update locales from crowdin [ci skip]

config/locales/crowdin/af.yml

@@ -446,6 +446,14 @@ af:
         time_entries: Log tyd
         type: Soort
         watcher: Dophouer
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -502,6 +510,16 @@ af:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -634,6 +652,7 @@ af:
       wiki_page: Wiki bladsy
       workflow: Werksvloei
       work_package: Werkspakket
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Daar was probleme met die volgende velde:'
     field_erroneous_label: |-
@@ -709,6 +728,7 @@ af:
   button_change_password: Verander wagwoord
   button_check_all: Kontroleer almal
   button_clear: Verwyder
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Vou almal op
   button_configure: Stel op
@@ -739,6 +759,7 @@ af:
   button_remove_widget: Verwyder legstuk
   button_rename: Hernoem
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Antwoord
   button_reset: Herstel
   button_rollback: Rol terug na hierdie weergawe
@@ -2756,3 +2777,110 @@ af:
       writing_read_only_attributes: Jy mag nie 'n leesalleen kenmerk skryf nie.
     resources:
       schema: Skema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/ar.yml

@@ -445,6 +445,14 @@ ar:
         time_entries: وقت السجل
         type: النّوع
         watcher: المشاهد
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: يجب أن تقبل.
@@ -499,6 +507,16 @@ ar:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -650,6 +668,7 @@ ar:
       wiki_page: صفحة وِيكيبيديا
       workflow: سير العمل
       work_package: مجموعة العمل
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'كان هناك مشاكل في المجالات التالية:'
     field_erroneous_label: 'هذا الحقل غير صالح: %{full_errors} الرجاء إدخال قيمة صحيحة.'
@@ -723,6 +742,7 @@ ar:
   button_change_password: تغيير كلمة المرور
   button_check_all: اختر الكل
   button_clear: إزالة
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: طَيْ الجميع
   button_configure: تكوين
@@ -753,6 +773,7 @@ ar:
   button_remove_widget: إزالة الأداة
   button_rename: اعادة التّسمية
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: رد
   button_reset: إعادة تعيين
   button_rollback: العودة إلى هذا الإصدار
@@ -2819,3 +2840,110 @@ ar:
       writing_read_only_attributes: لا يجب أن تكتب على سمة للقراءة فقط.
     resources:
       schema: مخطّط
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/az.yml

@@ -446,6 +446,14 @@ az:
         time_entries: Log time
         type: Type
         watcher: Watcher
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -502,6 +510,16 @@ az:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -634,6 +652,7 @@ az:
       wiki_page: Wiki page
       workflow: Workflow
       work_package: Work package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'There were problems with the following fields:'
     field_erroneous_label: |-
@@ -709,6 +728,7 @@ az:
   button_change_password: Change password
   button_check_all: Check all
   button_clear: Clear
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Collapse all
   button_configure: Configure
@@ -739,6 +759,7 @@ az:
   button_remove_widget: Remove widget
   button_rename: Rename
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Reply
   button_reset: Reset
   button_rollback: Rollback to this version
@@ -2743,3 +2764,110 @@ az:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/bg.yml

@@ -448,6 +448,14 @@ bg:
         time_entries: Отчетено време
         type: Тип
         watcher: Наблюдател
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: трябва да бъде одобрено.
@@ -504,6 +512,16 @@ bg:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -636,6 +654,7 @@ bg:
       wiki_page: Wiki страница
       workflow: Работен поток
       work_package: Работен пакет
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Имаше проблеми със следните полета:'
     field_erroneous_label: 'Това поле е невалиднo: %{full_errors} Моля, въведете валидна
@@ -710,6 +729,7 @@ bg:
   button_change_password: Смяна на паролата
   button_check_all: Избери всички
   button_clear: Изчистване
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Свиване на всички
   button_configure: Конфигуриране
@@ -740,6 +760,7 @@ bg:
   button_remove_widget: Премахване на притурка
   button_rename: Преименуване
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Отговор
   button_reset: Нулиране
   button_rollback: Връщане към тази версия
@@ -2752,3 +2773,110 @@ bg:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Схема
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/ca.yml

@@ -456,6 +456,14 @@ ca:
         time_entries: Temps de registre
         type: Tipus
         watcher: Observador
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: hauran de ser acceptats.
@@ -511,6 +519,16 @@ ca:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -643,6 +661,7 @@ ca:
       wiki_page: Pàgina wiki
       workflow: Flux de treball
       work_package: Paquet de treball
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'S''han detectat problemes en els camps següents:'
     field_erroneous_label: 'Aquest camp no és vàlid: %{full_errors} si us plau, introduïu
@@ -717,6 +736,7 @@ ca:
   button_change_password: Canviar contrasenya
   button_check_all: Marcar-ho tot
   button_clear: Netejar
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Replega-ho tot
   button_configure: Configurar
@@ -747,6 +767,7 @@ ca:
   button_remove_widget: Treure els widgets
   button_rename: Renombrar
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Respon
   button_reset: Restablir
   button_rollback: Tornar a aquesta versió
@@ -2812,3 +2833,110 @@ ca:
       writing_read_only_attributes: No s'ha d'escriure en un atribut de només de lectura.
     resources:
       schema: Esquema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/cs.yml

@@ -449,6 +449,14 @@ cs:
         time_entries: Čas protokolu
         type: Typ
         watcher: Sledující
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -505,6 +513,16 @@ cs:
           not_an_integer: "(%{name}) není celé číslo."
           smaller_than_or_equal_to: "(%{name}) musí být menší než nebo rovno %{count}."
           greater_than_or_equal_to: "(%{name}) musí být větší než nebo rovno %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -645,6 +663,7 @@ cs:
       wiki_page: Stránka wiki
       workflow: Pracovní postup
       work_package: Pracovní balíček
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Nastaly prolémy v následujících polích:'
     field_erroneous_label: |-
@@ -720,6 +739,7 @@ cs:
   button_change_password: Změnit heslo
   button_check_all: Zaškrtnout vše
   button_clear: Vyčistit
+  button_click_to_reveal: Click to reveal
   button_close: Zavřít
   button_collapse_all: Sbalit vše
   button_configure: Přizpůsobit
@@ -750,6 +770,7 @@ cs:
   button_remove_widget: Odstranit widget
   button_rename: Přejmenovat
   button_replace: Nahradit
+  button_revoke: Revoke
   button_reply: Odpovědět
   button_reset: Obnovit
   button_rollback: Obnovit tuto verzi
@@ -2800,3 +2821,110 @@ cs:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/da.yml

@@ -445,6 +445,14 @@ da:
         time_entries: Tidsregistrering
         type: Type
         watcher: Tilsynsførende
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: skal accepteres.
@@ -501,6 +509,16 @@ da:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@ da:
       wiki_page: Wiki-side
       workflow: Arbejdsgang
       work_package: Arbejdspakke
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Der var problemer med disse felter:'
     field_erroneous_label: |-
@@ -707,6 +726,7 @@ da:
   button_change_password: Skift adgangskode
   button_check_all: Vælg alt
   button_clear: Ryd
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Fold alle sammen
   button_configure: Opsæt
@@ -737,6 +757,7 @@ da:
   button_remove_widget: Fjern widget
   button_rename: Omdøb
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Svar
   button_reset: Nulstil
   button_rollback: Vend tilbage til denne version
@@ -2746,3 +2767,110 @@ da:
       writing_read_only_attributes: Du må ikke skrive til en skrivebeskyttet attribut.
     resources:
       schema: Skema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/de.yml

@@ -457,6 +457,14 @@ de:
         time_entries: Zeit buchen
         type: Typ
         watcher: Beobachter
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: muss akzeptiert werden.
@@ -516,6 +524,16 @@ de:
             sein."
           greater_than_or_equal_to: "(%{name}) muss größer als oder gleich %{count}
             sein."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: kann nicht gelesen werden. Ist dies ein Enterprise-Edition Support
             Token?
@@ -656,6 +674,7 @@ de:
       wiki_page: Wiki-Seite
       workflow: Workflow
       work_package: Arbeitspaket
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Bei den folgenden Feldern traten Fehler auf:'
     field_erroneous_label: "Dieses Feld ist ungültig: %{full_errors} \nBitte geben
@@ -730,6 +749,7 @@ de:
   button_change_password: Kennwort ändern
   button_check_all: Alles auswählen
   button_clear: Zurücksetzen
+  button_click_to_reveal: Click to reveal
   button_close: Schließen
   button_collapse_all: Alle zuklappen
   button_configure: Konfigurieren
@@ -760,6 +780,7 @@ de:
   button_remove_widget: Infobox löschen
   button_rename: Umbenennen
   button_replace: Ersetzen
+  button_revoke: Revoke
   button_reply: Antworten
   button_reset: Zurücksetzen
   button_rollback: Auf diese Version zurücksetzen
@@ -2840,3 +2861,110 @@ de:
         werden.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/es.yml

@@ -461,6 +461,14 @@ es:
         time_entries: Tiempo de registro
         type: Tipo
         watcher: Vigilante
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: debe ser aceptado.
@@ -519,6 +527,16 @@ es:
           not_an_integer: "(%{name}) no es un número entero."
           smaller_than_or_equal_to: "(%{name}) debe ser menor o igual que %{count}."
           greater_than_or_equal_to: "(%{name}) debe ser mayor o igual que %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: no se puede leer. ¿Seguro que es un token de apoyo?
         parse_schema_filter_params_service:
@@ -659,6 +677,7 @@ es:
       wiki_page: Página wiki
       workflow: Flujo de trabajo
       work_package: Paquete de trabajo
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Hubo problemas con los siguientes campos:'
     field_erroneous_label: 'Este campo es inválido: %{full_errors} por favor, ingrese
@@ -733,6 +752,7 @@ es:
   button_change_password: Cambiar contraseña
   button_check_all: Marcar todo
   button_clear: Eliminar
+  button_click_to_reveal: Click to reveal
   button_close: Cerrar
   button_collapse_all: Colapsar todo
   button_configure: Configurar
@@ -763,6 +783,7 @@ es:
   button_remove_widget: Quitar componente
   button_rename: Cambiar el nombre
   button_replace: Sustituir
+  button_revoke: Revoke
   button_reply: Respuesta
   button_reset: Reiniciar
   button_rollback: Volver a esta versión
@@ -2845,3 +2866,110 @@ es:
       writing_read_only_attributes: No debería escribir un atributo de solo lectura.
     resources:
       schema: Esquema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/et.yml

@@ -444,6 +444,14 @@ et:
         time_entries: Logi aeg
         type: Liik
         watcher: Jälgija
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -500,6 +508,16 @@ et:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@ et:
       wiki_page: Viki leht
       workflow: Töövoog
       work_package: Teema
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Järgmiste väljadega esines tõrkeid:'
     field_erroneous_label: |-
@@ -707,6 +726,7 @@ et:
   button_change_password: Muuda parool
   button_check_all: Märgi kõik
   button_clear: Tühjenda
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Ahenda kõik
   button_configure: Seadista
@@ -737,6 +757,7 @@ et:
   button_remove_widget: Eemalda vidin
   button_rename: Nimeta ümber
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Vasta
   button_reset: Nulli
   button_rollback: Pöördu tagasi sellesse versiooni
@@ -2735,3 +2756,110 @@ et:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/fa.yml

@@ -444,6 +444,14 @@ fa:
         time_entries: پیگیری زمان
         type: نوع
         watcher: ناظر
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -500,6 +508,16 @@ fa:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@ fa:
       wiki_page: Wiki page
       workflow: Workflow
       work_package: Work package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'There were problems with the following fields:'
     field_erroneous_label: |-
@@ -707,6 +726,7 @@ fa:
   button_change_password: تغییر رمز عبور
   button_check_all: بررسی همه
   button_clear: پاکسازی
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: بستن همه
   button_configure: ویرایش
@@ -737,6 +757,7 @@ fa:
   button_remove_widget: حذف ویجت
   button_rename: تغییر نام
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: پاسخ دادن
   button_reset: تنظیم مجدد
   button_rollback: برگرداندن به این نسخه
@@ -2741,3 +2762,110 @@ fa:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/fi.yml

@@ -446,6 +446,14 @@ fi:
         time_entries: Kirjaa lokiin aika
         type: Tyyppi
         watcher: Seuraajat
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: täytyy olla hyväksytty.
@@ -502,6 +510,16 @@ fi:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -633,6 +651,7 @@ fi:
       wiki_page: Wiki-sivu
       workflow: Työnkulku
       work_package: Työpaketti
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Seuraavissa kentissä oli ongelmia:'
     field_erroneous_label: 'Tämä kenttä on virheellinen: %{full_errors} Anna kelvollinen
@@ -707,6 +726,7 @@ fi:
   button_change_password: Vaihda salasana
   button_check_all: Valitse kaikki
   button_clear: Tyhjää
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Tiivistä kaikki
   button_configure: Asetukset
@@ -737,6 +757,7 @@ fi:
   button_remove_widget: Poista widgetti
   button_rename: Nimeä uudelleen
   button_replace: Korvaa
+  button_revoke: Revoke
   button_reply: Vastaa
   button_reset: Nollaus
   button_rollback: Siirry takaisin tähän versioon
@@ -2734,3 +2755,110 @@ fi:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/fil.yml

@@ -465,6 +465,14 @@ fil:
         time_entries: Ang oras ng tala
         type: Uri
         watcher: Tagapagmasid
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: kailangang tanggapin.
@@ -524,6 +532,16 @@ fil:
           smaller_than_or_equal_to: "(%{name}) dapat ay mas maliit kaysa o katumbas
             sa %{count}."
           greater_than_or_equal_to: "(%{name}) ay mas mataas kaysa o katumbas sa %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: hindi mabasa. Sigurado ka ba na ito ay suportado ng token?
         parse_schema_filter_params_service:
@@ -661,6 +679,7 @@ fil:
       wiki_page: Pahina ng wiki
       workflow: Daloy ng trabaho
       work_package: Work package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Mayroon mga problema sa mga sumusnod na mga patlang:'
     field_erroneous_label: |-
@@ -736,6 +755,7 @@ fil:
   button_change_password: Baguhin ang password
   button_check_all: Suriin lahat
   button_clear: Linisin
+  button_click_to_reveal: Click to reveal
   button_close: Isara
   button_collapse_all: Bumagsak lahat
   button_configure: I-configure
@@ -766,6 +786,7 @@ fil:
   button_remove_widget: Alisin ang widget
   button_rename: Baguhin ang pangalan
   button_replace: Palitan
+  button_revoke: Revoke
   button_reply: Mag-reply
   button_reset: I-reset
   button_rollback: Pagbabalik ng bersyon ito
@@ -2858,3 +2879,110 @@ fil:
         basa-lang.
     resources:
       schema: Iskema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/fr.yml

@@ -454,6 +454,14 @@ fr:
         time_entries: Consigner temps
         type: Type
         watcher: Observateur
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: doi(ven)t être accepté(e)(s).
@@ -510,6 +518,16 @@ fr:
           not_an_integer: "(%{name}) n’est pas un nombre entier."
           smaller_than_or_equal_to: "(%{name}) doit être inférieure ou égale à %{count}."
           greater_than_or_equal_to: "(%{name}) doit être supérieur ou égal à %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: ne peut être lu. Êtes-vous sûr qu'il s'agisse d'une licence
             Entreprise ?
@@ -651,6 +669,7 @@ fr:
       wiki_page: Page wiki
       workflow: Flux de travail
       work_package: Lot de travaux
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Des problèmes ont été rencontrés avec les champs suivants
       :'
@@ -727,6 +746,7 @@ fr:
   button_change_password: Changer de mot de passe
   button_check_all: Tout cocher
   button_clear: Effacer
+  button_click_to_reveal: Click to reveal
   button_close: Fermer
   button_collapse_all: Tout replier
   button_configure: Configurer
@@ -757,6 +777,7 @@ fr:
   button_remove_widget: Supprimer widget
   button_rename: Renommer
   button_replace: Remplacer
+  button_revoke: Revoke
   button_reply: Répondre
   button_reset: Réinitialiser
   button_rollback: Revenir à cette version
@@ -2837,3 +2858,110 @@ fr:
         seule.
     resources:
       schema: Schéma
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/he.yml

@@ -445,6 +445,14 @@ he:
         time_entries: נרשם ביומן
         type: סוג
         watcher: צופה
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -501,6 +509,16 @@ he:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -636,6 +654,7 @@ he:
       wiki_page: דף ויקי
       workflow: זרימת עבודה
       work_package: חבילת עבודה
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'היו בעיות עם השדות הבאים:'
     field_erroneous_label: |-
@@ -711,6 +730,7 @@ he:
   button_change_password: שינוי סיסמה
   button_check_all: סמן את כולם
   button_clear: נקה
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: סגור הכל
   button_configure: הגדר
@@ -741,6 +761,7 @@ he:
   button_remove_widget: הסר רכיב
   button_rename: שינוי שם
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: השב
   button_reset: איפוס
   button_rollback: ביטול שינויים לגרסה זו
@@ -2779,3 +2800,110 @@ he:
       writing_read_only_attributes: אתה חייב שלא לכתוב תכונה לקריאה בלבד.
     resources:
       schema: סכימה
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/hi.yml

@@ -451,6 +451,14 @@ hi:
         time_entries: लॉग समय
         type: प्रकार
         watcher: वॉचर
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -509,6 +517,16 @@ hi:
             ।"
           greater_than_or_equal_to: "(%{name}) से बड़ा या बराबर होना चाहिए %{count}
             ।"
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -642,6 +660,7 @@ hi:
       wiki_page: विकी पृष्ठ
       workflow: कार्यप्रवाह
       work_package: कार्य पैकेज
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'निम्न फ़ील्ड्स के साथ समस्याएं थीं:'
     field_erroneous_label: |-
@@ -717,6 +736,7 @@ hi:
   button_change_password: पासवर्ड परिवर्तित करें
   button_check_all: Check all
   button_clear: खाली करें
+  button_click_to_reveal: Click to reveal
   button_close: बंद करें
   button_collapse_all: सभी को समेटें
   button_configure: Configure
@@ -747,6 +767,7 @@ hi:
   button_remove_widget: विजेट हटाएँ
   button_rename: नाम बदलें
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: जवाब दें
   button_reset: रीसेट करें
   button_rollback: इस संस्करण के लिए रोलबैक
@@ -2757,3 +2778,110 @@ hi:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/hr.yml

@@ -448,6 +448,14 @@ hr:
         time_entries: Vrijeme pristupa
         type: Tip
         watcher: Nadglednik
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: mora biti prihvaćeno.
@@ -504,6 +512,16 @@ hr:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -641,6 +659,7 @@ hr:
       wiki_page: Wiki stranica
       workflow: Tijek rada
       work_package: Radni paket
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Došlo je do problema s sljedećim poljima:'
     field_erroneous_label: 'Ovo polje nije valjano: %{full_errors} Molimo unesite
@@ -715,6 +734,7 @@ hr:
   button_change_password: Promjeni lozinku
   button_check_all: Označi sve
   button_clear: Očisti
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Sažmi sve
   button_configure: Postavi
@@ -745,6 +765,7 @@ hr:
   button_remove_widget: Ukloni widget
   button_rename: Preimenuj
   button_replace: Zamijeni
+  button_revoke: Revoke
   button_reply: Odgovori
   button_reset: Resetiraj
   button_rollback: Vrati na ovu verziju
@@ -2789,3 +2810,110 @@ hr:
         je dopušteno samo čitanje.
     resources:
       schema: Shema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/hu.yml

@@ -442,6 +442,14 @@ hu:
         time_entries: Eltöltött idő rögzítése
         type: Típus
         watcher: Megfigyelő
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: el kell fogadni.
@@ -498,6 +506,16 @@ hu:
           smaller_than_or_equal_to: "(%{name}) kisebb vagy egyenlő, mint %{count}."
           greater_than_or_equal_to: "(%{name}) nagyobbnak vagy egyenlőnek kell lennie
             %{count} értékkel."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: nem olvasható. Biztos vagy benne, hogy ez támogatási token?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@ hu:
       wiki_page: Wiki oldal
       workflow: Munkafolyamat
       work_package: Feladatcsoport
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Problémák merültek fel az alábbi mezőkkel:'
     field_erroneous_label: 'Ez a mező érvénytelen: %{full_errors} kérjük, adjon meg
@@ -706,6 +725,7 @@ hu:
   button_change_password: Jelszó változtatás
   button_check_all: Az összes kijelölése
   button_clear: Törlés
+  button_click_to_reveal: Click to reveal
   button_close: Bezár
   button_collapse_all: Az összes bezárása
   button_configure: Beállítások
@@ -736,6 +756,7 @@ hu:
   button_remove_widget: Widget eltávolítása
   button_rename: Átnevezés
   button_replace: Csere
+  button_revoke: Revoke
   button_reply: Válasz
   button_reset: Visszaállít, reset
   button_rollback: Visszaállitás erre a verzióra
@@ -2770,3 +2791,110 @@ hu:
       writing_read_only_attributes: Nem írhat egy csak olvasható tulajdonságot.
     resources:
       schema: Séma
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/id.yml

@@ -441,6 +441,14 @@ id:
         time_entries: Catatan waktu
         type: Tipe
         watcher: Pemantau
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: harus disetujui.
@@ -499,6 +507,16 @@ id:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: tidak dapat dibaca. Apakah Anda yakin ini adalah token pendukung?
         parse_schema_filter_params_service:
@@ -630,6 +648,7 @@ id:
       wiki_page: Halaman Wiki
       workflow: Workflow
       work_package: Paket-Penugasan
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Eror pada isian berikut :'
     field_erroneous_label: 'Bidang ini tidak valid: %{full_errors} masukkan nilai
@@ -704,6 +723,7 @@ id:
   button_change_password: Ubah password
   button_check_all: Cek semua
   button_clear: Clear
+  button_click_to_reveal: Click to reveal
   button_close: Tutup
   button_collapse_all: Tutup semua
   button_configure: Konfigurasi
@@ -734,6 +754,7 @@ id:
   button_remove_widget: Hapus widget
   button_rename: Ubah nama
   button_replace: Ganti
+  button_revoke: Revoke
   button_reply: Balas
   button_reset: Reset
   button_rollback: Kembali ke versi ini
@@ -2737,3 +2758,110 @@ id:
       writing_read_only_attributes: Anda tidak harus menulis hanya-baca atribut.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/it.yml

@@ -451,6 +451,14 @@ it:
         time_entries: Registra l'orario effettuato
         type: Tipo
         watcher: Osservatore
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: deve essere accettato.
@@ -508,6 +516,16 @@ it:
           smaller_than_or_equal_to: "(%{name}) deve essere più piccolo o uguale a
             %{count}."
           greater_than_or_equal_to: "(%{name}) deve essere più grande o uguale a %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: non può essere letto. Sei sicuro che si tratta di un token di
             assistenza?
@@ -648,6 +666,7 @@ it:
       wiki_page: Pagina wiki
       workflow: Flusso di lavoro
       work_package: Macro-attività
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Ci sono stati dei problemi con i seguenti campi:'
     field_erroneous_label: 'Questo campo non è valido: %{full_errors} Prego, inserisci
@@ -722,6 +741,7 @@ it:
   button_change_password: Cambia password
   button_check_all: Seleziona tutti
   button_clear: Pulisci
+  button_click_to_reveal: Click to reveal
   button_close: Chiuso
   button_collapse_all: Comprimi Tutto
   button_configure: Configura
@@ -752,6 +772,7 @@ it:
   button_remove_widget: Rimuovi widget
   button_rename: Rinomina
   button_replace: Sostituisci
+  button_revoke: Revoke
   button_reply: Rispondi
   button_reset: Reimposta
   button_rollback: Ripristina a questa versione
@@ -2843,3 +2864,110 @@ it:
       writing_read_only_attributes: Non puoi scrivere un attributo di sola lettura.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/ja.yml

@@ -398,6 +398,14 @@ ja:
         time_entries: 時間を記録
         type: 種別
         watcher: ウォッチャー
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: は受諾しなければなりません。
@@ -450,6 +458,16 @@ ja:
           not_an_integer: "(%{name}) が整数ではありません。"
           smaller_than_or_equal_to: "(%{name}) は %{count} 以下にする必要があります。"
           greater_than_or_equal_to: "(%{name}) は %{count} 以上にする必要があります。"
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: 読み取りできません。サポート トークンですか?
         parse_schema_filter_params_service:
@@ -570,6 +588,7 @@ ja:
       wiki_page: Wiki ページ
       workflow: ワークフロー
       work_package: 作業項目
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 次のフィールドに問題がありました：
     field_erroneous_label: |-
@@ -645,6 +664,7 @@ ja:
   button_change_password: パスワードの変更
   button_check_all: 全てを選択
   button_clear: クリア
+  button_click_to_reveal: Click to reveal
   button_close: 閉じる
   button_collapse_all: 全てを折りたたむ
   button_configure: 設定
@@ -675,6 +695,7 @@ ja:
   button_remove_widget: ウィジェットを削除
   button_rename: 名称変更
   button_replace: 置き換え
+  button_revoke: Revoke
   button_reply: 返信
   button_reset: リセット
   button_rollback: このバージョンにロールバック
@@ -2506,3 +2527,110 @@ ja:
       writing_read_only_attributes: 読み取り専用の属性を書き込みできません。
     resources:
       schema: スキーマ
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/js-pt-BR.yml

@@ -300,7 +300,7 @@ pt-BR:
       show_modal: Mostrar entrada para o texto de ajuda de atributos
     onboarding:
       buttons:
-        skip: Skip
+        skip: Pular
         next: Próxima
         got_it: Entendi
       steps:

config/locales/crowdin/ko.yml

@@ -410,6 +410,14 @@ ko:
         time_entries: 작업시간 기록
         type: 타입
         watcher: 주시자
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: 허용 되어야 합니다.
@@ -463,6 +471,16 @@ ko:
           not_an_integer: "(%{name})은(는) 정수가 아닙니다."
           smaller_than_or_equal_to: "(%{name})은(는) %{count}보다 작거나 같아야 합니다."
           greater_than_or_equal_to: "(%{name})은(는) %{count}보다 크거나 같아야 합니다."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: 읽을 수 없습니다. 지원하는 토큰이 확실한가요?
         parse_schema_filter_params_service:
@@ -589,6 +607,7 @@ ko:
       wiki_page: 위키 페이지
       workflow: 워크플로
       work_package: 작업 패키지
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 다음 필드에 문제가 있습니다.
     field_erroneous_label: "이 필드는 유효 하지 않습니다: %{full_errors} \n유효한 값을 입력 해 주십시오."
@@ -662,6 +681,7 @@ ko:
   button_change_password: 암호 변경
   button_check_all: 모두 선택
   button_clear: 선택 취소
+  button_click_to_reveal: Click to reveal
   button_close: 닫기
   button_collapse_all: 모두 축소
   button_configure: 구성
@@ -692,6 +712,7 @@ ko:
   button_remove_widget: 위젯 제거
   button_rename: 이름 바꾸기
   button_replace: 교체하기
+  button_revoke: Revoke
   button_reply: 회신
   button_reset: 재설정
   button_rollback: 이 버전으로 롤백
@@ -2601,3 +2622,110 @@ ko:
       writing_read_only_attributes: 읽기 전용 특성은 변경할 수 없습니다.
     resources:
       schema: 스키마
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/lol.yml

@@ -396,6 +396,14 @@ lol:
         time_entries: crwdns103068:0crwdne103068:0
         type: crwdns103070:0crwdne103070:0
         watcher: crwdns103072:0crwdne103072:0
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: crwdns103074:0crwdne103074:0
@@ -448,6 +456,16 @@ lol:
           not_an_integer: crwdns103162:0%{name}crwdne103162:0
           smaller_than_or_equal_to: crwdns103164:0%{name}crwdnd103164:0%{count}crwdne103164:0
           greater_than_or_equal_to: crwdns103166:0%{name}crwdnd103166:0%{count}crwdne103166:0
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: crwdns103168:0crwdne103168:0
         parse_schema_filter_params_service:
@@ -567,6 +585,7 @@ lol:
       wiki_page: crwdns103306:0crwdne103306:0
       workflow: crwdns103308:0crwdne103308:0
       work_package: crwdns103310:0crwdne103310:0
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: crwdns103312:0crwdne103312:0
     field_erroneous_label: crwdns103314:0%{full_errors}crwdne103314:0
@@ -640,6 +659,7 @@ lol:
   button_change_password: crwdns103446:0crwdne103446:0
   button_check_all: crwdns103448:0crwdne103448:0
   button_clear: crwdns103450:0crwdne103450:0
+  button_click_to_reveal: Click to reveal
   button_close: crwdns103452:0crwdne103452:0
   button_collapse_all: crwdns103454:0crwdne103454:0
   button_configure: crwdns103456:0crwdne103456:0
@@ -670,6 +690,7 @@ lol:
   button_remove_widget: crwdns103506:0crwdne103506:0
   button_rename: crwdns103508:0crwdne103508:0
   button_replace: crwdns103510:0crwdne103510:0
+  button_revoke: Revoke
   button_reply: crwdns103512:0crwdne103512:0
   button_reset: crwdns103514:0crwdne103514:0
   button_rollback: crwdns103516:0crwdne103516:0
@@ -2459,3 +2480,110 @@ lol:
       writing_read_only_attributes: crwdns106930:0crwdne106930:0
     resources:
       schema: crwdns106932:0crwdne106932:0
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/lt.yml

@@ -446,6 +446,14 @@ lt:
         time_entries: Registruoti laiką
         type: Tipas
         watcher: Stebėtojas
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: turi būti patvirtinta.
@@ -502,6 +510,16 @@ lt:
           not_an_integer: "(%{name}) nėra sveikasis skaičius."
           smaller_than_or_equal_to: "(%{name}) turi būti mažesnis arba lygus %{count}."
           greater_than_or_equal_to: "(%{name}) turi būti didesnis arba lygus %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: neįmanoma perskaityti. Ar tai tikrai yra paramos raktas?
         parse_schema_filter_params_service:
@@ -641,6 +659,7 @@ lt:
       wiki_page: Wiki puslapis
       workflow: Darbų eiga
       work_package: Darbų paketas
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Buvo problemų su šiais laukeliais:'
     field_erroneous_label: |-
@@ -716,6 +735,7 @@ lt:
   button_change_password: Pakeisti slaptažodį
   button_check_all: Žymėti visus
   button_clear: Išvalyti
+  button_click_to_reveal: Click to reveal
   button_close: Uždaryti
   button_collapse_all: Sutraukti visus
   button_configure: Konfigūruoti
@@ -746,6 +766,7 @@ lt:
   button_remove_widget: Pašalinti valdiklį
   button_rename: Pervardinti
   button_replace: Pakeisti
+  button_revoke: Revoke
   button_reply: Atsakyti
   button_reset: Nustatyti iš naujo
   button_rollback: Grąžinti į šią versiją
@@ -2827,3 +2848,110 @@ lt:
       writing_read_only_attributes: Jūs neturėtumėte įrašyti atributą „tik skaitomas“.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/lv.yml

@@ -442,6 +442,14 @@ lv:
         time_entries: Log time
         type: Veids
         watcher: Watcher
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: ir jāapstiprina.
@@ -498,6 +506,16 @@ lv:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -634,6 +652,7 @@ lv:
       wiki_page: Wiki page
       workflow: Workflow
       work_package: Work package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'There were problems with the following fields:'
     field_erroneous_label: |-
@@ -709,6 +728,7 @@ lv:
   button_change_password: Mainīt paroli
   button_check_all: Check all
   button_clear: Clear
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Collapse all
   button_configure: Configure
@@ -739,6 +759,7 @@ lv:
   button_remove_widget: Noņemt logrīku
   button_rename: Rename
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Pievienot atbildi
   button_reset: Atjaunot
   button_rollback: Rollback to this version
@@ -2760,3 +2781,110 @@ lv:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/nl.yml

@@ -451,6 +451,14 @@ nl:
         time_entries: Gelogde tijd
         type: Type
         watcher: Kijker
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: moet geaccepteerd worden.
@@ -509,6 +517,16 @@ nl:
             %{count}."
           greater_than_or_equal_to: "(%{name}) moet groter zijn dan of gelijk aan
             %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: kan niet worden gelezen. Weet u zeer dat het een support token
             is?
@@ -646,6 +664,7 @@ nl:
       wiki_page: Wikipagina
       workflow: Werkstroom
       work_package: Werkpakket
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Er waren problemen met de volgende velden:'
     field_erroneous_label: "Dit veld is ongeldig: %{full_errors} \nVoer alstublieft
@@ -720,6 +739,7 @@ nl:
   button_change_password: Wijzig wachtwoord
   button_check_all: Selecteer alles
   button_clear: Wissen
+  button_click_to_reveal: Click to reveal
   button_close: Sluiten
   button_collapse_all: Alles inklappen
   button_configure: Configureer
@@ -750,6 +770,7 @@ nl:
   button_remove_widget: Widget verwijderen
   button_rename: Naam wijzigen
   button_replace: Vervang
+  button_revoke: Revoke
   button_reply: Beantwoorden
   button_reset: Herstel
   button_rollback: Terugdraaien naar deze versie
@@ -2806,3 +2827,110 @@ nl:
       writing_read_only_attributes: U mag geen read-only attribuut schrijven.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/no.yml

@@ -445,6 +445,14 @@
         time_entries: Logg tid
         type: Type
         watcher: Overvåker
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -500,6 +508,16 @@
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@
       wiki_page: Wiki-side
       workflow: Arbeidsflyt
       work_package: Arbeidspakke
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Det oppstod problemer med følgende felter:'
     field_erroneous_label: |-
@@ -707,6 +726,7 @@
   button_change_password: Endre passord
   button_check_all: Velg alle
   button_clear: Nullstill
+  button_click_to_reveal: Click to reveal
   button_close: Lukk
   button_collapse_all: Skjul alle
   button_configure: Konfigurer
@@ -737,6 +757,7 @@
   button_remove_widget: Fjern widget
   button_rename: Endre navn
   button_replace: Erstatt
+  button_revoke: Revoke
   button_reply: Svar
   button_reset: Nullstill
   button_rollback: Rull tilbake til denne versjonen
@@ -2744,3 +2765,110 @@
       writing_read_only_attributes: Du kan ikke skrive til et skrivebeskyttet attributt.
     resources:
       schema: Skjema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/pl.yml

@@ -444,6 +444,14 @@ pl:
         time_entries: Rejestruj czas pracy
         type: Typ
         watcher: Obserwator
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: musi być zaakceptowane.
@@ -502,6 +510,16 @@ pl:
             %{count}."
           greater_than_or_equal_to: "(%{name}) – wartość musi być większa lub równa
             %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: nie można odczytać. Czy na pewno jest to token wsparcia?
         parse_schema_filter_params_service:
@@ -642,6 +660,7 @@ pl:
       wiki_page: Strony wiki
       workflow: Przepływ pracy
       work_package: Pakiet roboczy
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Wystąpił problem z następującymi polami:'
     field_erroneous_label: 'To pole jest nieprawidłowe: %{full_errors} proszę podać
@@ -716,6 +735,7 @@ pl:
   button_change_password: Zmiana hasła
   button_check_all: Zaznacz wszystko
   button_clear: Wyczyść
+  button_click_to_reveal: Click to reveal
   button_close: Zamknij
   button_collapse_all: Zwiń wszystko
   button_configure: Konfigurowanie
@@ -746,6 +766,7 @@ pl:
   button_remove_widget: Usuń widżet
   button_rename: Zmień nazwę
   button_replace: Zastąp
+  button_revoke: Revoke
   button_reply: Odpowiedz
   button_reset: Reset
   button_rollback: Wycofaj do tej wersji
@@ -2823,3 +2844,110 @@ pl:
       writing_read_only_attributes: Nie możesz zapisać atrybutu tylko do odczytu.
     resources:
       schema: Schemat
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/pt-BR.yml

@@ -446,6 +446,14 @@ pt-BR:
         time_entries: Registro de tempo
         type: Tipo
         watcher: Observador
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: deve ser aceito.
@@ -500,6 +508,16 @@ pt-BR:
           not_an_integer: "(%{name}) não é um número inteiro."
           smaller_than_or_equal_to: "(%{name}) deve ser menor ou igual a %{count}."
           greater_than_or_equal_to: "(%{name}) deve ser maior ou igual a %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: não pode ser lido. Tem certeza que é um token de suporte?
         parse_schema_filter_params_service:
@@ -635,6 +653,7 @@ pt-BR:
       wiki_page: Página wiki
       workflow: Fluxo de trabalho
       work_package: Pacote de trabalho
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Existem problemas com os seguintes campos:'
     field_erroneous_label: |-
@@ -710,6 +729,7 @@ pt-BR:
   button_change_password: Alterar senha
   button_check_all: Selecionar todos
   button_clear: Limpar
+  button_click_to_reveal: Click to reveal
   button_close: Fechar
   button_collapse_all: Recolher todos
   button_configure: Configurar
@@ -740,6 +760,7 @@ pt-BR:
   button_remove_widget: Remover widget
   button_rename: Renomear
   button_replace: Substituir
+  button_revoke: Revoke
   button_reply: Responder
   button_reset: Reiniciar
   button_rollback: Retornar para esta versão
@@ -2154,7 +2175,7 @@ pt-BR:
   setting_bcc_recipients: Destinatários de cópia oculta (Cco)
   setting_brute_force_block_after_failed_logins: Bloquear usuário após este número
     de tentativas de login
-  setting_brute_force_block_minutes: Tempo que o usuário está bloqueado para
+  setting_brute_force_block_minutes: Tempo que o usuário ficará bloqueado
   setting_cache_formatted_text: Texto formatado em cache
   setting_use_wysiwyg_description: Selecione para habilitar o CKEditor5 para todos
     os usuários por padrão. O CKEditor tem funcionalidades limitadas para o GFM Markdown.
@@ -2200,8 +2221,8 @@ pt-BR:
     dos novos pacotes de trabalho
   setting_work_packages_export_limit: Limite de exportação de pacotes de trabalho
   setting_journal_aggregation_time_minutes: Exibir diários como agregados dentro
-  setting_log_requesting_user: Log de acesso do usuário, nome e endereço de e-mail
+  setting_log_requesting_user: Registrar início de sessão do usuário, nome e endereço
-    para todas as solicitações
+    de e-mail para todas as requisições
   setting_login_required: Autenticação Requerida
   setting_mail_from: Endereço de e-mail de saída
   setting_mail_handler_api_enabled: Habilitar serviço web de entrada de e-mails
@@ -2241,7 +2262,7 @@ pt-BR:
   setting_self_registration: Auto-registro
   setting_sequential_project_identifiers: Gerar identificadores sequenciais de projeto
   setting_session_ttl: Tempo de expiração de sessão após inatividade
-  setting_session_ttl_hint: Valor abaixo de 5 trabalhos como desativado
+  setting_session_ttl_hint: Valor abaixo de 5 funciona como desativado
   setting_session_ttl_enabled: Sessão expira
   setting_start_of_week: A semana começa em
   setting_sys_api_enabled: Habilitar o serviço web de gerenciamento de repositório
@@ -2267,7 +2288,7 @@ pt-BR:
     other: Outro
     passwords: Senhas
     session: Sessão
-    brute_force_prevention: Bloqueio de usuário automatizado
+    brute_force_prevention: Bloqueio automatizado de usuário
     user:
       default_preferences: Preferências padrão
       deletion: Exclusão
@@ -2782,3 +2803,110 @@ pt-BR:
       writing_read_only_attributes: Você não pode escrever um atributo somente leitura.
     resources:
       schema: Esquema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/pt.yml

@@ -455,6 +455,14 @@ pt:
         time_entries: Tempo de registro
         type: Tipo
         watcher: Monitor
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: deve ser aceite.
@@ -510,6 +518,16 @@ pt:
           not_an_integer: "(%{name}) não é um íntegro."
           smaller_than_or_equal_to: "(%{name}) deve ser menor ou igual a %{count}."
           greater_than_or_equal_to: "(%{name}) deve ser maior ou igual a %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: não foi possível ler. Tem a certeza que é um token de suporte?
         parse_schema_filter_params_service:
@@ -645,6 +663,7 @@ pt:
       wiki_page: Página wiki
       workflow: Fluxo de trabalho
       work_package: Pacote de trabalho
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Existem problemas com os seguintes campos:'
     field_erroneous_label: |-
@@ -720,6 +739,7 @@ pt:
   button_change_password: Alterar senha
   button_check_all: Seleccionar Todos
   button_clear: Limpar
+  button_click_to_reveal: Click to reveal
   button_close: Fechar
   button_collapse_all: Ocultar tudo
   button_configure: Configurar
@@ -750,6 +770,7 @@ pt:
   button_remove_widget: Remover o widget
   button_rename: Alterar o nome
   button_replace: Substituir
+  button_revoke: Revoke
   button_reply: Responder
   button_reset: Reiniciar
   button_rollback: Reverter para esta versão
@@ -2811,3 +2832,110 @@ pt:
         leitura.
     resources:
       schema: Esquema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/ro.yml

@@ -455,6 +455,14 @@ ro:
         time_entries: Consum timp
         type: Tip
         watcher: Observator
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: trebuie acceptat.
@@ -511,6 +519,16 @@ ro:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -646,6 +664,7 @@ ro:
       wiki_page: Pagină wiki
       workflow: Flux de lucru
       work_package: Pachet de lucru
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Există probleme cu următoarele câmpuri:'
     field_erroneous_label: |-
@@ -721,6 +740,7 @@ ro:
   button_change_password: Modificare parolă
   button_check_all: Selectează tot
   button_clear: Inițializare
+  button_click_to_reveal: Click to reveal
   button_close: Închide
   button_collapse_all: Restrângere totală
   button_configure: Configurare
@@ -751,6 +771,7 @@ ro:
   button_remove_widget: Elimină secțiune
   button_rename: Redenumire
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Răspuns
   button_reset: Resetare
   button_rollback: Revenire la această versiune
@@ -2818,3 +2839,110 @@ ro:
       writing_read_only_attributes: Nu puteți scrie într-un câmp restricționat.
     resources:
       schema: Schemă
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/ru.yml

@@ -447,6 +447,14 @@ ru:
         time_entries: Учет времени
         type: Тип
         watcher: Наблюдатель
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: нужно подтвердить.
@@ -504,6 +512,16 @@ ru:
           not_an_integer: "(%{name}) не является целым числом."
           smaller_than_or_equal_to: "(%{name}) должен быть меньше или равен %{count}."
           greater_than_or_equal_to: "(%{name}) должен быть больше или равен %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: невозможно прочитать. Вы уверены, что это маркер поддержки?
         parse_schema_filter_params_service:
@@ -649,6 +667,7 @@ ru:
       wiki_page: Wiki-страница
       workflow: Рабочий поток
       work_package: Пакет работ
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Были проблемы со следующими полями:'
     field_erroneous_label: 'Значение этого поля неверно: %{full_errors}. Пожалуйста,
@@ -723,6 +742,7 @@ ru:
   button_change_password: Смена пароля
   button_check_all: Выделить все
   button_clear: Очистить
+  button_click_to_reveal: Click to reveal
   button_close: Закрыть
   button_collapse_all: Свернуть все
   button_configure: Настройка
@@ -753,6 +773,7 @@ ru:
   button_remove_widget: Удалить виджет
   button_rename: Переименовать
   button_replace: Заменить
+  button_revoke: Revoke
   button_reply: Ответить
   button_reset: Сброс
   button_rollback: Откатиться до этого этапа
@@ -2833,3 +2854,110 @@ ru:
         только для чтения.
     resources:
       schema: Схема
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/sk.yml

@@ -452,6 +452,14 @@ sk:
         time_entries: Zaprotokoluj čas
         type: Typ
         watcher: Pozorovateľ
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: musí byť akceptovaný.
@@ -508,6 +516,16 @@ sk:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -652,6 +670,7 @@ sk:
       wiki_page: Wiki stránka
       workflow: Pracovný postup
       work_package: Pracovný balíček
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Nastali problémy s nasledujúcimi poliami:'
     field_erroneous_label: 'Toto pole je neplatné: %{full_errors}. Prosím zadajte
@@ -726,6 +745,7 @@ sk:
   button_change_password: Zmeniť heslo
   button_check_all: Označiť všetko
   button_clear: Vyčistiť
+  button_click_to_reveal: Click to reveal
   button_close: Zatvoriť
   button_collapse_all: Zbaliť všetko
   button_configure: Konfigurovať
@@ -756,6 +776,7 @@ sk:
   button_remove_widget: Odstrániť widget
   button_rename: Premenovať
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Odpoveď
   button_reset: Vynulovať
   button_rollback: Vrátenie k tejto verzii
@@ -2815,3 +2836,110 @@ sk:
         na čítanie.
     resources:
       schema: Schéma
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/sv-SE.yml

@@ -445,6 +445,14 @@ sv-SE:
         time_entries: Logga tid
         type: Typ
         watcher: Bevakare
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: måste accepteras.
@@ -502,6 +510,16 @@ sv-SE:
             %{count}."
           greater_than_or_equal_to: "(%{name}) måste vara större än eller lika med
             %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: kan inte läsas. Är du säker på att det är en support-nyckel?
         parse_schema_filter_params_service:
@@ -635,6 +653,7 @@ sv-SE:
       wiki_page: Wiki-sida
       workflow: Arbetsflöde
       work_package: Arbetspaket
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Det fanns problem med följande fält:'
     field_erroneous_label: |-
@@ -710,6 +729,7 @@ sv-SE:
   button_change_password: Ändra lösenord
   button_check_all: Markera alla
   button_clear: Rensa
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Fäll ihop alla
   button_configure: Konfigurera
@@ -740,6 +760,7 @@ sv-SE:
   button_remove_widget: Ta bort widget
   button_rename: Ändra namn
   button_replace: Ersätt
+  button_revoke: Revoke
   button_reply: Svara
   button_reset: Återställ
   button_rollback: Återgå till denna version
@@ -2743,3 +2764,110 @@ sv-SE:
       writing_read_only_attributes: Du får inte skriva till ett skrivskyddat attribut.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/th.yml

@@ -442,6 +442,14 @@ th:
         time_entries: เวลาที่ถูกบันทึก
         type: ประเภท
         watcher: ผู้ดูข้อมูล
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -498,6 +506,16 @@ th:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -627,6 +645,7 @@ th:
       wiki_page: หน้าวิกิ
       workflow: กระบวนการทำงาน
       work_package: ชุดภารกิจ
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'มีปัญหากับฟิลด์ต่อไปนี้:'
     field_erroneous_label: |-
@@ -702,6 +721,7 @@ th:
   button_change_password: เปลี่ยนรหัสผ่าน
   button_check_all: ตรวจสอบทั้งหมด
   button_clear: ล้างข้อมูล
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: ยุบทั้งหมด
   button_configure: กำหนดค่า
@@ -732,6 +752,7 @@ th:
   button_remove_widget: เอาเครื่องมือออก
   button_rename: เปลี่ยนชื่อ
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: ตอบกลับ
   button_reset: ตั้งค่าใหม่
   button_rollback: ย้อนกลับมาที่รุ่นนี้
@@ -2689,3 +2710,110 @@ th:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/tr.yml

@@ -442,6 +442,14 @@ tr:
         time_entries: Zaman kaydet
         type: Tür
         watcher: Takipçi
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: kabul edilmelidir.
@@ -499,6 +507,16 @@ tr:
           smaller_than_or_equal_to: "(%{name}) %{count} ' e eşit veya daha küçük olmalıdır."
           greater_than_or_equal_to: "(%{name}) sıfırdan büyük veya %{count} ' e eşit
             olması gerekir."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: okunamıyor. Desteklenen bir destek anahtarı olduğuna emin misiniz?
         parse_schema_filter_params_service:
@@ -632,6 +650,7 @@ tr:
       wiki_page: Viki sayfası
       workflow: İş akışı
       work_package: İş paketi
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Aşağıdaki alanları ile ilgili sorunlar oluştu:'
     field_erroneous_label: |-
@@ -707,6 +726,7 @@ tr:
   button_change_password: Parolayı değiştir
   button_check_all: Tümünü işaretle
   button_clear: Temizle
+  button_click_to_reveal: Click to reveal
   button_close: Kapat
   button_collapse_all: Tümünü daralt
   button_configure: Düzenle
@@ -737,6 +757,7 @@ tr:
   button_remove_widget: Widgetleri kaldır
   button_rename: Yeniden adlandır
   button_replace: Değiştir
+  button_revoke: Revoke
   button_reply: Yanıt
   button_reset: Sıfırla
   button_rollback: Bu sürüme geri al
@@ -2750,3 +2771,110 @@ tr:
       writing_read_only_attributes: Salt okunur bir nitelik yazmamalısınız.
     resources:
       schema: Şema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/uk.yml

@@ -448,6 +448,14 @@ uk:
         time_entries: Log time
         type: Type
         watcher: Watcher
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -504,6 +512,16 @@ uk:
           not_an_integer: "(%{name}) is not an integer."
           smaller_than_or_equal_to: "(%{name}) must be smaller than or equal to %{count}."
           greater_than_or_equal_to: "(%{name}) must be greater than or equal to %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -644,6 +662,7 @@ uk:
       wiki_page: Wiki page
       workflow: Workflow
       work_package: Work package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Були проблеми з наступними полями:'
     field_erroneous_label: |-
@@ -719,6 +738,7 @@ uk:
   button_change_password: Change password
   button_check_all: Check all
   button_clear: Clear
+  button_click_to_reveal: Click to reveal
   button_close: Close
   button_collapse_all: Collapse all
   button_configure: Configure
@@ -749,6 +769,7 @@ uk:
   button_remove_widget: Remove widget
   button_rename: Rename
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Reply
   button_reset: Reset
   button_rollback: Rollback to this version
@@ -2797,3 +2818,110 @@ uk:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Схема
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/vi.yml

@@ -445,6 +445,14 @@ vi:
         time_entries: Thời gian truy cập
         type: Kiểu
         watcher: Người quan sát
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: must be accepted.
@@ -502,6 +510,16 @@ vi:
           not_an_integer: "(%{name}) không phải là một số nguyên."
           smaller_than_or_equal_to: "(%{name}) phải nhỏ hơn hoặc bằng %{count}."
           greater_than_or_equal_to: "(%{name}) phải nhỏ hơn hoặc bằng %{count}."
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: can't be read. Are you sure it is a support token?
         parse_schema_filter_params_service:
@@ -635,6 +653,7 @@ vi:
       wiki_page: Trang wiki
       workflow: Quy trình làm việc
       work_package: Work Package
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 'Đã có vấn đề với các mục sau đây:'
     field_erroneous_label: |-
@@ -710,6 +729,7 @@ vi:
   button_change_password: Thay đổi mật khẩu
   button_check_all: Đánh dấu tất cả
   button_clear: Xóa
+  button_click_to_reveal: Click to reveal
   button_close: Đóng
   button_collapse_all: Thu gọn tất cả
   button_configure: Thiết lập
@@ -740,6 +760,7 @@ vi:
   button_remove_widget: Xóa widget
   button_rename: Đổi tên
   button_replace: Replace
+  button_revoke: Revoke
   button_reply: Trả lời
   button_reset: Reset
   button_rollback: Quay trở lại phiên bản này
@@ -2752,3 +2773,110 @@ vi:
       writing_read_only_attributes: You must not write a read-only attribute.
     resources:
       schema: Schema
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/zh-TW.yml

@@ -401,6 +401,14 @@ zh-TW:
         time_entries: 日誌的時間
         type: 類型
         watcher: 監看者
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: 必須被接受
@@ -454,6 +462,16 @@ zh-TW:
           not_an_integer: "(%{name}) 不是一個整數。"
           smaller_than_or_equal_to: "(%{name}) 必須小於等於 %{count}。"
           greater_than_or_equal_to: "(%{name}) 必須大於等於 %{count}。"
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: 無法讀取，確定是一個 support token?
         parse_schema_filter_params_service:
@@ -576,6 +594,7 @@ zh-TW:
       wiki_page: 維基頁面
       workflow: 工作流程
       work_package: 工作項目
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: '以下的欄位有問題:'
     field_erroneous_label: |-
@@ -651,6 +670,7 @@ zh-TW:
   button_change_password: 變更密碼
   button_check_all: 勾選全部
   button_clear: 清除
+  button_click_to_reveal: Click to reveal
   button_close: 關閉
   button_collapse_all: 全部摺疊
   button_configure: 設定
@@ -681,6 +701,7 @@ zh-TW:
   button_remove_widget: 移除元件
   button_rename: 重新命名
   button_replace: 取代
+  button_revoke: Revoke
   button_reply: 回應
   button_reset: 重置
   button_rollback: 回復到此版本
@@ -2520,3 +2541,110 @@ zh-TW:
         您不可寫入唯讀的屬性。
     resources:
       schema: 架構
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications

config/locales/crowdin/zh.yml

@@ -398,6 +398,14 @@ zh:
         time_entries: 记录时间
         type: 类型
         watcher: 关注者
+      doorkeeper/application:
+        uid: Client ID
+        secret: Client secret
+        owner: Owner
+        redirect_uri: Redirect URI
+        client_credentials_user_id: Client Credentials User ID
+        scopes: Scopes
+        confidential: Confidential
     errors:
       messages:
         accepted: 必须接受。
@@ -450,6 +458,16 @@ zh:
           not_an_integer: "(%{name}) 不是整数。"
           smaller_than_or_equal_to: "（%{name}）必须小于或等于 %{count}。"
           greater_than_or_equal_to: "（%{name}）必须大于或等于 %{count}。"
+        doorkeeper/application:
+          attributes:
+            redirect_uri:
+              fragment_present: cannot contain a fragment.
+              invalid_uri: must be a valid URI.
+              relative_uri: must be an absolute URI.
+              secured_uri: must be an HTTPS/SSL URI.
+              forbidden_uri: is forbidden by the server.
+            scopes:
+              not_match_configured: doesn't match available scopes.
         enterprise_token:
           unreadable: 无法读取。是否确定为支持令牌？
         parse_schema_filter_params_service:
@@ -570,6 +588,7 @@ zh:
       wiki_page: 维基页面
       workflow: 工作流
       work_package: 工作包
+      doorkeeper/application: OAuth application
   errors:
     header_invalid_fields: 以下字段有问题：
     field_erroneous_label: |-
@@ -645,6 +664,7 @@ zh:
   button_change_password: 更改密码
   button_check_all: 全选
   button_clear: 清除
+  button_click_to_reveal: Click to reveal
   button_close: 关闭
   button_collapse_all: 全部折叠
   button_configure: 配置
@@ -675,6 +695,7 @@ zh:
   button_remove_widget: 删除部件
   button_rename: 重命名
   button_replace: 替换
+  button_revoke: Revoke
   button_reply: 答复
   button_reset: 重置
   button_rollback: 回滚到此版本
@@ -2479,3 +2500,110 @@ zh:
       writing_read_only_attributes: 你不能写入只读属性。
     resources:
       schema: 方案
+  doorkeeper:
+    pre_authorization:
+      status: Pre-authorization
+    errors:
+      messages:
+        invalid_request: The request is missing a required parameter, includes an
+          unsupported parameter value, or is otherwise malformed.
+        invalid_redirect_uri: The requested redirect uri is malformed or doesn't match
+          client redirect URI.
+        unauthorized_client: The client is not authorized to perform this request
+          using this method.
+        access_denied: The resource owner or authorization server denied the request.
+        invalid_scope: The requested scope is invalid, unknown, or malformed.
+        invalid_code_challenge_method: The code challenge method must be plain or
+          S256.
+        server_error: The authorization server encountered an unexpected condition
+          which prevented it from fulfilling the request.
+        temporarily_unavailable: The authorization server is currently unable to handle
+          the request due to a temporary overloading or maintenance of the server.
+        credential_flow_not_configured: Resource Owner Password Credentials flow failed
+          due to Doorkeeper.configure.resource_owner_from_credentials being unconfigured.
+        resource_owner_authenticator_not_configured: Resource Owner find failed due
+          to Doorkeeper.configure.resource_owner_authenticator being unconfigured.
+        admin_authenticator_not_configured: Access to admin panel is forbidden due
+          to Doorkeeper.configure.admin_authenticator being unconfigured.
+        unsupported_response_type: The authorization server does not support this
+          response type.
+        invalid_client: Client authentication failed due to unknown client, no client
+          authentication included, or unsupported authentication method.
+        invalid_grant: The provided authorization grant is invalid, expired, revoked,
+          does not match the redirection URI used in the authorization request, or
+          was issued to another client.
+        unsupported_grant_type: The authorization grant type is not supported by the
+          authorization server.
+        invalid_token:
+          revoked: The access token was revoked
+          expired: The access token expired
+          unknown: The access token is invalid
+  oauth:
+    application:
+      singular: OAuth application
+      plural: OAuth applications
+      named: OAuth application '%{name}'
+      new: New OAuth application
+      default_scopes: "(Default scopes)"
+      instructions:
+        name: The name of your application. This will be displayed to other users
+          upon authorization.
+        redirect_uri_html: 'The allowed URLs authorized users can be redirected to.
+          One entry per line. <br/> If you''re registering a desktop application,
+          use the following URL.
+
+'
+        confidential: Check if the application will be used where the client secret
+          can be kept confidential. Native mobile apps and Single Page Apps are assumed
+          non-confidential.
+        client_credential_user_id: Optional user ID to impersonate when clients use
+          this application. Leave empty to allow public access only
+        register_intro: If you are developing an OAuth API client application for
+          OpenProject, you can register it using this form for all users to use.
+        default_scopes: ''
+    client_id: Client ID
+    client_secret_notice: 'This is the only time we can print the client secret, please
+      note it down and keep it secure. It should be treated as a password and cannot
+      be retrieved by OpenProject at a later time.
+
+'
+    authorization_dialog:
+      authorize: Authorize
+      cancel: Cancel and deny authorization.
+      prompt_html: Authorize <strong>%{application_name}</strong> to use your account
+        <em>%{login}</em>?
+      title: Authorize %{application_name}
+      wants_to_access_html: 'This application requests access to your OpenProject
+        account. <br/> <strong>It has requested the following permissions:</strong>
+
+'
+    scopes:
+      api_v3: Full API access
+      api_v3_text: Application will receive full read & write access to the OpenProject
+        API to perform actions on your behalf.
+    grants:
+      created_date: Approved on
+      scopes: Permissions
+      successful_application_revocation: Revocation of application %{application_name}
+        successful.
+      none_given: No OAuth applications have been granted access to your user account.
+    x_active_tokens:
+      one: one active token
+      other: "%{count} active token"
+    flows:
+      authorization_code: Authorization code flow
+      client_credentials: Client credentials flow
+    client_credentials: User used for Client credentials
+    client_credentials_impersonation_set_to: Client credentials user set to
+    client_credentials_impersonation_warning: 'Note: Clients using the ''Client credentials''
+      flow in this application will have the rights of this user'
+    client_credentials_impersonation_html: 'By default, OpenProject provides OAuth
+      2.0 authorization via %{authorization_code_flow_link}. You can optionally enable
+      %{client_credentials_flow_link}, but you must provide a user on whose behalf
+      requests will be performed.
+
+'
+    authorization_error: An authorization error has occurred.
+    revoke_my_application_confirmation: Do you really want to remove this application?
+      This will revoke %{token_count} active for it.
+    my_registered_applications: Registered OAuth applications