Set directAccessGrantsEnabled default value to false (#37505)

* Set directAccessGrantsEnabled to false

The Resource Owner Password Credentials Grant must not be used and should not be the default in Keycloak.

Signed-off-by: Jim Martens <[email protected]>
Closes #30226

* another default value...

Signed-off-by: Niko Köbler <[email protected]>

---------

Signed-off-by: Niko Köbler <[email protected]>
Co-authored-by: Jim Martens <[email protected]>

Author: dasniko

js/apps/admin-ui/src/clients/add/CapabilityConfig.tsx

@@ -152,7 +152,7 @@ export const CapabilityConfig = ({
               <GridItem lg={8} sm={6}>
                 <Controller
                   name="directAccessGrantsEnabled"
-                  defaultValue={true}
+                  defaultValue={false}
                   control={control}
                   render={({ field }) => (
                     <InputGroup>

js/apps/admin-ui/src/clients/add/NewClientForm.tsx

@@ -68,7 +68,7 @@ export default function NewClientForm() {
       authorizationServicesEnabled: false,
       serviceAccountsEnabled: false,
       implicitFlowEnabled: false,
-      directAccessGrantsEnabled: true,
+      directAccessGrantsEnabled: false,
       standardFlowEnabled: true,
       frontchannelLogout: true,
       attributes: {