bestätigen",
+	["mfaUseRecovery"]: "Wiederherstellungscode verwenden",
+	["mfaUseAuthenticator"]: "Authenticator-App verwenden",
+	["mfaRecoveryCode"]: "Wiederherstellungscode",
+	["mfaFailed"]: "Der Bestätigungscode ist ungültig.",
+	["mfaSetupRequired"]: "Richte die Zwei-Faktor-Authentifizierung ein, um fortzufahren.",
+	["mfaEnrollTitle"]: "Zweiten Faktor hinzufügen",
+	["mfaEnrollTotp"]: "Authenticator-App",
+	["mfaEnrollRecovery"]: "Wiederherstellungscodes",
+	["mfaScanQr"]: "Scanne diesen QR-Code mit deiner Authenticator-App.",
+	["mfaManualKey"]: "Oder gib diesen Schlüssel manuell ein:",
+	["mfaConfirmIntro"]: "Gib den generierten Code ein, um die Einrichtung zu bestätigen.",
+	["mfaConfirm"]: "Bestätigen",
+	["mfaRecoveryIntro"]: "Bewahre diese Codes sicher auf. Jeder Code kann einmal verwendet werden.",
+	["mfaRecoverySave"]: "Du wirst diese Codes nicht erneut sehen können.",
+	["mfaDownload"]: "Herunterladen",
+	["mfaEnrolled"]: "Der zweite Faktor wurde hinzugefügt.",
+	["mfaDeviceName"]: "Gerätename",
+	["mfaNoDevices"]: "Es wurden noch keine Authenticator-Geräte hinzugefügt.",
+	["mfaDeviceUnconfirmed"]: "nicht bestätigt",
+	["mfaRecoveryNudge"]: "Hinterlege zusätzlich Wiederherstellungscodes, damit du dich weiterhin anmelden kannst, falls du den Zugriff auf diesen zweiten Faktor verlierst.",
+	["mfaRecoveryNudgeGenerate"]: "Wiederherstellungscodes erstellen",
+	["mfaRecoveryNudgeSkip"]: "Vorerst überspringen",
+	["mfaUseEmail"]: "E-Mail-Code verwenden",
+	["mfaSendCode"]: "Code senden",
+	["mfaCodeSent"]: "Ein Code wurde an deine E-Mail-Adresse gesendet.",
+	["mfaEnrollEmail"]: "E-Mail-Code",
+	["mfaUsePasskey"]: "Passkey verwenden",
+	["mfaPasskeyPrompt"]: "Verwende deinen Passkey oder Sicherheitsschlüssel, um fortzufahren.",
+	["mfaEnrollWebauthn"]: "Passkey / Sicherheitsschlüssel",
+	["keyUseSignature"]: "Signatur (sig)",
+	["keyUseEncryption"]: "Verschlüsselung (enc)",
+	["keyImportMaterial"]: "Vorhandenes Schlüsselmaterial importieren",
+	["keyMaterialOct"]: "Schlüsselmaterial (32 Bytes, Base64)",
+	["keyMaterialPrivate"]: "Privater Schlüssel (PKCS#8, Base64 oder PEM)",
+	["keyMaterialPublic"]: "Öffentlicher Schlüssel (SPKI, Base64 oder PEM)"
 };
 //#endregion
 //#region src/catalogs/de/common.ts
@@ -815,7 +1064,9 @@ const TranslatorTranslationCommonGerman = {
 	["details"]: "Details",
 	["group"]: "Gruppe",
 	["noItems"]: "Die Liste enthält noch keine Einträge.",
-	["processing"]: "Wird verarbeitet"
+	["processing"]: "Wird verarbeitet",
+	["request"]: "Anfrage",
+	["data"]: "Daten"
 };
 //#endregion
 //#region src/catalogs/de/entity.ts
@@ -824,10 +1075,22 @@ const TranslatorTranslationEntityGerman = {
 		one: "Client",
 		other: "Clients"
 	}),
+	["consent"]: definePlural({
+		one: "Einwilligung",
+		other: "Einwilligungen"
+	}),
+	["event"]: definePlural({
+		one: "Ereignis",
+		other: "Ereignisse"
+	}),
 	["identityProvider"]: definePlural({
 		one: "Identitätsanbieter",
 		other: "Identitätsanbieter"
 	}),
+	["key"]: definePlural({
+		one: "Schlüssel",
+		other: "Schlüssel"
+	}),
 	["permission"]: definePlural({
 		one: "Berechtigung",
 		other: "Berechtigungen"
@@ -856,6 +1119,10 @@ const TranslatorTranslationEntityGerman = {
 		one: "Sitzung",
 		other: "Sitzungen"
 	}),
+	["trustAnchor"]: definePlural({
+		one: "Vertrauenswürdige Zertifizierungsstelle",
+		other: "Vertrauenswürdige Zertifizierungsstellen"
+	}),
 	["user"]: definePlural({
 		one: "Benutzer",
 		other: "Benutzer"
@@ -878,6 +1145,9 @@ const TranslatorTranslationErrorGerman = {
 	[ErrorCode.PASSWORD_RECOVERY_DISABLED]: "Die Passwort-Wiederherstellung ist derzeit deaktiviert.",
 	[ErrorCode.EMAIL_VERIFICATION_REQUIRED]: "Deine E-Mail-Adresse muss zuerst bestätigt werden.",
 	[ErrorCode.RESET_TOKEN_EXPIRED]: "Das Reset-Token ist abgelaufen. Bitte fordere ein neues an.",
+	[ErrorCode.LOGIN_ATTEMPT_THROTTLED]: "Zu viele fehlgeschlagene Anmeldeversuche. Bitte versuche es später erneut.",
+	[ErrorCode.MFA_ATTEMPT_THROTTLED]: "Zu viele fehlgeschlagene Bestätigungsversuche. Bitte versuche es später erneut.",
+	[ErrorCode.MFA_NOT_CONFIGURABLE]: "Multi-Faktor-Authentifizierung ist auf diesem Server nicht verfügbar.",
 	[ErrorCode.STORAGE_INSUFFICIENT]: "Es ist nicht genügend Speicherplatz verfügbar, um diese Aktion auszuführen.",
 	[ErrorCode.JWK_INVALID]: "Der JSON Web Key ist ungültig.",
 	[ErrorCode.JWK_NOT_FOUND]: "Der JSON Web Key konnte nicht gefunden werden.",
@@ -891,6 +1161,8 @@ const TranslatorTranslationErrorGerman = {
 	[ErrorCode.OAUTH_GRANT_TYPE_UNSUPPORTED]: "Der Grant-Typ wird nicht unterstützt.",
 	[ErrorCode.OAUTH_REQUEST_INVALID]: "Die Anfrage ist ungültig.",
 	[ErrorCode.OAUTH_LOGIN_REQUIRED]: "Sie müssen sich anmelden, um fortzufahren.",
+	[ErrorCode.OAUTH_MFA_REQUIRED]: "Ein zweiter Faktor ist erforderlich, um fortzufahren.",
+	[ErrorCode.OAUTH_ACCESS_DENIED]: "Sie sind nicht berechtigt, auf diese Anwendung zuzugreifen.",
 	[ErrorCode.OAUTH_INTERACTION_REQUIRED]: "Eine Interaktion ist erforderlich, um fortzufahren.",
 	[ErrorCode.OAUTH_ACCOUNT_SELECTION_REQUIRED]: "Bitte wählen Sie ein Konto aus, um fortzufahren.",
 	[ErrorCode.OAUTH_CONSENT_REQUIRED]: "Ihre Zustimmung ist erforderlich, um fortzufahren.",
@@ -961,7 +1233,17 @@ const TranslatorTranslationFieldGerman = {
 	["token"]: "Token",
 	["userInfo"]: "UserInfo",
 	["discovery"]: "Discovery",
-	["redirectUrl"]: "Weiterleitungs-URL"
+	["redirectUrl"]: "Weiterleitungs-URL",
+	["accessPolicy"]: "Zugriffsrichtlinie",
+	["actor"]: "Akteur",
+	["ref"]: "Referenz",
+	["path"]: "Pfad",
+	["method"]: "Methode",
+	["use"]: "Verwendung",
+	["status"]: "Status",
+	["priority"]: "Priorität",
+	["signatureAlgorithm"]: "Signaturalgorithmus",
+	["certificate"]: "Zertifikat"
 };
 //#endregion
 //#region src/catalogs/de/mail.ts
@@ -975,7 +1257,11 @@ const TranslatorTranslationMailGerman = {
 	["passwordResetIntro"]: "Verwende den folgenden Code, um dein Kontopasswort zurückzusetzen.",
 	["passwordResetAction"]: "Passwort zurücksetzen",
 	["passwordResetExpiry"]: "Der Code läuft in {{minutes}} Minuten ab.",
-	["passwordResetHint"]: "Wenn du keine Zurücksetzung angefordert hast, kannst du diese E-Mail ignorieren – dein Passwort bleibt unverändert."
+	["passwordResetHint"]: "Wenn du keine Zurücksetzung angefordert hast, kannst du diese E-Mail ignorieren – dein Passwort bleibt unverändert.",
+	["mfaEmailOtpSubject"]: "Dein Bestätigungscode",
+	["mfaEmailOtpIntro"]: "Verwende den folgenden Code, um deine Anmeldung abzuschließen.",
+	["mfaEmailOtpExpiry"]: "Der Code läuft in {{minutes}} Minuten ab.",
+	["mfaEmailOtpHint"]: "Wenn du dich nicht anmelden wolltest, kannst du diese E-Mail ignorieren."
 };
 //#endregion
 //#region src/catalogs/de/vuecs.ts
@@ -1044,7 +1330,19 @@ const TranslatorTranslationAppFrench = {
 	["sessionRevokeAllConfirmTitle"]: "Déconnecter cet utilisateur partout ?",
 	["sessionRevokeAllConfirmDescription"]: "Cela révoque toutes les sessions de cet utilisateur sur tous les appareils.",
 	["sessionRevokeAllSuccess"]: "{{amount}} session(s) déconnectée(s).",
-	["sessionCurrent"]: "Cet appareil"
+	["sessionCurrent"]: "Cet appareil",
+	["authenticator"]: "Authentificateurs",
+	["mfaSecurityTitle"]: "Authentification à deux facteurs",
+	["mfaSecurityHint"]: "Ajoutez une couche de sécurité avec une application d'authentification ou des codes de récupération.",
+	["applications"]: "Applications",
+	["consentEmpty"]: "Vous n'avez encore accordé l'accès à aucune application.",
+	["consentRevoke"]: "Révoquer",
+	["consentRevokeAll"]: "Révoquer l'accès",
+	["consentRevokeAllTitle"]: "Révoquer l'accès de l'application",
+	["consentRevokeAllDescription"]: "L'application demandera à nouveau votre consentement lors de la prochaine connexion.",
+	["consentScopes"]: "Permissions accordées",
+	["keyDeleteForceConfirmTitle"]: "Détruire la clé de chiffrement ?",
+	["keyDeleteForceConfirmDescription"]: "Cette clé est encore référencée par {{count}} secret(s) chiffré(s). Sa suppression les rendra définitivement irrécupérables."
 };
 //#endregion
 //#region src/catalogs/fr/client.ts
@@ -1052,7 +1350,15 @@ const TranslatorTranslationClientFrench = {
 	["nameHint"]: "Quelque chose que les utilisateurs reconnaîtront et auquel ils feront confiance",
 	["descriptionHint"]: "Affiché à tous les utilisateurs de cette application",
 	["redirectURIHint"]: "Modèle d'URI vers lequel un navigateur peut rediriger après une connexion réussie",
-	["isConfidential"]: "Est confidentiel ?",
+	["authMethod"]: "Méthode d’authentification",
+	["authMethodNone"]: "Aucune",
+	["authMethodSecret"]: "Secret partagé",
+	["authMethodTls"]: "Certificat TLS",
+	["tokenBindingMethod"]: "Liaison du jeton",
+	["tokenBindingMethodNone"]: "Désactivée",
+	["tokenBindingMethodTls"]: "Certificat TLS",
+	["clientCertificateUri"]: "URI client du certificat",
+	["clientCertificateUriHint"]: "Le certificat doit contenir exactement une fois ce SAN URI.",
 	["isActive"]: "Est actif ?",
 	["hashSecret"]: "Hacher le secret ?",
 	["loginFailed"]: "L'opération de connexion a échoué",
@@ -1117,10 +1423,54 @@ const TranslatorTranslationClientFrench = {
 	["signedInAs"]: "Connecté en tant que {{name}}",
 	["notYou"]: "Pas vous ?",
 	["authorizeAborted"]: "La demande d'autorisation a été refusée. Un retour automatique vers l'application n'est pas possible — vous pouvez fermer cette fenêtre.",
+	["accessDeniedTitle"]: "Accès refusé",
+	["accessDeniedText"]: "Vous n'êtes pas autorisé à accéder à cette application.",
+	["clientAccessPolicyHint"]: "Sans politique, toute identité du domaine peut se connecter.",
+	["consentStatusLoading"]: "Vérification des permissions accordées…",
 	["logoutConfirmTitle"]: "Se déconnecter",
 	["logoutConfirmText"]: "Voulez-vous vous déconnecter ?",
 	["logoutDone"]: "Vous avez été déconnecté.",
-	["signOut"]: "Se déconnecter"
+	["signOut"]: "Se déconnecter",
+	["mfaTitle"]: "Authentification à deux facteurs",
+	["mfaChallengeIntro"]: "Saisissez le code de votre application d'authentification pour continuer.",
+	["mfaCode"]: "Code de vérification",
+	["mfaCodeHint"]: "Le code à 6 chiffres de votre application d'authentification.",
+	["mfaVerify"]: "Vérifier",
+	["mfaUseRecovery"]: "Utiliser un code de récupération",
+	["mfaUseAuthenticator"]: "Utiliser votre application d'authentification",
+	["mfaRecoveryCode"]: "Code de récupération",
+	["mfaFailed"]: "Le code de vérification n'est pas valide.",
+	["mfaSetupRequired"]: "Configurez l'authentification à deux facteurs pour continuer.",
+	["mfaEnrollTitle"]: "Ajouter un deuxième facteur",
+	["mfaEnrollTotp"]: "Application d'authentification",
+	["mfaEnrollRecovery"]: "Codes de récupération",
+	["mfaScanQr"]: "Scannez ce QR code avec votre application d'authentification.",
+	["mfaManualKey"]: "Ou saisissez cette clé manuellement :",
+	["mfaConfirmIntro"]: "Saisissez le code généré pour confirmer la configuration.",
+	["mfaConfirm"]: "Confirmer",
+	["mfaRecoveryIntro"]: "Conservez ces codes en lieu sûr. Chaque code est utilisable une fois.",
+	["mfaRecoverySave"]: "Vous ne pourrez plus revoir ces codes.",
+	["mfaDownload"]: "Télécharger",
+	["mfaEnrolled"]: "Le deuxième facteur a été ajouté.",
+	["mfaDeviceName"]: "Nom de l'appareil",
+	["mfaNoDevices"]: "Aucun appareil d'authentification n'a encore été ajouté.",
+	["mfaDeviceUnconfirmed"]: "non confirmé",
+	["mfaRecoveryNudge"]: "Ajoutez des codes de récupération de secours afin de pouvoir vous connecter même si vous perdez l'accès à ce deuxième facteur.",
+	["mfaRecoveryNudgeGenerate"]: "Générer des codes de récupération",
+	["mfaRecoveryNudgeSkip"]: "Ignorer pour l'instant",
+	["mfaUseEmail"]: "Utiliser un code par e-mail",
+	["mfaSendCode"]: "Envoyer le code",
+	["mfaCodeSent"]: "Un code a été envoyé à votre adresse e-mail.",
+	["mfaEnrollEmail"]: "Code par e-mail",
+	["mfaUsePasskey"]: "Utiliser une clé d'accès",
+	["mfaPasskeyPrompt"]: "Utilisez votre clé d'accès ou votre clé de sécurité pour continuer.",
+	["mfaEnrollWebauthn"]: "Clé d'accès / clé de sécurité",
+	["keyUseSignature"]: "Signature (sig)",
+	["keyUseEncryption"]: "Chiffrement (enc)",
+	["keyImportMaterial"]: "Importer du matériel de clé existant",
+	["keyMaterialOct"]: "Matériel de clé (32 octets, base64)",
+	["keyMaterialPrivate"]: "Clé privée (PKCS#8, base64 ou PEM)",
+	["keyMaterialPublic"]: "Clé publique (SPKI, base64 ou PEM)"
 };
 //#endregion
 //#region src/catalogs/fr/common.ts
@@ -1149,7 +1499,9 @@ const TranslatorTranslationCommonFrench = {
 	["details"]: "Détails",
 	["group"]: "Groupe",
 	["noItems"]: "La liste ne contient encore aucun élément.",
-	["processing"]: "Traitement en cours"
+	["processing"]: "Traitement en cours",
+	["request"]: "Requête",
+	["data"]: "Données"
 };
 //#endregion
 //#region src/catalogs/fr/entity.ts
@@ -1158,10 +1510,22 @@ const TranslatorTranslationEntityFrench = {
 		one: "Client",
 		other: "Clients"
 	}),
+	["consent"]: definePlural({
+		one: "Consentement",
+		other: "Consentements"
+	}),
+	["event"]: definePlural({
+		one: "Événement",
+		other: "Événements"
+	}),
 	["identityProvider"]: definePlural({
 		one: "Fournisseur d'identité",
 		other: "Fournisseurs d'identité"
 	}),
+	["key"]: definePlural({
+		one: "Clé",
+		other: "Clés"
+	}),
 	["permission"]: definePlural({
 		one: "Permission",
 		other: "Permissions"
@@ -1190,6 +1554,10 @@ const TranslatorTranslationEntityFrench = {
 		one: "Session",
 		other: "Sessions"
 	}),
+	["trustAnchor"]: definePlural({
+		one: "Autorité de certification approuvée",
+		other: "Autorités de certification approuvées"
+	}),
 	["user"]: definePlural({
 		one: "Utilisateur",
 		other: "Utilisateurs"
@@ -1212,6 +1580,9 @@ const TranslatorTranslationErrorFrench = {
 	[ErrorCode.PASSWORD_RECOVERY_DISABLED]: "La récupération de mot de passe est actuellement désactivée.",
 	[ErrorCode.EMAIL_VERIFICATION_REQUIRED]: "Votre adresse e-mail doit d'abord être vérifiée.",
 	[ErrorCode.RESET_TOKEN_EXPIRED]: "Le jeton de réinitialisation a expiré. Veuillez en demander un nouveau.",
+	[ErrorCode.LOGIN_ATTEMPT_THROTTLED]: "Trop de tentatives de connexion échouées. Veuillez réessayer plus tard.",
+	[ErrorCode.MFA_ATTEMPT_THROTTLED]: "Trop de tentatives de vérification échouées. Veuillez réessayer plus tard.",
+	[ErrorCode.MFA_NOT_CONFIGURABLE]: "L'authentification multifacteur n'est pas disponible sur ce serveur.",
 	[ErrorCode.STORAGE_INSUFFICIENT]: "L'espace de stockage disponible est insuffisant pour effectuer cette action.",
 	[ErrorCode.JWK_INVALID]: "La clé web JSON est invalide.",
 	[ErrorCode.JWK_NOT_FOUND]: "La clé web JSON est introuvable.",
@@ -1225,6 +1596,8 @@ const TranslatorTranslationErrorFrench = {
 	[ErrorCode.OAUTH_GRANT_TYPE_UNSUPPORTED]: "Le type d'autorisation n'est pas pris en charge.",
 	[ErrorCode.OAUTH_REQUEST_INVALID]: "La requête est invalide.",
 	[ErrorCode.OAUTH_LOGIN_REQUIRED]: "Vous devez vous connecter pour continuer.",
+	[ErrorCode.OAUTH_MFA_REQUIRED]: "Un second facteur est requis pour continuer.",
+	[ErrorCode.OAUTH_ACCESS_DENIED]: "Vous n'êtes pas autorisé à accéder à cette application.",
 	[ErrorCode.OAUTH_INTERACTION_REQUIRED]: "Une interaction est requise pour continuer.",
 	[ErrorCode.OAUTH_ACCOUNT_SELECTION_REQUIRED]: "Veuillez sélectionner un compte pour continuer.",
 	[ErrorCode.OAUTH_CONSENT_REQUIRED]: "Votre consentement est requis pour continuer.",
@@ -1295,7 +1668,17 @@ const TranslatorTranslationFieldFrench = {
 	["token"]: "Jeton",
 	["userInfo"]: "UserInfo",
 	["discovery"]: "Découverte",
-	["redirectUrl"]: "URL de redirection"
+	["redirectUrl"]: "URL de redirection",
+	["accessPolicy"]: "Politique d'accès",
+	["actor"]: "Acteur",
+	["ref"]: "Référence",
+	["path"]: "Chemin",
+	["method"]: "Méthode",
+	["use"]: "Utilisation",
+	["status"]: "Statut",
+	["priority"]: "Priorité",
+	["signatureAlgorithm"]: "Algorithme de signature",
+	["certificate"]: "Certificat"
 };
 //#endregion
 //#region src/catalogs/fr/mail.ts
@@ -1309,7 +1692,11 @@ const TranslatorTranslationMailFrench = {
 	["passwordResetIntro"]: "Utilisez le code ci-dessous pour réinitialiser le mot de passe de votre compte.",
 	["passwordResetAction"]: "Réinitialiser le mot de passe",
 	["passwordResetExpiry"]: "Le code expire dans {{minutes}} minutes.",
-	["passwordResetHint"]: "Si vous n'avez pas demandé de réinitialisation, vous pouvez ignorer cet e-mail – votre mot de passe reste inchangé."
+	["passwordResetHint"]: "Si vous n'avez pas demandé de réinitialisation, vous pouvez ignorer cet e-mail – votre mot de passe reste inchangé.",
+	["mfaEmailOtpSubject"]: "Votre code de vérification",
+	["mfaEmailOtpIntro"]: "Utilisez le code ci-dessous pour finaliser votre connexion.",
+	["mfaEmailOtpExpiry"]: "Le code expire dans {{minutes}} minutes.",
+	["mfaEmailOtpHint"]: "Si vous n'avez pas tenté de vous connecter, vous pouvez ignorer cet e-mail."
 };
 //#endregion
 //#region src/catalogs/fr/vuecs.ts
@@ -1378,7 +1765,19 @@ const TranslatorTranslationAppSpanish = {
 	["sessionRevokeAllConfirmTitle"]: "¿Cerrar la sesión de este usuario en todas partes?",
 	["sessionRevokeAllConfirmDescription"]: "Esto revoca todas las sesiones de este usuario en todos los dispositivos.",
 	["sessionRevokeAllSuccess"]: "{{amount}} sesión(es) cerradas.",
-	["sessionCurrent"]: "Este dispositivo"
+	["sessionCurrent"]: "Este dispositivo",
+	["authenticator"]: "Autenticadores",
+	["mfaSecurityTitle"]: "Autenticación de dos factores",
+	["mfaSecurityHint"]: "Añade una capa de seguridad adicional con una aplicación de autenticación o códigos de recuperación.",
+	["applications"]: "Aplicaciones",
+	["consentEmpty"]: "Aún no has concedido acceso a ninguna aplicación.",
+	["consentRevoke"]: "Revocar",
+	["consentRevokeAll"]: "Revocar acceso",
+	["consentRevokeAllTitle"]: "Revocar el acceso de la aplicación",
+	["consentRevokeAllDescription"]: "La aplicación volverá a pedir tu consentimiento en el próximo inicio de sesión.",
+	["consentScopes"]: "Permisos concedidos",
+	["keyDeleteForceConfirmTitle"]: "¿Destruir la clave de cifrado?",
+	["keyDeleteForceConfirmDescription"]: "Esta clave todavía es referenciada por {{count}} secreto(s) cifrado(s). Eliminarla los hará permanentemente irrecuperables."
 };
 //#endregion
 //#region src/catalogs/es/client.ts
@@ -1386,7 +1785,15 @@ const TranslatorTranslationClientSpanish = {
 	["nameHint"]: "Algo que los usuarios reconocerán y en lo que confiarán",
 	["descriptionHint"]: "Se muestra a todos los usuarios de esta aplicación",
 	["redirectURIHint"]: "Patrón de URI al que un navegador puede redirigir tras un inicio de sesión exitoso",
-	["isConfidential"]: "¿Es confidencial?",
+	["authMethod"]: "Método de autenticación",
+	["authMethodNone"]: "Ninguno",
+	["authMethodSecret"]: "Secreto compartido",
+	["authMethodTls"]: "Certificado TLS",
+	["tokenBindingMethod"]: "Vinculación del token",
+	["tokenBindingMethodNone"]: "Desactivada",
+	["tokenBindingMethodTls"]: "Certificado TLS",
+	["clientCertificateUri"]: "URI de cliente del certificado",
+	["clientCertificateUriHint"]: "El certificado debe contener exactamente una vez este SAN de URI.",
 	["isActive"]: "¿Está activo?",
 	["hashSecret"]: "¿Aplicar hash al secreto?",
 	["loginFailed"]: "La operación de inicio de sesión falló",
@@ -1451,10 +1858,54 @@ const TranslatorTranslationClientSpanish = {
 	["signedInAs"]: "Sesión iniciada como {{name}}",
 	["notYou"]: "¿No eres tú?",
 	["authorizeAborted"]: "La solicitud de autorización fue denegada. No es posible volver automáticamente a la aplicación — puedes cerrar esta ventana.",
+	["accessDeniedTitle"]: "Acceso denegado",
+	["accessDeniedText"]: "No tienes permiso para acceder a esta aplicación.",
+	["clientAccessPolicyHint"]: "Sin política, cualquier identidad del realm puede iniciar sesión.",
+	["consentStatusLoading"]: "Comprobando los permisos concedidos…",
 	["logoutConfirmTitle"]: "Cerrar sesión",
 	["logoutConfirmText"]: "¿Quieres cerrar sesión?",
 	["logoutDone"]: "Has cerrado sesión.",
-	["signOut"]: "Cerrar sesión"
+	["signOut"]: "Cerrar sesión",
+	["mfaTitle"]: "Autenticación de dos factores",
+	["mfaChallengeIntro"]: "Introduce el código de tu aplicación de autenticación para continuar.",
+	["mfaCode"]: "Código de verificación",
+	["mfaCodeHint"]: "El código de 6 dígitos de tu aplicación de autenticación.",
+	["mfaVerify"]: "Verificar",
+	["mfaUseRecovery"]: "Usar un código de recuperación",
+	["mfaUseAuthenticator"]: "Usar tu aplicación de autenticación",
+	["mfaRecoveryCode"]: "Código de recuperación",
+	["mfaFailed"]: "El código de verificación no es válido.",
+	["mfaSetupRequired"]: "Configura la autenticación de dos factores para continuar.",
+	["mfaEnrollTitle"]: "Añadir un segundo factor",
+	["mfaEnrollTotp"]: "Aplicación de autenticación",
+	["mfaEnrollRecovery"]: "Códigos de recuperación",
+	["mfaScanQr"]: "Escanea este código QR con tu aplicación de autenticación.",
+	["mfaManualKey"]: "O introduce esta clave manualmente:",
+	["mfaConfirmIntro"]: "Introduce el código generado para confirmar la configuración.",
+	["mfaConfirm"]: "Confirmar",
+	["mfaRecoveryIntro"]: "Guarda estos códigos en un lugar seguro. Cada código se puede usar una vez.",
+	["mfaRecoverySave"]: "No podrás volver a ver estos códigos.",
+	["mfaDownload"]: "Descargar",
+	["mfaEnrolled"]: "El segundo factor se ha añadido.",
+	["mfaDeviceName"]: "Nombre del dispositivo",
+	["mfaNoDevices"]: "Aún no se han añadido dispositivos de autenticación.",
+	["mfaDeviceUnconfirmed"]: "no confirmado",
+	["mfaRecoveryNudge"]: "Añade códigos de recuperación de respaldo para poder iniciar sesión aunque pierdas el acceso a este segundo factor.",
+	["mfaRecoveryNudgeGenerate"]: "Generar códigos de recuperación",
+	["mfaRecoveryNudgeSkip"]: "Omitir por ahora",
+	["mfaUseEmail"]: "Usar un código por correo",
+	["mfaSendCode"]: "Enviar código",
+	["mfaCodeSent"]: "Se envió un código a tu correo electrónico.",
+	["mfaEnrollEmail"]: "Código por correo",
+	["mfaUsePasskey"]: "Usar una clave de acceso",
+	["mfaPasskeyPrompt"]: "Usa tu clave de acceso o llave de seguridad para continuar.",
+	["mfaEnrollWebauthn"]: "Clave de acceso / llave de seguridad",
+	["keyUseSignature"]: "Firma (sig)",
+	["keyUseEncryption"]: "Cifrado (enc)",
+	["keyImportMaterial"]: "Importar material de clave existente",
+	["keyMaterialOct"]: "Material de clave (32 bytes, base64)",
+	["keyMaterialPrivate"]: "Clave privada (PKCS#8, base64 o PEM)",
+	["keyMaterialPublic"]: "Clave pública (SPKI, base64 o PEM)"
 };
 //#endregion
 //#region src/catalogs/es/common.ts
@@ -1483,7 +1934,9 @@ const TranslatorTranslationCommonSpanish = {
 	["details"]: "Detalles",
 	["group"]: "Grupo",
 	["noItems"]: "La lista aún no contiene elementos.",
-	["processing"]: "Procesando"
+	["processing"]: "Procesando",
+	["request"]: "Solicitud",
+	["data"]: "Datos"
 };
 //#endregion
 //#region src/catalogs/es/entity.ts
@@ -1492,10 +1945,22 @@ const TranslatorTranslationEntitySpanish = {
 		one: "Cliente",
 		other: "Clientes"
 	}),
+	["consent"]: definePlural({
+		one: "Consentimiento",
+		other: "Consentimientos"
+	}),
+	["event"]: definePlural({
+		one: "Evento",
+		other: "Eventos"
+	}),
 	["identityProvider"]: definePlural({
 		one: "Proveedor de identidad",
 		other: "Proveedores de identidad"
 	}),
+	["key"]: definePlural({
+		one: "Clave",
+		other: "Claves"
+	}),
 	["permission"]: definePlural({
 		one: "Permiso",
 		other: "Permisos"
@@ -1524,6 +1989,10 @@ const TranslatorTranslationEntitySpanish = {
 		one: "Sesión",
 		other: "Sesiones"
 	}),
+	["trustAnchor"]: definePlural({
+		one: "Autoridad de certificación de confianza",
+		other: "Autoridades de certificación de confianza"
+	}),
 	["user"]: definePlural({
 		one: "Usuario",
 		other: "Usuarios"
@@ -1546,6 +2015,9 @@ const TranslatorTranslationErrorSpanish = {
 	[ErrorCode.PASSWORD_RECOVERY_DISABLED]: "La recuperación de contraseña está deshabilitada actualmente.",
 	[ErrorCode.EMAIL_VERIFICATION_REQUIRED]: "Primero debe verificar su dirección de correo electrónico.",
 	[ErrorCode.RESET_TOKEN_EXPIRED]: "El token de restablecimiento ha caducado. Solicite uno nuevo.",
+	[ErrorCode.LOGIN_ATTEMPT_THROTTLED]: "Demasiados intentos de inicio de sesión fallidos. Inténtelo de nuevo más tarde.",
+	[ErrorCode.MFA_ATTEMPT_THROTTLED]: "Demasiados intentos de verificación fallidos. Inténtelo de nuevo más tarde.",
+	[ErrorCode.MFA_NOT_CONFIGURABLE]: "La autenticación multifactor no está disponible en este servidor.",
 	[ErrorCode.STORAGE_INSUFFICIENT]: "No hay suficiente almacenamiento disponible para completar esta acción.",
 	[ErrorCode.JWK_INVALID]: "La clave web JSON no es válida.",
 	[ErrorCode.JWK_NOT_FOUND]: "No se pudo encontrar la clave web JSON.",
@@ -1559,6 +2031,8 @@ const TranslatorTranslationErrorSpanish = {
 	[ErrorCode.OAUTH_GRANT_TYPE_UNSUPPORTED]: "El tipo de concesión no es compatible.",
 	[ErrorCode.OAUTH_REQUEST_INVALID]: "La solicitud no es válida.",
 	[ErrorCode.OAUTH_LOGIN_REQUIRED]: "Debes iniciar sesión para continuar.",
+	[ErrorCode.OAUTH_MFA_REQUIRED]: "Se requiere un segundo factor para continuar.",
+	[ErrorCode.OAUTH_ACCESS_DENIED]: "No tienes permiso para acceder a esta aplicación.",
 	[ErrorCode.OAUTH_INTERACTION_REQUIRED]: "Se requiere interacción para continuar.",
 	[ErrorCode.OAUTH_ACCOUNT_SELECTION_REQUIRED]: "Selecciona una cuenta para continuar.",
 	[ErrorCode.OAUTH_CONSENT_REQUIRED]: "Se requiere tu consentimiento para continuar.",
@@ -1629,7 +2103,17 @@ const TranslatorTranslationFieldSpanish = {
 	["token"]: "Token",
 	["userInfo"]: "UserInfo",
 	["discovery"]: "Descubrimiento",
-	["redirectUrl"]: "URL de redirección"
+	["redirectUrl"]: "URL de redirección",
+	["accessPolicy"]: "Política de acceso",
+	["actor"]: "Actor",
+	["ref"]: "Referencia",
+	["path"]: "Ruta",
+	["method"]: "Método",
+	["use"]: "Uso",
+	["status"]: "Estado",
+	["priority"]: "Prioridad",
+	["signatureAlgorithm"]: "Algoritmo de firma",
+	["certificate"]: "Certificado"
 };
 //#endregion
 //#region src/catalogs/es/mail.ts
@@ -1643,7 +2127,11 @@ const TranslatorTranslationMailSpanish = {
 	["passwordResetIntro"]: "Usa el código de abajo para restablecer la contraseña de tu cuenta.",
 	["passwordResetAction"]: "Restablecer contraseña",
 	["passwordResetExpiry"]: "El código caduca en {{minutes}} minutos.",
-	["passwordResetHint"]: "Si no solicitaste restablecer la contraseña, puedes ignorar este correo: tu contraseña no cambiará."
+	["passwordResetHint"]: "Si no solicitaste restablecer la contraseña, puedes ignorar este correo: tu contraseña no cambiará.",
+	["mfaEmailOtpSubject"]: "Tu código de verificación",
+	["mfaEmailOtpIntro"]: "Usa el código de abajo para completar tu inicio de sesión.",
+	["mfaEmailOtpExpiry"]: "El código caduca en {{minutes}} minutos.",
+	["mfaEmailOtpHint"]: "Si no intentaste iniciar sesión, puedes ignorar este correo."
 };
 //#endregion
 //#region src/catalogs/es/vuecs.ts