From 9a3f47d68cbe00bd8ac985b74153d1a037a7845f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Niko=20K=C3=B6bler?= <niko@n-k.de>
Date: Wed, 19 Feb 2025 20:10:54 +0100
Subject: [PATCH] Set directAccessGrantsEnabled default value to false (#37505)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* Set directAccessGrantsEnabled to false

The Resource Owner Password Credentials Grant must not be used and should not be the default in Keycloak.

Signed-off-by: Jim Martens <github@2martens.de>
Closes #30226

* another default value...

Signed-off-by: Niko Köbler <niko@n-k.de>

---------

Signed-off-by: Niko Köbler <niko@n-k.de>
Co-authored-by: Jim Martens <github@2martens.de>
---
 js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx | 2 +-
 js/apps/admin-ui/src/clients/add/NewClientForm.tsx    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx b/js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx
index d636fb6fdf3..7ddc838a9a8 100644
--- a/js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx
+++ b/js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx
@@ -152,7 +152,7 @@ export const CapabilityConfig = ({
               <GridItem lg={8} sm={6}>
                 <Controller
                   name="directAccessGrantsEnabled"
-                  defaultValue={true}
+                  defaultValue={false}
                   control={control}
                   render={({ field }) => (
                     <InputGroup>
diff --git a/js/apps/admin-ui/src/clients/add/NewClientForm.tsx b/js/apps/admin-ui/src/clients/add/NewClientForm.tsx
index d918c62db0d..866c0c77632 100644
--- a/js/apps/admin-ui/src/clients/add/NewClientForm.tsx
+++ b/js/apps/admin-ui/src/clients/add/NewClientForm.tsx
@@ -68,7 +68,7 @@ export default function NewClientForm() {
       authorizationServicesEnabled: false,
       serviceAccountsEnabled: false,
       implicitFlowEnabled: false,
-      directAccessGrantsEnabled: true,
+      directAccessGrantsEnabled: false,
       standardFlowEnabled: true,
       frontchannelLogout: true,
       attributes: {