@logto/phrases 1.24.0 → 1.25.0

package/lib/locales/en/translation/admin-console/sign-in-exp/index.js

@@ -98,7 +98,11 @@ const sign_in_exp = {
         sections: {
             account_security: {
                 title: 'ACCOUNT SECURITY',
-                description: 'Manage access to the Account API, enabling users to view or edit their identity information and authentication factors after signing into the application. Users must verify their identity to get a valid 10-minute verification record ID before making these security-related changes.',
+                description: 'Manage access to the Account API, enabling users to view or edit their identity information and authentication factors after signing into the application.',
+                security_verification: {
+                    title: 'Security verification',
+                    description: 'Before changing security settings, users must verify their identity to get a 10-minute verification record ID. To enable a verification method (email, phone, password), set the Account API permission to <strong>Read only</strong> (minimum) or <strong>Edit</strong> below so the system can detect if the user has it configured. <a>Learn more</a>',
+                },
                 groups: {
                     identifiers: {
                         title: 'Identifiers',
@@ -149,8 +153,9 @@ const sign_in_exp = {
         prebuilt_ui: {
             title: 'INTEGRATE PREBUILT UI',
             description: 'Quickly integrate out-of-the-box verification and security setting flows with prebuilt UI.',
+            permission_notice: 'To integrate these prebuilt flows, set the related Account API permissions to <strong>Edit</strong> in the settings below.',
             flows_title: 'Integrate out-of-the-box security setting flows',
-            flows_description: 'Combine your domain with the route to form your account setting URL (e.g., https://auth.foo.com/account/email). Optionally add a `redirect=` URL parameter to return users to your app after successfully updating.',
+            flows_description: 'Combine your domain with the route to form your account setting URL (e.g., https://auth.foo.com/account/email). Optionally add a `redirect=` URL parameter to return users to your app after successfully updating, or a `user_id=` parameter to ensure the correct user is logged in (auto re-login if mismatched).',
             tooltips: {
                 email: 'Update your primary email address',
                 phone: 'Update your primary phone number',

package/lib/locales/en/translation/admin-console/sign-in-exp/sign-up-and-sign-in.d.ts

@@ -43,8 +43,11 @@ declare const _default: Readonly<{
             set_up_more: string;
             go_to: string;
         };
+        settings_title: string;
         automatic_account_linking: string;
-        automatic_account_linking_label: string;
+        automatic_account_linking_tip: string;
+        required_sign_up_identifiers: string;
+        required_sign_up_identifiers_tip: string;
     };
     tip: {
         set_a_password: string;

package/lib/locales/en/translation/admin-console/sign-in-exp/sign-up-and-sign-in.js

@@ -43,8 +43,11 @@ const sign_up_and_sign_in = {
             set_up_more: 'Set up',
             go_to: 'other social connectors now.',
         },
-        automatic_account_linking: 'Automatic account linking',
-        automatic_account_linking_label: 'When switched on, if a user signs in with a social identity that is new to the system, and there is exactly one existing account with the same identifier (e.g., email), Logto will automatically link the account with the social identity instead of prompting the user for account linking.',
+        settings_title: 'Social sign-in experience',
+        automatic_account_linking: 'Automatically link accounts with the same identifier',
+        automatic_account_linking_tip: 'When enabled, if a user signs in with a new social identity and there is exactly one existing account with the same identifier (e.g., an email address), Logto will automatically link the social identity to that account. The user will not be asked to choose whether to link accounts.',
+        required_sign_up_identifiers: 'Require users to provide missing sign-up identifier',
+        required_sign_up_identifiers_tip: 'When enabled, users logging in via social providers must fill in any missing required sign-up identifier (such as email) before completing their login. \n\nIf disabled, users can proceed without providing missing identifiers, even if the social account didn’t sync them.',
     },
     tip: {
         set_a_password: 'A unique set of a password to your username is a must.',

package/lib/locales/en/translation/admin-console/subscription/index.d.ts

@@ -431,6 +431,9 @@ declare const _default: Readonly<{
             tooltip: string;
             tooltip_for_enterprise: string;
         };
+        m2mTokens: {
+            title: string;
+        };
         hooks: {
             title: string;
             tooltip: string;

package/lib/locales/en/translation/admin-console/subscription/usage.d.ts

@@ -55,6 +55,9 @@ declare const _default: Readonly<{
         tooltip: string;
         tooltip_for_enterprise: string;
     };
+    m2mTokens: {
+        title: string;
+    };
     hooks: {
         title: string;
         tooltip: string;

package/lib/locales/en/translation/admin-console/subscription/usage.js

@@ -55,6 +55,9 @@ const usage = {
         tooltip: 'Add-on feature priced at ${{price, number}} per {{tokenLimit}} tokens. The first {{basicQuota}} tokens is included.',
         tooltip_for_enterprise: 'The first {{basicQuota}} tokens is included and free to use in your contract-based plan. If you need more, ${{price, number}} per {{tokenLimit}} tokens per month.',
     },
+    m2mTokens: {
+        title: 'M2M tokens',
+    },
     hooks: {
         title: 'Hooks',
         tooltip: 'Add-on feature priced at ${{price, number}} per hook. The first 10 hooks are included.',

package/lib/locales/en/translation/admin-console/tenants.d.ts

@@ -24,6 +24,10 @@ declare const _default: Readonly<{
         development_description: string;
         production_description: string;
         tenant_info_saved: string;
+        tenant_mfa: string;
+        tenant_mfa_description: string;
+        enterprise_sso: string;
+        enterprise_sso_description: string;
     };
     full_env_tag: {
         development: string;
@@ -44,6 +48,7 @@ declare const _default: Readonly<{
     create_modal: {
         title: string;
         subtitle: string;
+        tenant_id: string;
         tenant_usage_purpose: string;
         development_description: string;
         development_description_for_private_regions: string;
@@ -55,6 +60,8 @@ declare const _default: Readonly<{
         tenant_created: string;
         invitation_failed: string;
         tenant_type_description: string;
+        tenant_id_invalid: string;
+        tenant_id_placeholder: string;
     };
     dev_tenant_migration: {
         title: string;

package/lib/locales/en/translation/admin-console/tenants.js

@@ -24,6 +24,10 @@ const tenants = {
         development_description: "For testing only and shouldn't be used in production. No subscription is required. It has all the pro features but has limitations like a sign-in banner.",
         production_description: 'Intended for apps that are being used by end-users and may require a paid subscription.',
         tenant_info_saved: 'Tenant information saved successfully.',
+        tenant_mfa: 'Multi-factor authentication',
+        tenant_mfa_description: 'Require your members to set up multi-factor authentication to access this tenant.',
+        enterprise_sso: 'Enterprise SSO',
+        enterprise_sso_description: "Available on paid plans. Contact us to enable enterprise SSO so all members can sign in to the Logto Cloud Console using your organization's identity provider.",
     },
     full_env_tag: {
         development: 'Development',
@@ -44,6 +48,7 @@ const tenants = {
     create_modal: {
         title: 'Create tenant',
         subtitle: 'Create a new tenant that has isolated resources and users.',
+        tenant_id: 'Tenant ID (optional)',
         tenant_usage_purpose: 'What do you want to use this tenant for?',
         development_description: "For testing only and shouldn't be used in production. No subscription is required.",
         development_description_for_private_regions: "For testing only and shouldn't be used in production.",
@@ -55,6 +60,8 @@ const tenants = {
         tenant_created: 'Tenant created successfully.',
         invitation_failed: 'Some invitation failed to send. Please try again in Settings -> Members later.',
         tenant_type_description: 'This cannot be changed after creation.',
+        tenant_id_invalid: 'Tenant ID can only contain lowercase letters, numbers, and hyphens, and must not exceed {{max}} characters.',
+        tenant_id_placeholder: 'Your tenant ID',
     },
     dev_tenant_migration: {
         title: 'You can now try our Pro features for free by creating a new "Development tenant"!',

package/lib/locales/en/translation/index.d.ts

@@ -253,6 +253,7 @@ declare const _default: Readonly<{
             redirect_uri_placeholder_native: string;
             redirect_uri_tip: string;
             mixed_redirect_uri_warning: string;
+            wildcard_redirect_uri_warning: string;
             post_sign_out_redirect_uri: string;
             post_sign_out_redirect_uris: string;
             post_sign_out_redirect_uri_placeholder: string;
@@ -276,6 +277,11 @@ declare const _default: Readonly<{
             backchannel_logout_uri: string;
             backchannel_logout_uri_session_required: string;
             backchannel_logout_uri_session_required_description: string;
+            token_exchange: string;
+            token_exchange_description: string;
+            allow_token_exchange: string;
+            allow_token_exchange_description: string;
+            allow_token_exchange_public_client_warning: string;
             delete_description: string;
             enter_your_application_name: string;
             application_deleted: string;
@@ -791,6 +797,7 @@ declare const _default: Readonly<{
             trust_unverified_email: string;
             trust_unverified_email_label: string;
             trust_unverified_email_tip: string;
+            trust_unverified_email_tip_oidc: string;
             offline_access: {
                 label: string;
                 description: string;
@@ -1248,6 +1255,10 @@ declare const _default: Readonly<{
                     account_security: {
                         title: string;
                         description: string;
+                        security_verification: {
+                            title: string;
+                            description: string;
+                        };
                         groups: {
                             identifiers: {
                                 title: string;
@@ -1298,6 +1309,7 @@ declare const _default: Readonly<{
                 prebuilt_ui: {
                     title: string;
                     description: string;
+                    permission_notice: string;
                     flows_title: string;
                     flows_description: string;
                     tooltips: {
@@ -1360,8 +1372,11 @@ declare const _default: Readonly<{
                         set_up_more: string;
                         go_to: string;
                     };
+                    settings_title: string;
                     automatic_account_linking: string;
-                    automatic_account_linking_label: string;
+                    automatic_account_linking_tip: string;
+                    required_sign_up_identifiers: string;
+                    required_sign_up_identifiers_tip: string;
                 };
                 tip: {
                     set_a_password: string;
@@ -1811,6 +1826,20 @@ declare const _default: Readonly<{
                 about_to_start_deletion: string;
                 permanently_delete: string;
             };
+            mfa: {
+                title: string;
+                section_description: string;
+                two_step_verification: string;
+                not_configured: string;
+                configured: string;
+                passkeys_count_one: string;
+                passkeys_count_other: string;
+                backup_codes_count_one: string;
+                backup_codes_count_other: string;
+                add: string;
+                view: string;
+                remove: string;
+            };
             set: string;
             change: string;
             link: string;
@@ -2046,6 +2075,10 @@ declare const _default: Readonly<{
                 development_description: string;
                 production_description: string;
                 tenant_info_saved: string;
+                tenant_mfa: string;
+                tenant_mfa_description: string;
+                enterprise_sso: string;
+                enterprise_sso_description: string;
             };
             full_env_tag: {
                 development: string;
@@ -2066,6 +2099,7 @@ declare const _default: Readonly<{
             create_modal: {
                 title: string;
                 subtitle: string;
+                tenant_id: string;
                 tenant_usage_purpose: string;
                 development_description: string;
                 development_description_for_private_regions: string;
@@ -2077,6 +2111,8 @@ declare const _default: Readonly<{
                 tenant_created: string;
                 invitation_failed: string;
                 tenant_type_description: string;
+                tenant_id_invalid: string;
+                tenant_id_placeholder: string;
             };
             dev_tenant_migration: {
                 title: string;
@@ -2615,6 +2651,9 @@ declare const _default: Readonly<{
                     tooltip: string;
                     tooltip_for_enterprise: string;
                 };
+                m2mTokens: {
+                    title: string;
+                };
                 hooks: {
                     title: string;
                     tooltip: string;

package/lib/locales/es/errors/application.d.ts

@@ -4,6 +4,7 @@ declare const _default: Readonly<{
     invalid_role_type: string;
     invalid_third_party_application_type: string;
     third_party_application_only: string;
+    third_party_application_cannot_enable_token_exchange: string;
     user_consent_scopes_not_found: string;
     consent_management_api_scopes_not_allowed: string;
     protected_app_metadata_is_required: string;

package/lib/locales/es/errors/application.js

@@ -4,6 +4,7 @@ const application = {
     invalid_role_type: 'No se puede asignar un rol de tipo usuario a una aplicación de máquina a máquina.',
     invalid_third_party_application_type: 'Solo las aplicaciones web tradicionales, de una sola página y nativas pueden ser marcadas como aplicaciones de terceros.',
     third_party_application_only: 'La función solo está disponible para aplicaciones de terceros.',
+    third_party_application_cannot_enable_token_exchange: 'Las aplicaciones de terceros no pueden habilitar el intercambio de tokens.',
     user_consent_scopes_not_found: 'Ámbitos de consentimiento de usuario no válidos.',
     consent_management_api_scopes_not_allowed: 'Los ámbitos de la API de administración no están permitidos.',
     protected_app_metadata_is_required: 'Se requiere metadatos de aplicación protegida.',

package/lib/locales/es/errors/index.d.ts

@@ -53,6 +53,7 @@ declare const _default: Readonly<{
         email_not_exist: string;
         phone_not_exist: string;
         identity_not_exist: string;
+        sso_identity_not_exist: string;
         identity_already_in_use: string;
         social_account_exists_in_profile: string;
         cannot_delete_self: string;
@@ -88,6 +89,7 @@ declare const _default: Readonly<{
         phone_required: string;
         enterprise_sso_identity_not_exists: string;
         identity_not_exists_in_current_user: string;
+        passkey_preferred: string;
     }>;
     password: Readonly<{
         unsupported_encryption_method: string;
@@ -213,6 +215,7 @@ declare const _default: Readonly<{
         phone_verification_code_cannot_be_used_for_mfa: string;
         email_verification_code_cannot_be_used_for_sign_in: string;
         phone_verification_code_cannot_be_used_for_sign_in: string;
+        adaptive_mfa_requires_mfa: string;
         duplicated_sign_up_identifiers: string;
         missing_sign_up_identifiers: string;
         invalid_custom_email_blocklist_format: string;
@@ -298,6 +301,7 @@ declare const _default: Readonly<{
         invalid_role_type: string;
         invalid_third_party_application_type: string;
         third_party_application_only: string;
+        third_party_application_cannot_enable_token_exchange: string;
         user_consent_scopes_not_found: string;
         consent_management_api_scopes_not_allowed: string;
         protected_app_metadata_is_required: string;

package/lib/locales/es/errors/sign-in-experiences.d.ts

@@ -16,6 +16,7 @@ declare const _default: Readonly<{
     phone_verification_code_cannot_be_used_for_mfa: string;
     email_verification_code_cannot_be_used_for_sign_in: string;
     phone_verification_code_cannot_be_used_for_sign_in: string;
+    adaptive_mfa_requires_mfa: string;
     duplicated_sign_up_identifiers: string;
     missing_sign_up_identifiers: string;
     invalid_custom_email_blocklist_format: string;

package/lib/locales/es/errors/sign-in-experiences.js

@@ -16,6 +16,7 @@ const sign_in_experiences = {
     phone_verification_code_cannot_be_used_for_mfa: 'El código de verificación de SMS no se puede usar para MFA cuando la verificación de SMS está habilitada para el inicio de sesión.',
     email_verification_code_cannot_be_used_for_sign_in: 'El código de verificación de correo electrónico no se puede usar para el inicio de sesión cuando está habilitado para MFA.',
     phone_verification_code_cannot_be_used_for_sign_in: 'El código de verificación de SMS no se puede usar para el inicio de sesión cuando está habilitado para MFA.',
+    adaptive_mfa_requires_mfa: 'Debes habilitar MFA antes de habilitar Adaptive MFA.',
     duplicated_sign_up_identifiers: 'Identificadores de registro duplicados detectados.',
     missing_sign_up_identifiers: 'El identificador de registro principal no puede estar vacío.',
     invalid_custom_email_blocklist_format: 'Elementos no válidos de la lista de bloqueo de correos electrónicos personalizados: {{items, list(type:conjunction)}}. Cada elemento debe ser una dirección de correo electrónico o dominio de correo electrónico válido, por ejemplo, foo@ejemplo.com o @ejemplo.com.',

package/lib/locales/es/errors/user.d.ts

@@ -7,6 +7,7 @@ declare const _default: Readonly<{
     email_not_exist: string;
     phone_not_exist: string;
     identity_not_exist: string;
+    sso_identity_not_exist: string;
     identity_already_in_use: string;
     social_account_exists_in_profile: string;
     cannot_delete_self: string;
@@ -42,5 +43,6 @@ declare const _default: Readonly<{
     phone_required: string;
     enterprise_sso_identity_not_exists: string;
     identity_not_exists_in_current_user: string;
+    passkey_preferred: string;
 }>;
 export default _default;

package/lib/locales/es/errors/user.js

@@ -7,6 +7,7 @@ const user = {
     email_not_exist: 'La dirección de correo electrónico no ha sido registrada aún.',
     phone_not_exist: 'El número de teléfono no ha sido registrado aún.',
     identity_not_exist: 'La cuenta social no ha sido registrada aún.',
+    sso_identity_not_exist: 'La cuenta SSO empresarial no ha sido registrada aún.',
     identity_already_in_use: 'La cuenta social ha sido asociada a una cuenta existente.',
     social_account_exists_in_profile: 'Ya has asociado esta cuenta social.',
     cannot_delete_self: 'No puedes eliminarte a ti mismo.',
@@ -42,5 +43,6 @@ const user = {
     phone_required: 'El número de teléfono es un identificador requerido, no puedes establecerlo como nulo.',
     enterprise_sso_identity_not_exists: 'El usuario no tiene una identidad empresarial vinculada al ID de conector SSO especificado: {{ ssoConnectorId }}.',
     identity_not_exists_in_current_user: 'La identidad especificada no existe en la cuenta de usuario actual. Por favor, vincula la identidad antes de continuar.',
+    passkey_preferred: 'Crea una passkey para simplificar tu inicio de sesión.',
 };
 export default Object.freeze(user);

package/lib/locales/es/index.d.ts

@@ -254,6 +254,7 @@ declare const _default: Readonly<{
                 redirect_uri_placeholder_native: string;
                 redirect_uri_tip: string;
                 mixed_redirect_uri_warning: string;
+                wildcard_redirect_uri_warning: string;
                 post_sign_out_redirect_uri: string;
                 post_sign_out_redirect_uris: string;
                 post_sign_out_redirect_uri_placeholder: string;
@@ -277,6 +278,11 @@ declare const _default: Readonly<{
                 backchannel_logout_uri: string;
                 backchannel_logout_uri_session_required: string;
                 backchannel_logout_uri_session_required_description: string;
+                token_exchange: string;
+                token_exchange_description: string;
+                allow_token_exchange: string;
+                allow_token_exchange_description: string;
+                allow_token_exchange_public_client_warning: string;
                 delete_description: string;
                 enter_your_application_name: string;
                 application_deleted: string;
@@ -792,6 +798,7 @@ declare const _default: Readonly<{
                 trust_unverified_email: string;
                 trust_unverified_email_label: string;
                 trust_unverified_email_tip: string;
+                trust_unverified_email_tip_oidc: string;
                 offline_access: {
                     label: string;
                     description: string;
@@ -1249,6 +1256,10 @@ declare const _default: Readonly<{
                         account_security: {
                             title: string;
                             description: string;
+                            security_verification: {
+                                title: string;
+                                description: string;
+                            };
                             groups: {
                                 identifiers: {
                                     title: string;
@@ -1299,6 +1310,7 @@ declare const _default: Readonly<{
                     prebuilt_ui: {
                         title: string;
                         description: string;
+                        permission_notice: string;
                         flows_title: string;
                         flows_description: string;
                         tooltips: {
@@ -1361,8 +1373,11 @@ declare const _default: Readonly<{
                             set_up_more: string;
                             go_to: string;
                         };
+                        settings_title: string;
                         automatic_account_linking: string;
-                        automatic_account_linking_label: string;
+                        automatic_account_linking_tip: string;
+                        required_sign_up_identifiers: string;
+                        required_sign_up_identifiers_tip: string;
                     };
                     tip: {
                         set_a_password: string;
@@ -1812,6 +1827,20 @@ declare const _default: Readonly<{
                     about_to_start_deletion: string;
                     permanently_delete: string;
                 };
+                mfa: {
+                    title: string;
+                    section_description: string;
+                    two_step_verification: string;
+                    not_configured: string;
+                    configured: string;
+                    passkeys_count_one: string;
+                    passkeys_count_other: string;
+                    backup_codes_count_one: string;
+                    backup_codes_count_other: string;
+                    add: string;
+                    view: string;
+                    remove: string;
+                };
                 set: string;
                 change: string;
                 link: string;
@@ -2047,6 +2076,10 @@ declare const _default: Readonly<{
                     development_description: string;
                     production_description: string;
                     tenant_info_saved: string;
+                    tenant_mfa: string;
+                    tenant_mfa_description: string;
+                    enterprise_sso: string;
+                    enterprise_sso_description: string;
                 };
                 full_env_tag: {
                     development: string;
@@ -2078,6 +2111,8 @@ declare const _default: Readonly<{
                     tenant_created: string;
                     invitation_failed: string;
                     tenant_type_description: string;
+                    tenant_id_invalid: string;
+                    tenant_id_placeholder: string;
                 };
                 dev_tenant_migration: {
                     title: string;
@@ -2616,6 +2651,9 @@ declare const _default: Readonly<{
                         tooltip: string;
                         tooltip_for_enterprise: string;
                     };
+                    m2mTokens: {
+                        title: string;
+                    };
                     hooks: {
                         title: string;
                         tooltip: string;
@@ -3394,6 +3432,7 @@ declare const _default: Readonly<{
             email_not_exist: string;
             phone_not_exist: string;
             identity_not_exist: string;
+            sso_identity_not_exist: string;
             identity_already_in_use: string;
             social_account_exists_in_profile: string;
             cannot_delete_self: string;
@@ -3429,6 +3468,7 @@ declare const _default: Readonly<{
             phone_required: string;
             enterprise_sso_identity_not_exists: string;
             identity_not_exists_in_current_user: string;
+            passkey_preferred: string;
         }>;
         password: Readonly<{
             unsupported_encryption_method: string;
@@ -3554,6 +3594,7 @@ declare const _default: Readonly<{
             phone_verification_code_cannot_be_used_for_mfa: string;
             email_verification_code_cannot_be_used_for_sign_in: string;
             phone_verification_code_cannot_be_used_for_sign_in: string;
+            adaptive_mfa_requires_mfa: string;
             duplicated_sign_up_identifiers: string;
             missing_sign_up_identifiers: string;
             invalid_custom_email_blocklist_format: string;
@@ -3639,6 +3680,7 @@ declare const _default: Readonly<{
             invalid_role_type: string;
             invalid_third_party_application_type: string;
             third_party_application_only: string;
+            third_party_application_cannot_enable_token_exchange: string;
             user_consent_scopes_not_found: string;
             consent_management_api_scopes_not_allowed: string;
             protected_app_metadata_is_required: string;

package/lib/locales/es/translation/admin-console/application-details.d.ts

@@ -36,6 +36,7 @@ declare const _default: Readonly<{
     redirect_uri_placeholder_native: string;
     redirect_uri_tip: string;
     mixed_redirect_uri_warning: string;
+    wildcard_redirect_uri_warning: string;
     post_sign_out_redirect_uri: string;
     post_sign_out_redirect_uris: string;
     post_sign_out_redirect_uri_placeholder: string;
@@ -59,6 +60,11 @@ declare const _default: Readonly<{
     backchannel_logout_uri: string;
     backchannel_logout_uri_session_required: string;
     backchannel_logout_uri_session_required_description: string;
+    token_exchange: string;
+    token_exchange_description: string;
+    allow_token_exchange: string;
+    allow_token_exchange_description: string;
+    allow_token_exchange_public_client_warning: string;
     delete_description: string;
     enter_your_application_name: string;
     application_deleted: string;

package/lib/locales/es/translation/admin-console/application-details.js

@@ -36,6 +36,7 @@ const application_details = {
     redirect_uri_placeholder_native: 'io.logto://callback',
     redirect_uri_tip: 'El URI hacia donde se redirecciona después de que un usuario inicie sesión (correctamente o no). Consulta OpenID Connect <a>AuthRequest</a> para más información.',
     mixed_redirect_uri_warning: 'Tu tipo de aplicación no es compatible con al menos uno de los URIs de redireccionamiento. No sigue las mejores prácticas y recomendamos encarecidamente mantener los URIs de redireccionamiento consistentes.',
+    wildcard_redirect_uri_warning: 'Los URIs de redireccionamiento con comodín no son estándar OIDC y pueden aumentar la superficie de ataque. Úsalos con cuidado y prefiere URIs de redireccionamiento exactos siempre que sea posible.',
     post_sign_out_redirect_uri: 'Post Sign-out URI de Redireccionamiento',
     post_sign_out_redirect_uris: 'Post Sign-out URIs de Redireccionamiento',
     post_sign_out_redirect_uri_placeholder: 'https://tu.pagina.com/home',
@@ -59,6 +60,11 @@ const application_details = {
     backchannel_logout_uri: 'URI de cierre de sesión por backchannel',
     backchannel_logout_uri_session_required: '¿Es necesaria la sesión?',
     backchannel_logout_uri_session_required_description: 'Cuando está habilitado, el RP requiere que una reclamación `sid` (ID de sesión) se incluya en el token de cierre de sesión para identificar la sesión del RP con el OP cuando se usa el `backchannel_logout_uri`.',
+    token_exchange: 'Intercambio de tokens',
+    token_exchange_description: 'Gestiona la configuración de intercambio de tokens para esta aplicación.',
+    allow_token_exchange: 'Permitir intercambio de tokens',
+    allow_token_exchange_description: 'Permite que esta aplicación inicie solicitudes de intercambio de tokens. Esto es necesario para la <impersonationLink>suplantación de usuario</impersonationLink> y los <patLink>tokens de acceso personal</patLink>.',
+    allow_token_exchange_public_client_warning: 'No se recomienda habilitar el intercambio de tokens para clientes públicos (aplicación de una sola página / aplicación nativa). Los clientes públicos no pueden almacenar credenciales de forma segura, lo que puede exponer tu aplicación a riesgos de suplantación de tokens.',
     delete_description: 'Esta acción no se puede deshacer. Eliminará permanentemente la aplicación. Ingresa el nombre de la aplicación <span>{{name}}</span> para confirmar.',
     enter_your_application_name: 'Ingresa el nombre de tu aplicación',
     application_deleted: 'Se ha eliminado exitosamente la aplicación {{name}}',

package/lib/locales/es/translation/admin-console/enterprise-sso-details.d.ts

@@ -93,6 +93,7 @@ declare const _default: Readonly<{
     trust_unverified_email: string;
     trust_unverified_email_label: string;
     trust_unverified_email_tip: string;
+    trust_unverified_email_tip_oidc: string;
     offline_access: {
         label: string;
         description: string;

package/lib/locales/es/translation/admin-console/enterprise-sso-details.js

@@ -93,6 +93,7 @@ const enterprise_sso_details = {
     trust_unverified_email: 'Confiar en el correo electrónico no verificado',
     trust_unverified_email_label: 'Confiar siempre en las direcciones de correo electrónico no verificadas devueltas por el proveedor de identidad',
     trust_unverified_email_tip: 'El conector Entra ID (OIDC) no devuelve la reclamación `email_verified`, lo que significa que las direcciones de correo electrónico de Azure no están garantizadas como verificadas. Por defecto, Logto no sincronizará direcciones de correo electrónico no verificadas con el perfil del usuario. Habilite esta opción solo si confía en todas las direcciones de correo electrónico del directorio Entra ID.',
+    trust_unverified_email_tip_oidc: 'El conector OIDC puede no devolver la reclamación `email_verified`, lo que significa que las direcciones de correo electrónico del IdP no están garantizadas como verificadas. Por defecto, Logto no sincronizará direcciones de correo electrónico no verificadas con el perfil del usuario. Habilite esta opción solo si confía en todas las direcciones de correo electrónico del IdP.',
     offline_access: {
         label: 'Refrescar token de acceso',
         description: 'Habilita el acceso "offline" de Google para solicitar un token de actualización, permitiendo que tu aplicación refresque el token de acceso sin la reautorización del usuario.',

package/lib/locales/es/translation/admin-console/enterprise-subscription.d.ts

@@ -1,56 +1,33 @@
 declare const _default: Readonly<{
-    /** UNTRANSLATED */
     page_title: string;
-    /** UNTRANSLATED */
     title: string;
-    /** UNTRANSLATED */
     subtitle: string;
     tab: {
-        /** UNTRANSLATED */
         subscription: string;
-        /** UNTRANSLATED */
         billing_history: string;
     };
     subscription: {
-        /** UNTRANSLATED */
         title: string;
-        /** UNTRANSLATED */
         description: string;
-        /** UNTRANSLATED */
         enterprise_plan_title: string;
-        /** UNTRANSLATED */
         enterprise_plan_description: string;
-        /** UNTRANSLATED */
         add_on_title: string;
-        /** UNTRANSLATED */
         add_on_description: string;
-        /** UNTRANSLATED */
         included: string;
-        /** UNTRANSLATED */
         over_quota: string;
         basic_plan_column_title: {
-            /** UNTRANSLATED */
             product: string;
-            /** UNTRANSLATED */
             usage: string;
-            /** UNTRANSLATED */
             quota: string;
         };
         add_on_column_title: {
-            /** UNTRANSLATED */
             product: string;
-            /** UNTRANSLATED */
             unit_price: string;
-            /** UNTRANSLATED */
             quantity: string;
-            /** UNTRANSLATED */
             total_price: string;
         };
-        /** UNTRANSLATED */
         add_on_sku_price: string;
-        /** UNTRANSLATED */
         private_region_title: string;
-        /** UNTRANSLATED */
         shared_cross_tenants: string;
     };
 }>;