Allow developers to disable the password grant type (#1712)

Author: axlon

src/Passport.php

@@ -21,6 +21,13 @@ class Passport
      */
     public static $implicitGrantEnabled = false;
 
+    /**
+     * Indicates if the password grant type is enabled.
+     *
+     * @var bool|null
+     */
+    public static $passwordGrantEnabled = true;
+
     /**
      * The default scope.
      *

src/PassportServiceProvider.php

@@ -169,9 +169,11 @@ protected function registerAuthorizationServer()
                     $this->makeRefreshTokenGrant(), Passport::tokensExpireIn()
                 );
 
-                $server->enableGrantType(
-                    $this->makePasswordGrant(), Passport::tokensExpireIn()
-                );
+                if (Passport::$passwordGrantEnabled) {
+                    $server->enableGrantType(
+                        $this->makePasswordGrant(), Passport::tokensExpireIn()
+                    );
+                }
 
                 $server->enableGrantType(
                     new PersonalAccessGrant, Passport::personalAccessTokensExpireIn()