@plone-collective/volto-identity 1.0.0-alpha.6 → 1.0.0-alpha.7

package/.changelog.draft

@@ -1,8 +1,33 @@
-## 1.0.0-alpha.6 (2026-09-10)
+## 1.0.0-alpha.7 (2026-09-12)
+
+
+### Breaking
+
+- Moved the add-on's frontend settings under `config.settings.identity`. `config.settings.identityShowPloneLogin` is now `config.settings.identity.showPloneLogin`, and the old key is no longer read; `RAZZLE_IDENTITY_SHOW_PLONE_LOGIN` still overrides it. The avatar palette is configurable as `config.settings.identity.avatarColors`, and defaults to the shipped palette. A palette a project supplies is not checked for contrast. @ericof [#89](https://github.com/collective/pas-plugins-identity/issues/89)
 
 
 ### Feature
 
-- Asked for the caller's profile with the content request instead of separately. `@my-profile` is registered in `apiExpanders` for `GET_CONTENT`, and the profile gate now prefers the answer that arrived with the page, falling back to its own request on a route that fetches no content — `/login`, `/identities`, a control panel — or against a backend too old to offer the component. The expanded answer is used only when the content in the store is the page being rendered: Volto keeps the last content it loaded, so trusting it anywhere else would read a stale answer to a question whose whole point is freshness. `FirstLogin` and `Identities` no longer ask at all while anonymous; both routes are registered like any other, so an anonymous visitor opening them directly fired requests that could only answer 401. @ericof [#71](https://github.com/collective/pas-plugins-identity/issues/71)
+- Added the `/confirm-email` route, where a person whose profile is waiting on an address confirmation chooses which of their verified addresses this site uses for them. `ProfileGate` and the first-login route send them there instead of to the edit form, which cannot answer the question; a profile missing fields as well still goes to the form first. @ericof [#80](https://github.com/collective/pas-plugins-identity/issues/80)
+- Gave the providers control panel's settings, add and edit forms their own routes, so each can be linked to and reloaded, and the browser's Back button returns to the provider list. @ericof [#81](https://github.com/collective/pas-plugins-identity/issues/81)
+- Added export actions to the providers control panel, one per provider and one for every provider, each downloading the registry document under the filename it belongs under in a profile. The panel says beside them that the file carries client secrets in the clear, and offers them only to someone allowed to export. @ericof [#83](https://github.com/collective/pas-plugins-identity/issues/83)
+- Gave the providers control panel's list a Login screen column, and let its rows be dragged into the order the login page offers them. A dropped row moves at once, and goes back if the new order cannot be saved. @ericof [#84](https://github.com/collective/pas-plugins-identity/issues/84)
+- The provider form's Icon field shows the driver's default icon until one is uploaded. @ericof [#86](https://github.com/collective/pas-plugins-identity/issues/86)
+- Drew the login button of a provider on the new `keycloak` driver in the OpenID Connect colours. @ericof [#87](https://github.com/collective/pas-plugins-identity/issues/87)
+- Added a Sign-in block, offered inside a grid, and kept out of a page's block chooser until a project lifts its restriction. It shows a visitor the login card `/login` shows, and greets somebody signed in with a welcome message and a summary: a link to their Profile, their preferred address, what they signed in with and when they last did, each line switchable in the sidebar. The login page's store and routing moved into a `useLogin` hook the two share, and its card into `LoginCard`, which `LoginPanel` puts on a page of its own. @ericof [#99](https://github.com/collective/pas-plugins-identity/issues/99)
+- Made the login page's redirect to a site's only provider something a site can turn off, with `config.settings.identity.redirectToSoleProvider` or, at run time, `RAZZLE_IDENTITY_REDIRECT_TO_SOLE_PROVIDER`. It stays on by default. Even when on, it no longer fires for a visitor who arrived already signed in, which looped against a provider that still had a session, or for `/login?choose=1`, which the callback page now links to when a sign-in fails. @ericof [#100](https://github.com/collective/pas-plugins-identity/issues/100)
+
+
+### Bugfix
+
+- Gave the Plone site driver's login button the Plone colours. Its class is `identity-provider--plone-identity`, and the stylesheet knew only `identity-provider--plone`, which the password button keeps. @ericof [#86](https://github.com/collective/pas-plugins-identity/issues/86)
+- Darkened the first colour of the avatar palette from `#0083be` to `#007db6`. At 4.21:1 against the white initials it was the one shipped colour below WCAG AA; `#007db6` is the lightest colour of its hue that clears 4.5:1. @ericof [#89](https://github.com/collective/pas-plugins-identity/issues/89)
+- Linked the groups listed under "Groups in this group" and "Part of" on a group's page to their own pages, the way members are linked to their Profiles. A group the site has no page for is shown as text. @ericof [#90](https://github.com/collective/pas-plugins-identity/issues/90)
+
+
+### Internal
+
+- Moved the Storybook decorators `withPage` and `withUserMenu` from `src/storybook` to `src/stories`, beside the fixtures, so Storybook's support code lives in one directory. @ericof [#88](https://github.com/collective/pas-plugins-identity/issues/88)
+- Moved the `IdentitySettings` type, and the augmentation that adds `identity` to Volto's settings, from `config/settings` to `types/settings`, beside the package's other types. It is exported from `types` like them. @ericof [#98](https://github.com/collective/pas-plugins-identity/issues/98)
 
 

package/CHANGELOG.md

@@ -8,6 +8,38 @@
 
 <!-- towncrier release notes start -->
 
+## 1.0.0-alpha.7 (2026-09-12)
+
+
+### Breaking
+
+- Moved the add-on's frontend settings under `config.settings.identity`. `config.settings.identityShowPloneLogin` is now `config.settings.identity.showPloneLogin`, and the old key is no longer read; `RAZZLE_IDENTITY_SHOW_PLONE_LOGIN` still overrides it. The avatar palette is configurable as `config.settings.identity.avatarColors`, and defaults to the shipped palette. A palette a project supplies is not checked for contrast. @ericof [#89](https://github.com/collective/pas-plugins-identity/issues/89)
+
+
+### Feature
+
+- Added the `/confirm-email` route, where a person whose profile is waiting on an address confirmation chooses which of their verified addresses this site uses for them. `ProfileGate` and the first-login route send them there instead of to the edit form, which cannot answer the question; a profile missing fields as well still goes to the form first. @ericof [#80](https://github.com/collective/pas-plugins-identity/issues/80)
+- Gave the providers control panel's settings, add and edit forms their own routes, so each can be linked to and reloaded, and the browser's Back button returns to the provider list. @ericof [#81](https://github.com/collective/pas-plugins-identity/issues/81)
+- Added export actions to the providers control panel, one per provider and one for every provider, each downloading the registry document under the filename it belongs under in a profile. The panel says beside them that the file carries client secrets in the clear, and offers them only to someone allowed to export. @ericof [#83](https://github.com/collective/pas-plugins-identity/issues/83)
+- Gave the providers control panel's list a Login screen column, and let its rows be dragged into the order the login page offers them. A dropped row moves at once, and goes back if the new order cannot be saved. @ericof [#84](https://github.com/collective/pas-plugins-identity/issues/84)
+- The provider form's Icon field shows the driver's default icon until one is uploaded. @ericof [#86](https://github.com/collective/pas-plugins-identity/issues/86)
+- Drew the login button of a provider on the new `keycloak` driver in the OpenID Connect colours. @ericof [#87](https://github.com/collective/pas-plugins-identity/issues/87)
+- Added a Sign-in block, offered inside a grid, and kept out of a page's block chooser until a project lifts its restriction. It shows a visitor the login card `/login` shows, and greets somebody signed in with a welcome message and a summary: a link to their Profile, their preferred address, what they signed in with and when they last did, each line switchable in the sidebar. The login page's store and routing moved into a `useLogin` hook the two share, and its card into `LoginCard`, which `LoginPanel` puts on a page of its own. @ericof [#99](https://github.com/collective/pas-plugins-identity/issues/99)
+- Made the login page's redirect to a site's only provider something a site can turn off, with `config.settings.identity.redirectToSoleProvider` or, at run time, `RAZZLE_IDENTITY_REDIRECT_TO_SOLE_PROVIDER`. It stays on by default. Even when on, it no longer fires for a visitor who arrived already signed in, which looped against a provider that still had a session, or for `/login?choose=1`, which the callback page now links to when a sign-in fails. @ericof [#100](https://github.com/collective/pas-plugins-identity/issues/100)
+
+
+### Bugfix
+
+- Gave the Plone site driver's login button the Plone colours. Its class is `identity-provider--plone-identity`, and the stylesheet knew only `identity-provider--plone`, which the password button keeps. @ericof [#86](https://github.com/collective/pas-plugins-identity/issues/86)
+- Darkened the first colour of the avatar palette from `#0083be` to `#007db6`. At 4.21:1 against the white initials it was the one shipped colour below WCAG AA; `#007db6` is the lightest colour of its hue that clears 4.5:1. @ericof [#89](https://github.com/collective/pas-plugins-identity/issues/89)
+- Linked the groups listed under "Groups in this group" and "Part of" on a group's page to their own pages, the way members are linked to their Profiles. A group the site has no page for is shown as text. @ericof [#90](https://github.com/collective/pas-plugins-identity/issues/90)
+
+
+### Internal
+
+- Moved the Storybook decorators `withPage` and `withUserMenu` from `src/storybook` to `src/stories`, beside the fixtures, so Storybook's support code lives in one directory. @ericof [#88](https://github.com/collective/pas-plugins-identity/issues/88)
+- Moved the `IdentitySettings` type, and the augmentation that adds `identity` to Volto's settings, from `config/settings` to `types/settings`, beside the package's other types. It is exported from `types` like them. @ericof [#98](https://github.com/collective/pas-plugins-identity/issues/98)
+
 ## 1.0.0-alpha.6 (2026-09-10)
 
 

package/README.md

@@ -40,7 +40,9 @@ Everything here renders from what the backend serves. The add-on describes no sc
 The check is deliberately not `Boolean(value)`, which reads the string `"false"` as true and would leave the password form up for an operator who had just switched it off.
 
 The form is **off** by default: a site installing this add-on has external providers, and offering a password form beside them invites people to make a second way into the same account.
-A site that is itself an identity provider is the case that wants it on, and sets `config.settings.identityShowPloneLogin` in its own configuration. The environment variable still wins over that.
+A site that is itself an identity provider is the case that wants it on, and sets `config.settings.identity.showPloneLogin` in its own configuration. The environment variable still wins over that.
+
+Every setting the add-on reads is under `config.settings.identity`: `showPloneLogin`, and `avatarColors`, the palette a user's initials are drawn on when they have no portrait. The shipped palette was chosen for contrast against the white initials; a palette you configure is not checked.
 
 **This variable is read at run time, not baked into the bundle.** That is why the Login component reads it through `runtimeConfig` rather than writing `process.env.RAZZLE_IDENTITY_SHOW_PLONE_LOGIN` literally: webpack substitutes the literal form while `pnpm build` runs, which would make the answer a property of the image and force two images on two sites wanting two answers.
 
@@ -199,7 +201,7 @@ Every component this add-on ships has stories, and a `.stories.tsx` beside a com
 Stories use Component Story Format 3, and payloads come from `src/stories/fixtures.tsx`, which holds provider lists, identities and audit entries shaped exactly like the backend serves them.
 Reuse those rather than inventing a payload, so a story that renders is evidence the component handles the real contract.
 
-Two decorators in `src/storybook/` cover what these components need from their surroundings.
+Two decorators in `src/stories/`, beside the fixtures, cover what these components need from their surroundings.
 
 - `withPage` supplies the router and store a page-level component reads.
 - `withUserMenu` puts a component in the chrome it actually appears in, which is the only way to see a menu entry rendered where a user meets it.

package/locales/de/LC_MESSAGES/volto.po

@@ -25,7 +25,7 @@ msgstr ""
 #. Default: "Actions"
 #: components/Applications/ApplicationsPanel
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Actions"
 msgstr ""
 
@@ -54,6 +54,11 @@ msgstr ""
 msgid "Allow {client} to use your account?"
 msgstr ""
 
+#. Default: "An export carries every client secret in the clear. Handle the file the way you would handle the secrets inside it."
+#: components/ControlPanel/ProvidersControlPanel
+msgid "An export carries every client secret in the clear."
+msgstr ""
+
 #. Default: "Application"
 #: components/Applications/ApplicationsPanel
 msgid "Application"
@@ -65,6 +70,11 @@ msgstr ""
 msgid "Applications"
 msgstr ""
 
+#. Default: "Authenticated with"
+#: components/Welcome/WelcomeCard
+msgid "Authenticated with"
+msgstr ""
+
 #. Default: "Authorize"
 #: components/Consent/Consent
 msgid "Authorize"
@@ -87,6 +97,7 @@ msgid "Back"
 msgstr ""
 
 #. Default: "Back to sign-in options"
+#: components/Callback/Callback
 #: components/Login/LoginForm
 msgid "Back to sign-in options"
 msgstr ""
@@ -96,6 +107,11 @@ msgstr ""
 msgid "Back to the list"
 msgstr ""
 
+#. Default: "Back to the providers"
+#: components/ControlPanel/ProvidersControlPanel
+msgid "Back to the providers"
+msgstr ""
+
 #. Default: "Cancel"
 #: components/ControlPanel/ClientsControlPanel
 #: components/ControlPanel/ConfirmModal
@@ -115,7 +131,7 @@ msgid "Choose a file"
 msgstr ""
 
 #. Default: "Choose how you would like to sign in."
-#: components/Login/Login
+#: components/Login/useLogin
 msgid "Choose how you would like to sign in."
 msgstr ""
 
@@ -170,6 +186,12 @@ msgstr ""
 msgid "Confidential"
 msgstr ""
 
+#. Default: "Confirm your email address"
+#: components/ConfirmEmail/ConfirmEmail
+#: components/ProfileGate/ProfileGate
+msgid "Confirm your email address"
+msgstr ""
+
 #. Default: "Confirming your address…"
 #: components/Callback/Callback
 msgid "Confirming your address"
@@ -190,9 +212,14 @@ msgstr ""
 msgid "Copy"
 msgstr ""
 
+#. Default: "Default"
+#: components/Blocks/SignIn/schema
+msgid "Default"
+msgstr ""
+
 #. Default: "Delete"
 #: components/ControlPanel/ConfirmModal
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 #: components/ControlPanel/RenderUsers
 msgid "Delete"
 msgstr ""
@@ -223,14 +250,14 @@ msgid "Disabled. Its existing access tokens are refused as well."
 msgstr ""
 
 #. Default: "Driver"
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 #: helpers/providerSchema
 msgid "Driver"
 msgstr ""
 
 #. Default: "Edit"
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 #: components/ControlPanel/RenderUsers
 #: components/Toolbar/Toolbar
 msgid "Edit"
@@ -241,6 +268,11 @@ msgstr ""
 msgid "Edit your profile"
 msgstr ""
 
+#. Default: "Editing"
+#: components/Blocks/SignIn/schema
+msgid "Editing"
+msgstr ""
+
 #. Default: "Email address"
 #: components/Login/MagicLinkForm
 msgid "Email address"
@@ -259,7 +291,7 @@ msgstr ""
 
 #. Default: "Enabled"
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Enabled"
 msgstr ""
 
@@ -275,6 +307,16 @@ msgstr ""
 msgid "Expand toolbar"
 msgstr ""
 
+#. Default: "Export"
+#: components/ControlPanel/ProvidersTable
+msgid "Export"
+msgstr ""
+
+#. Default: "Export every provider"
+#: components/ControlPanel/ProvidersControlPanel
+msgid "Export every provider"
+msgstr ""
+
 #. Default: "File"
 #: components/Toolbar/Toolbar
 msgid "File"
@@ -305,13 +347,18 @@ msgstr ""
 msgid "Groups in this group"
 msgstr ""
 
+#. Default: "Hello {fullname}!"
+#: components/Blocks/SignIn/schema
+msgid "Hello {fullname}!"
+msgstr ""
+
 #. Default: "I have saved it"
 #: components/ControlPanel/SecretReveal
 msgid "I have saved it"
 msgstr ""
 
 #. Default: "Id"
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Id"
 msgstr ""
 
@@ -340,6 +387,11 @@ msgstr ""
 msgid "It will be able to read:"
 msgstr ""
 
+#. Default: "Last login"
+#: components/Welcome/WelcomeCard
+msgid "Last login"
+msgstr ""
+
 #. Default: "Last signed in"
 #: components/ControlPanel/UserAccountPanel
 msgid "Last signed in"
@@ -350,6 +402,16 @@ msgstr ""
 msgid "Link"
 msgstr ""
 
+#. Default: "Link to their profile"
+#: components/Blocks/SignIn/schema
+msgid "Link to their profile"
+msgstr ""
+
+#. Default: "Loading"
+#: components/ControlPanel/ProvidersControlPanel
+msgid "Loading"
+msgstr ""
+
 #. Default: "Loading clients…"
 #: components/ControlPanel/ClientsPanel
 msgid "Loading clients"
@@ -388,7 +450,7 @@ msgstr ""
 #. Default: "Log in"
 #: components/Callback/Callback
 #: components/FirstLogin/FirstLogin
-#: components/Login/Login
+#: components/Login/useLogin
 msgid "Log in"
 msgstr ""
 
@@ -397,6 +459,11 @@ msgstr ""
 msgid "Login name"
 msgstr ""
 
+#. Default: "Login screen"
+#: components/ControlPanel/ProvidersTable
+msgid "Login screen"
+msgstr ""
+
 #. Default: "Logout"
 #: components/Toolbar/PersonalTools
 msgid "Logout"
@@ -432,6 +499,11 @@ msgstr ""
 msgid "More"
 msgstr ""
 
+#. Default: "Move {title}"
+#: components/ControlPanel/ProvidersTable
+msgid "Move {title}"
+msgstr ""
+
 #. Default: "News Item"
 #: components/Toolbar/Toolbar
 msgid "News Item"
@@ -439,7 +511,7 @@ msgstr ""
 
 #. Default: "No"
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "No"
 msgstr ""
 
@@ -458,6 +530,11 @@ msgstr ""
 msgid "No login callback URL is configured"
 msgstr ""
 
+#. Default: "No provider has the id {id}."
+#: components/ControlPanel/ProvidersControlPanel
+msgid "No provider has the id {id}."
+msgstr ""
+
 #. Default: "No providers are configured yet."
 #: components/ControlPanel/ProvidersControlPanel
 msgid "No providers are configured yet."
@@ -488,6 +565,11 @@ msgstr ""
 msgid "Older keys stay in the ring so tokens already issued keep verifying."
 msgstr ""
 
+#. Default: "Order"
+#: components/ControlPanel/ProvidersTable
+msgid "Order"
+msgstr ""
+
 #. Default: "Page"
 #: components/Toolbar/Toolbar
 msgid "Page"
@@ -518,6 +600,11 @@ msgstr ""
 msgid "Personal tools"
 msgstr ""
 
+#. Default: "Plain text. {username} is the name the user signs in with, and {fullname} their full name."
+#: components/Blocks/SignIn/schema
+msgid "Plain text. {username} is the name the user signs in with, and {fullname} their full name."
+msgstr ""
+
 #. Default: "Please fill in {fields} before you can continue."
 #: components/ProfileGate/ProfileGate
 msgid "Please fill in {fields} before you can continue."
@@ -533,6 +620,16 @@ msgstr ""
 msgid "Preferred"
 msgstr ""
 
+#. Default: "Preferred email"
+#: components/Welcome/WelcomeCard
+msgid "Preferred email"
+msgstr ""
+
+#. Default: "Preview the sign-in options"
+#: components/Blocks/SignIn/schema
+msgid "Preview the sign-in options"
+msgstr ""
+
 #. Default: "Profile"
 #: components/UserMenu/ProfileMenuItem
 #: components/UserMenu/UserMenuPlugs
@@ -679,10 +776,15 @@ msgid "Sign in with a password"
 msgstr ""
 
 #. Default: "Sign in with your account on this site."
-#: components/Login/Login
+#: components/Login/useLogin
 msgid "Sign in with your account on this site."
 msgstr ""
 
+#. Default: "Sign-in"
+#: components/Blocks/SignIn/schema
+msgid "Sign-in"
+msgstr ""
+
 #. Default: "Sign-in methods"
 #: components/ControlPanel/UserAccountPanel
 #: components/Identities/Identities
@@ -725,6 +827,7 @@ msgstr ""
 
 #. Default: "Test connection"
 #: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Test connection"
 msgstr ""
 
@@ -758,16 +861,31 @@ msgstr ""
 msgid "That sign-in option is not available right now."
 msgstr ""
 
+#. Default: "The new order could not be saved"
+#: components/ControlPanel/ProvidersControlPanel
+msgid "The new order could not be saved"
+msgstr ""
+
 #. Default: "The provider refused the sign-in."
 #: components/Callback/Callback
 msgid "The provider refused the sign-in."
 msgstr ""
 
+#. Default: "The providers could not be read, so this form cannot open."
+#: components/ControlPanel/ProvidersControlPanel
+msgid "The providers could not be read"
+msgstr ""
+
 #. Default: "The site settings could not be read, so they cannot be edited here. The most likely cause is a settings field with no registry record, which happens when the add-on gained one and its profile has not been reapplied since."
 #: components/ControlPanel/ProvidersControlPanel
 msgid "The site settings could not be read"
 msgstr ""
 
+#. Default: "Their preferred email"
+#: components/Blocks/SignIn/schema
+msgid "Their preferred email"
+msgstr ""
+
 #. Default: "This application is disabled and is being refused already."
 #: components/Applications/ApplicationsPanel
 msgid "This application is disabled and is being refused already."
@@ -800,7 +918,7 @@ msgstr ""
 
 #. Default: "Title"
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Title"
 msgstr ""
 
@@ -835,6 +953,31 @@ msgstr ""
 msgid "Verify"
 msgstr ""
 
+#. Default: "Welcome"
+#: components/Welcome/WelcomeCard
+msgid "Welcome"
+msgstr ""
+
+#. Default: "Welcome message"
+#: components/Blocks/SignIn/schema
+msgid "Welcome message"
+msgstr ""
+
+#. Default: "What they signed in with"
+#: components/Blocks/SignIn/schema
+msgid "What they signed in with"
+msgstr ""
+
+#. Default: "When they last signed in"
+#: components/Blocks/SignIn/schema
+msgid "When they last signed in"
+msgstr ""
+
+#. Default: "While editing only: show what a visitor who is not signed in sees."
+#: components/Blocks/SignIn/schema
+msgid "While editing only: show what a visitor who is not signed in sees."
+msgstr ""
+
 #. Default: "Withdraw access"
 #: components/Applications/Applications
 #: components/Applications/ApplicationsPanel
@@ -853,7 +996,7 @@ msgstr ""
 
 #. Default: "Yes"
 #: components/ControlPanel/ClientsPanel
-#: components/ControlPanel/ProvidersControlPanel
+#: components/ControlPanel/ProvidersTable
 msgid "Yes"
 msgstr ""
 
@@ -882,11 +1025,21 @@ msgstr ""
 msgid "Your email addresses"
 msgstr ""
 
+#. Default: "Your profile"
+#: components/Welcome/WelcomeCard
+msgid "Your profile"
+msgstr ""
+
 #. Default: "Your profile needs a few more details before you can continue."
 #: components/ProfileGate/ProfileGate
 msgid "Your profile needs a few more details before you can continue."
 msgstr ""
 
+#. Default: "Your verified addresses"
+#: components/ConfirmEmail/ConfirmEmail
+msgid "Your verified addresses"
+msgstr ""
+
 #. Default: "Forgot your password?"
 #: components/Login/PasswordForm
 msgid "box_forgot_password_option"
@@ -902,6 +1055,41 @@ msgstr ""
 msgid "client-public-help"
 msgstr ""
 
+#. Default: "Continue"
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-continue"
+msgstr ""
+
+#. Default: "You have more than one verified email address. Choose the one this site should use for you."
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-description"
+msgstr ""
+
+#. Default: "This site will use {address} for you."
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-done"
+msgstr ""
+
+#. Default: "That address could not be confirmed. Reload the page and try again."
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-failed"
+msgstr ""
+
+#. Default: "Loading…"
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-loading"
+msgstr ""
+
+#. Default: "There is no email address waiting to be confirmed."
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-nothing"
+msgstr ""
+
+#. Default: "Confirm"
+#: components/ConfirmEmail/ConfirmEmail
+msgid "confirm-email-submit"
+msgstr ""
+
 #. Default: "Loading members…"
 #: components/Views/GroupView
 msgid "group-view-loading"
@@ -932,6 +1120,11 @@ msgstr ""
 msgid "identities-sections"
 msgstr ""
 
+#. Default: "not verified"
+#: components/Welcome/WelcomeCard
+msgid "not verified"
+msgstr ""
+
 #. Default: "nothing beyond the fact that you signed in"
 #: components/Consent/ConsentPanel
 msgid "nothing beyond the fact that you signed in"
@@ -967,6 +1160,11 @@ msgstr ""
 msgid "profile-emails-sent"
 msgstr ""
 
+#. Default: "You have more than one verified email address. Choose the one this site should use for you before you continue."
+#: components/ProfileGate/ProfileGate
+msgid "profile-gate-confirm-email"
+msgstr ""
+
 #. Default: "Unnamed user"
 #: components/Views/ProfileView
 msgid "profile-view-unnamed"
@@ -977,6 +1175,11 @@ msgstr ""
 msgid "provider-driver-help"
 msgstr ""
 
+#. Default: "The driver's icon, used until one is uploaded."
+#: components/Widgets/ProviderIconWidget
+msgid "provider-icon-default"
+msgstr ""
+
 #. Default: "An SVG file. It is drawn in the button, so it takes the button colours; anything else is refused."
 #: components/Widgets/ProviderIconWidget
 msgid "provider-icon-hint"
@@ -1062,6 +1265,11 @@ msgstr ""
 msgid "user-account-sections"
 msgstr ""
 
+#. Default: "verified"
+#: components/Welcome/WelcomeCard
+msgid "verified"
+msgstr ""
+
 #. Default: "verifying only"
 #: components/ControlPanel/ClientsPanel
 msgid "verifying only"