KEYCLOAK-2636
Tooltip for redirect uri is wrong
This commit is contained in:
Stian Thorgersen
parent
4b69cb4551
commit
50e5d203b3
1 changed files with 39 additions and 39 deletions
|
|
@ -36,7 +36,7 @@ sslRequired=Require SSL
|
|||
sslRequired.option.all=all requests
|
||||
sslRequired.option.external=external requests
|
||||
sslRequired.option.none=none
|
||||
sslRequired.tooltip=Is HTTPS required? 'None' means HTTPS is not required for any client IP address. 'External requests' means localhost and private IP addresses can access without HTTPS. 'All requests' means HTTPS is required for all IP addresses.
|
||||
sslRequired.tooltip=Is HTTPS required? 'None' means HTTPS is not required for any client IP address. 'External requests' means localhost and private IP addresses can access without HTTPS. 'All requests' means HTTPS is required for all IP addresses.
|
||||
publicKey=Public key
|
||||
privateKey=Private key
|
||||
gen-new-keys=Generate new keys
|
||||
|
|
@ -95,7 +95,7 @@ login-action-timeout.tooltip=Max time a user has to complete login related actio
|
|||
headers=Headers
|
||||
brute-force-detection=Brute Force Detection
|
||||
x-frame-options=X-Frame-Options
|
||||
click-label-for-info=Click on label link for more information. The default value prevents pages from being included via non-origin iframes.
|
||||
click-label-for-info=Click on label link for more information. The default value prevents pages from being included via non-origin iframes.
|
||||
content-sec-policy=Content-Security-Policy
|
||||
max-login-failures=Max Login Failures
|
||||
max-login-failures.tooltip=How many failures before wait is triggered.
|
||||
|
|
@ -134,7 +134,7 @@ push.tooltip=For every client that has an admin URL, notify them of the new revo
|
|||
|
||||
#Protocol Mapper
|
||||
usermodel.prop.label=Property
|
||||
usermodel.prop.tooltip=Name of the property method in the UserModel interface. For example, a value of 'email' would reference the UserModel.getEmail() method.
|
||||
usermodel.prop.tooltip=Name of the property method in the UserModel interface. For example, a value of 'email' would reference the UserModel.getEmail() method.
|
||||
usermodel.attr.label=User Attribute
|
||||
usermodel.attr.tooltip=Name of stored user attribute which is the name of an attribute within the UserModel.attribute map.
|
||||
userSession.modelNote.label=User Session Note
|
||||
|
|
@ -144,9 +144,9 @@ multivalued.tooltip=Indicates if attribute supports multiple values. If true, th
|
|||
selectRole.label=Select Role
|
||||
selectRole.tooltip=Enter role in the textbox to the left, or click this button to browse and select the role you want.
|
||||
tokenClaimName.label=Token Claim Name
|
||||
tokenClaimName.tooltip=Name of the claim to insert into the token. This can be a fully qualified name like 'address.street'. In this case, a nested json object will be created.
|
||||
tokenClaimName.tooltip=Name of the claim to insert into the token. This can be a fully qualified name like 'address.street'. In this case, a nested json object will be created.
|
||||
jsonType.label=Claim JSON Type
|
||||
jsonType.tooltip=JSON type that should be used to populate the json claim in the token. long, int, boolean, and String are valid values.
|
||||
jsonType.tooltip=JSON type that should be used to populate the json claim in the token. long, int, boolean, and String are valid values.
|
||||
includeInIdToken.label=Add to ID token
|
||||
includeInIdToken.tooltip=Should the claim be added to the ID token?
|
||||
includeInAccessToken.label=Add to access token
|
||||
|
|
@ -154,7 +154,7 @@ includeInAccessToken.tooltip=Should the claim be added to the access token?
|
|||
|
||||
|
||||
# client details
|
||||
clients.tooltip=Clients are trusted browser apps and web services in a realm. These clients can request a login. You can also define client specific roles.
|
||||
clients.tooltip=Clients are trusted browser apps and web services in a realm. These clients can request a login. You can also define client specific roles.
|
||||
search.placeholder=Search...
|
||||
create=Create
|
||||
import=Import
|
||||
|
|
@ -170,7 +170,7 @@ add-client=Add Client
|
|||
select-file=Select file
|
||||
view-details=View details
|
||||
clear-import=Clear import
|
||||
client-id.tooltip=Specifies ID referenced in URI and tokens. For example 'my-client'. For SAML this is also the expected issuer value from authn requests
|
||||
client-id.tooltip=Specifies ID referenced in URI and tokens. For example 'my-client'. For SAML this is also the expected issuer value from authn requests
|
||||
client.name.tooltip=Specifies display name of the client. For example 'My Client'. Supports keys for localized values as well. For example\\: ${my_client}
|
||||
client.enabled.tooltip=Disabled clients cannot initiate a login or have obtain access tokens.
|
||||
consent-required=Consent Required
|
||||
|
|
@ -178,7 +178,7 @@ consent-required.tooltip=If enabled users have to consent to client access.
|
|||
client-protocol=Client Protocol
|
||||
client-protocol.tooltip='OpenID connect' allows Clients to verify the identity of the End-User based on the authentication performed by an Authorization Server.'SAML' enables web-based authentication and authorization scenarios including cross-domain single sign-on (SSO) and uses security tokens containing assertions to pass information.
|
||||
access-type=Access Type
|
||||
access-type.tooltip='Confidential' clients require a secret to initiate login protocol. 'Public' clients do not require a secret. 'Bearer-only' clients are web services that never initiate a login.
|
||||
access-type.tooltip='Confidential' clients require a secret to initiate login protocol. 'Public' clients do not require a secret. 'Bearer-only' clients are web services that never initiate a login.
|
||||
standard-flow-enabled=Standard Flow Enabled
|
||||
standard-flow-enabled.tooltip=This enables standard OpenID Connect redirect based authentication with authorization code. In terms of OpenID Connect or OAuth2 specifications, this enables support of 'Authorization Code Flow' for this client.
|
||||
implicit-flow-enabled=Implicit Flow Enabled
|
||||
|
|
@ -192,7 +192,7 @@ include-authnstatement.tooltip=Should a statement specifying the method and time
|
|||
sign-documents=Sign Documents
|
||||
sign-documents.tooltip=Should SAML documents be signed by the realm?
|
||||
sign-assertions=Sign Assertions
|
||||
sign-assertions.tooltip=Should assertions inside SAML documents be signed? This setting isn't needed if document is already being signed.
|
||||
sign-assertions.tooltip=Should assertions inside SAML documents be signed? This setting isn't needed if document is already being signed.
|
||||
signature-algorithm=Signature Algorithm
|
||||
signature-algorithm.tooltip=The signature algorithm to use to sign documents.
|
||||
canonicalization-method=Canonicalization Method
|
||||
|
|
@ -200,11 +200,11 @@ canonicalization-method.tooltip=Canonicalization Method for XML signatures.
|
|||
encrypt-assertions=Encrypt Assertions
|
||||
encrypt-assertions.tooltip=Should SAML assertions be encrypted with client's public key using AES?
|
||||
client-signature-required=Client Signature Required
|
||||
client-signature-required.tooltip=Will the client sign their saml requests and responses? And should they be validated?
|
||||
client-signature-required.tooltip=Will the client sign their saml requests and responses? And should they be validated?
|
||||
force-post-binding=Force POST Binding
|
||||
force-post-binding.tooltip=Always use POST binding for responses.
|
||||
front-channel-logout=Front Channel Logout
|
||||
front-channel-logout.tooltip=When true, logout requires a browser redirect to client. When false, server performs a background invocation for logout.
|
||||
front-channel-logout.tooltip=When true, logout requires a browser redirect to client. When false, server performs a background invocation for logout.
|
||||
force-name-id-format=Force Name ID Format
|
||||
force-name-id-format.tooltip=Ignore requested NameID subject format and use admin console configured one.
|
||||
name-id-format=Name ID Format
|
||||
|
|
@ -212,14 +212,14 @@ name-id-format.tooltip=The name ID format to use for the subject.
|
|||
root-url=Root URL
|
||||
root-url.tooltip=Root URL appended to relative URLs
|
||||
valid-redirect-uris=Valid Redirect URIs
|
||||
valid-redirect-uris.tooltip=Valid URI pattern a browser can redirect to after a successful login or logout. Simple wildcards are allowed i.e. 'http://example.com/*'. Relative path can be specified too i.e. /my/relative/path/*. Relative paths will generate a redirect URI using the request's host and port. For SAML, you must set valid URI patterns if you are relying on the consumer service URL embedded with the login request.
|
||||
valid-redirect-uris.tooltip=Valid URI pattern a browser can redirect to after a successful login or logout. Simple wildcards are allowed i.e. 'http://example.com/*'. Relative path can be specified too i.e. /my/relative/path/*. Relative paths are relative to the client root URL, or if none is specified the auth server root URL is used. For SAML, you must set valid URI patterns if you are relying on the consumer service URL embedded with the login request.
|
||||
base-url.tooltip=Default URL to use when the auth server needs to redirect or link back to the client.
|
||||
admin-url=Admin URL
|
||||
admin-url.tooltip=URL to the admin interface of the client. Set this if the client supports the adapter REST API. This REST API allows the auth server to push revocation policies and other adminstrative tasks. Usually this is set to the base URL of the client.
|
||||
admin-url.tooltip=URL to the admin interface of the client. Set this if the client supports the adapter REST API. This REST API allows the auth server to push revocation policies and other adminstrative tasks. Usually this is set to the base URL of the client.
|
||||
master-saml-processing-url=Master SAML Processing URL
|
||||
master-saml-processing-url.tooltip=If configured, this URL will be used for every binding to both the SP's Assertion Consumer and Single Logout Services. This can be individually overiden for each binding and service in the Fine Grain SAML Endpoint Configuration.
|
||||
master-saml-processing-url.tooltip=If configured, this URL will be used for every binding to both the SP's Assertion Consumer and Single Logout Services. This can be individually overiden for each binding and service in the Fine Grain SAML Endpoint Configuration.
|
||||
idp-sso-url-ref=IDP Initiated SSO URL Name
|
||||
idp-sso-url-ref.tooltip=URL fragment name to reference client when you want to do IDP Initiated SSO. Leaving this empty will disable IDP Initiated SSO. The URL you will reference from your browser will be: {server-root}/realms/{realm}/protocol/saml/clients/{client-url-name}
|
||||
idp-sso-url-ref.tooltip=URL fragment name to reference client when you want to do IDP Initiated SSO. Leaving this empty will disable IDP Initiated SSO. The URL you will reference from your browser will be: {server-root}/realms/{realm}/protocol/saml/clients/{client-url-name}
|
||||
idp-sso-relay-state=IDP Initiated SSO Relay State
|
||||
idp-sso-relay-state.tooltip=Relay state you want to send with SAML request when you want to do IDP Initiated SSO.
|
||||
web-origins=Web Origins
|
||||
|
|
@ -227,13 +227,13 @@ web-origins.tooltip=Allowed CORS origins. To permit all origins of Valid Redirec
|
|||
fine-saml-endpoint-conf=Fine Grain SAML Endpoint Configuration
|
||||
fine-saml-endpoint-conf.tooltip=Expand this section to configure exact URLs for Assertion Consumer and Single Logout Service.
|
||||
assertion-consumer-post-binding-url=Assertion Consumer Service POST Binding URL
|
||||
assertion-consumer-post-binding-url.tooltip=SAML POST Binding URL for the client's assertion consumer service (login responses). You can leave this blank if you do not have a URL for this binding.
|
||||
assertion-consumer-post-binding-url.tooltip=SAML POST Binding URL for the client's assertion consumer service (login responses). You can leave this blank if you do not have a URL for this binding.
|
||||
assertion-consumer-redirect-binding-url=Assertion Consumer Service Redirect Binding URL
|
||||
assertion-consumer-redirect-binding-url.tooltip=SAML Redirect Binding URL for the client's assertion consumer service (login responses). You can leave this blank if you do not have a URL for this binding.
|
||||
assertion-consumer-redirect-binding-url.tooltip=SAML Redirect Binding URL for the client's assertion consumer service (login responses). You can leave this blank if you do not have a URL for this binding.
|
||||
logout-service-binding-post-url=Logout Service POST Binding URL
|
||||
logout-service-binding-post-url.tooltip=SAML POST Binding URL for the client's single logout service. You can leave this blank if you are using a different binding
|
||||
logout-service-binding-post-url.tooltip=SAML POST Binding URL for the client's single logout service. You can leave this blank if you are using a different binding
|
||||
logout-service-redir-binding-url=Logout Service Redirect Binding URL
|
||||
logout-service-redir-binding-url.tooltip=SAML Redirect Binding URL for the client's single logout service. You can leave this blank if you are using a different binding.
|
||||
logout-service-redir-binding-url.tooltip=SAML Redirect Binding URL for the client's single logout service. You can leave this blank if you are using a different binding.
|
||||
|
||||
# client import
|
||||
import-client=Import Client
|
||||
|
|
@ -247,12 +247,12 @@ credentials=Credentials
|
|||
saml-keys=SAML Keys
|
||||
roles=Roles
|
||||
mappers=Mappers
|
||||
mappers.tooltip=Protocol mappers perform transformation on tokens and documents. They can do things like map user data into protocol claims, or just transform any requests going between the client and auth server.
|
||||
mappers.tooltip=Protocol mappers perform transformation on tokens and documents. They can do things like map user data into protocol claims, or just transform any requests going between the client and auth server.
|
||||
scope=Scope
|
||||
scope.tooltip=Scope mappings allow you to restrict which user role mappings are included within the access token requested by the client.
|
||||
sessions.tooltip=View active sessions for this client. Allows you to see which users are active and when they logged in.
|
||||
sessions.tooltip=View active sessions for this client. Allows you to see which users are active and when they logged in.
|
||||
offline-access=Offline Access
|
||||
offline-access.tooltip=View offline sessions for this client. Allows you to see which users retrieve offline token and when they retrieve it. To revoke all tokens for the client, go to Revocation tab and set not before value to now.
|
||||
offline-access.tooltip=View offline sessions for this client. Allows you to see which users retrieve offline token and when they retrieve it. To revoke all tokens for the client, go to Revocation tab and set not before value to now.
|
||||
clustering=Clustering
|
||||
installation=Installation
|
||||
installation.tooltip=Helper utility for generating various client adapter configuration formats which you can download or cut and paste to configure your clients.
|
||||
|
|
@ -359,7 +359,7 @@ key-import=Key Import
|
|||
export-saml-key=Export SAML Key
|
||||
import-saml-key=Import SAML Key
|
||||
realm-certificate-alias=Realm Certificate Alias
|
||||
realm-certificate-alias.tooltip=Realm certificate is stored in archive too. This is the alias to it.
|
||||
realm-certificate-alias.tooltip=Realm certificate is stored in archive too. This is the alias to it.
|
||||
signing-key=Signing Key
|
||||
saml-signing-key=SAML Signing Key.
|
||||
private-key=Private Key
|
||||
|
|
@ -422,7 +422,7 @@ identity-provider.logout-url.tooltip=End session endpoint to use to logout user
|
|||
backchannel-logout=Backchannel Logout
|
||||
backchannel-logout.tooltip=Does the external IDP support backchannel logout?
|
||||
user-info-url=User Info URL
|
||||
user-info-url.tooltip=The User Info Url. This is optional.
|
||||
user-info-url.tooltip=The User Info Url. This is optional.
|
||||
identity-provider.client-id.tooltip=The client or client identifier registered within the identity provider.
|
||||
client-secret=Client Secret
|
||||
show-secret=Show secret
|
||||
|
|
@ -513,10 +513,10 @@ groups=Groups
|
|||
|
||||
group.add-selected.tooltip=Realm roles that can be assigned to the group.
|
||||
group.assigned-roles.tooltip=Realm roles mapped to the group
|
||||
group.effective-roles.tooltip=All realm role mappings. Some roles here might be inherited from a mapped composite role.
|
||||
group.effective-roles.tooltip=All realm role mappings. Some roles here might be inherited from a mapped composite role.
|
||||
group.available-roles.tooltip=Assignable roles from this client.
|
||||
group.assigned-roles-client.tooltip=Role mappings for this client.
|
||||
group.effective-roles-client.tooltip=Role mappings for this client. Some roles here might be inherited from a mapped composite role.
|
||||
group.effective-roles-client.tooltip=Role mappings for this client. Some roles here might be inherited from a mapped composite role.
|
||||
|
||||
default-roles=Default Roles
|
||||
no-realm-roles-available=No realm roles available
|
||||
|
|
@ -524,10 +524,10 @@ no-realm-roles-available=No realm roles available
|
|||
users=Users
|
||||
user.add-selected.tooltip=Realm roles that can be assigned to the user.
|
||||
user.assigned-roles.tooltip=Realm roles mapped to the user
|
||||
user.effective-roles.tooltip=All realm role mappings. Some roles here might be inherited from a mapped composite role.
|
||||
user.effective-roles.tooltip=All realm role mappings. Some roles here might be inherited from a mapped composite role.
|
||||
user.available-roles.tooltip=Assignable roles from this client.
|
||||
user.assigned-roles-client.tooltip=Role mappings for this client.
|
||||
user.effective-roles-client.tooltip=Role mappings for this client. Some roles here might be inherited from a mapped composite role.
|
||||
user.effective-roles-client.tooltip=Role mappings for this client. Some roles here might be inherited from a mapped composite role.
|
||||
default.available-roles.tooltip=Realm level roles that can be assigned.
|
||||
realm-default-roles=Realm Default Roles
|
||||
realm-default-roles.tooltip=Realm level roles assigned to new users.
|
||||
|
|
@ -578,7 +578,7 @@ configure=Configure
|
|||
select-realm=Select realm
|
||||
add=Add
|
||||
|
||||
client-template.name.tooltip=Name of the client template. Must be unique in the realm
|
||||
client-template.name.tooltip=Name of the client template. Must be unique in the realm
|
||||
client-template.description.tooltip=Description of the client template
|
||||
client-template.protocol.tooltip=Which SSO protocol configuration is being supplied by this client template
|
||||
|
||||
|
|
@ -588,7 +588,7 @@ provider-id=Provider ID
|
|||
console-display-name=Console Display Name
|
||||
console-display-name.tooltip=Display name of provider when linked in admin console.
|
||||
priority=Priority
|
||||
priority.tooltip=Priority of provider when doing a user lookup. Lowest first.
|
||||
priority.tooltip=Priority of provider when doing a user lookup. Lowest first.
|
||||
sync-settings=Sync Settings
|
||||
periodic-full-sync=Periodic Full Sync
|
||||
periodic-full-sync.tooltip=Does periodic full synchronization of provider users to Keycloak should be enabled or not
|
||||
|
|
@ -612,11 +612,11 @@ allow-password-authentication=Allow Password Authentication
|
|||
allow-password-authentication.tooltip=Enable/disable possibility of username/password authentication against Kerberos database
|
||||
edit-mode=Edit Mode
|
||||
edit-mode.tooltip=READ_ONLY means that password updates are not allowed and user always authenticates with Kerberos password. UNSYNCED means user can change his password in Keycloak database and this one will be used instead of Kerberos password then
|
||||
ldap.edit-mode.tooltip=READ_ONLY is a read only LDAP store. WRITABLE means data will be synced back to LDAP on demand. UNSYNCED means user data will be imported, but not synced back to LDAP.
|
||||
ldap.edit-mode.tooltip=READ_ONLY is a read only LDAP store. WRITABLE means data will be synced back to LDAP on demand. UNSYNCED means user data will be imported, but not synced back to LDAP.
|
||||
update-profile-first-login=Update Profile First Login
|
||||
update-profile-first-login.tooltip=Update profile on first login
|
||||
sync-registrations=Sync Registrations
|
||||
ldap.sync-registrations.tooltip=Should newly created users be created within LDAP store? Priority effects which provider is chose to sync the new user.
|
||||
ldap.sync-registrations.tooltip=Should newly created users be created within LDAP store? Priority effects which provider is chose to sync the new user.
|
||||
vendor=Vendor
|
||||
ldap.vendor.tooltip=LDAP vendor (provider)
|
||||
username-ldap-attribute=Username LDAP attribute
|
||||
|
|
@ -707,7 +707,7 @@ authenticator.alias.tooltip=Name of the configuration
|
|||
otp-type=OTP Type
|
||||
time-based=Time Based
|
||||
counter-based=Counter Based
|
||||
otp-type.tooltip=totp is Time-Based One Time Password. 'hotp' is a counter base one time password in which the server keeps a counter to hash against.
|
||||
otp-type.tooltip=totp is Time-Based One Time Password. 'hotp' is a counter base one time password in which the server keeps a counter to hash against.
|
||||
otp-hash-algorithm=OTP Hash Algorithm
|
||||
otp-hash-algorithm.tooltip=What hashing algorithm should be used to generate the OTP.
|
||||
number-of-digits=Number of Digits
|
||||
|
|
@ -839,10 +839,10 @@ credentials.temporary.tooltip=If enabled user is required to change password on
|
|||
remove-totp=Remove TOTP
|
||||
credentials.remove-totp.tooltip=Remove one time password generator for user.
|
||||
reset-actions=Reset Actions
|
||||
credentials.reset-actions.tooltip=Set of actions to execute when sending the user a Reset Actions Email. 'Verify email' sends an email to the user to verify their email address. 'Update profile' requires user to enter in new personal information. 'Update password' requires user to enter in a new password. 'Configure TOTP' requires setup of a mobile password generator.
|
||||
credentials.reset-actions.tooltip=Set of actions to execute when sending the user a Reset Actions Email. 'Verify email' sends an email to the user to verify their email address. 'Update profile' requires user to enter in new personal information. 'Update password' requires user to enter in a new password. 'Configure TOTP' requires setup of a mobile password generator.
|
||||
reset-actions-email=Reset Actions Email
|
||||
send-email=Send email
|
||||
credentials.reset-actions-email.tooltip=Sends an email to user with an embedded link. Clicking on link will allow the user to execute the reset actions. They will not have to login prior to this. For example, set the action to update password, click this button, and the user will be able to change their password without logging in.
|
||||
credentials.reset-actions-email.tooltip=Sends an email to user with an embedded link. Clicking on link will allow the user to execute the reset actions. They will not have to login prior to this. For example, set the action to update password, click this button, and the user will be able to change their password without logging in.
|
||||
add-user=Add user
|
||||
created-at=Created At
|
||||
user-enabled=User Enabled
|
||||
|
|
@ -854,20 +854,20 @@ federation-link=Federation Link
|
|||
email-verified=Email Verified
|
||||
email-verified.tooltip=Has the user's email been verified?
|
||||
required-user-actions=Required User Actions
|
||||
required-user-actions.tooltip=Require an action when the user logs in. 'Verify email' sends an email to the user to verify their email address. 'Update profile' requires user to enter in new personal information. 'Update password' requires user to enter in a new password. 'Configure TOTP' requires setup of a mobile password generator.
|
||||
required-user-actions.tooltip=Require an action when the user logs in. 'Verify email' sends an email to the user to verify their email address. 'Update profile' requires user to enter in new personal information. 'Update password' requires user to enter in a new password. 'Configure TOTP' requires setup of a mobile password generator.
|
||||
locale=Locale
|
||||
select-one.placeholder=Select one...
|
||||
impersonate=Impersonate
|
||||
impersonate-user=Impersonate user
|
||||
impersonate-user.tooltip=Login as this user. If user is in same realm as you, your current login session will be logged out before you are logged in as this user.
|
||||
impersonate-user.tooltip=Login as this user. If user is in same realm as you, your current login session will be logged out before you are logged in as this user.
|
||||
identity-provider-alias=Identity Provider Alias
|
||||
provider-user-id=Provider User ID
|
||||
provider-username=Provider Username
|
||||
no-identity-provider-links-available=No identity provider links available
|
||||
group-membership=Group Membership
|
||||
leave=Leave
|
||||
group-membership.tooltip=Groups user is a member of. Select a listed group and click the Leave button to leave the group.
|
||||
membership.available-groups.tooltip=Groups a user can join. Select a group and click the join button.
|
||||
group-membership.tooltip=Groups user is a member of. Select a listed group and click the Leave button to leave the group.
|
||||
membership.available-groups.tooltip=Groups a user can join. Select a group and click the join button.
|
||||
table-of-realm-users=Table of Realm Users
|
||||
view-all-users=View all users
|
||||
unlock-users=Unlock users
|
||||
|
|
|
|||
Loading…
Reference in a new issue