Set directAccessGrantsEnabled default value to false (#37505)

* Set directAccessGrantsEnabled to false

The Resource Owner Password Credentials Grant must not be used and should not be the default in Keycloak.

Signed-off-by: Jim Martens <github@2martens.de>
Closes #30226

* another default value...

Signed-off-by: Niko Köbler <niko@n-k.de>

---------

Signed-off-by: Niko Köbler <niko@n-k.de>
Co-authored-by: Jim Martens <github@2martens.de>
This commit is contained in:
Niko Köbler 2025-02-19 20:10:54 +01:00 committed by GitHub
parent d9e4981742
commit 9a3f47d68c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 2 additions and 2 deletions

View File

@ -152,7 +152,7 @@ export const CapabilityConfig = ({
<GridItem lg={8} sm={6}>
<Controller
name="directAccessGrantsEnabled"
defaultValue={true}
defaultValue={false}
control={control}
render={({ field }) => (
<InputGroup>

View File

@ -68,7 +68,7 @@ export default function NewClientForm() {
authorizationServicesEnabled: false,
serviceAccountsEnabled: false,
implicitFlowEnabled: false,
directAccessGrantsEnabled: true,
directAccessGrantsEnabled: false,
standardFlowEnabled: true,
frontchannelLogout: true,
attributes: {