Limit allowed OAuth Grant Types by realm/client

[hjacobs]

We might want to disable certain grant types for some realms/clients, e.g. disabling the "Resource Owner Password Credentials Grant" for human users.

See http://tools.ietf.org/html/rfc6749#section-4.3

Resource Owner Password Credentials Grant:
The authorization server should take special care when
enabling this grant type and only allow it when other flows are not
viable.

[hjacobs]

To be discussed.

[lasomethingsomething]

Hi @hjacobs, was it discussed? Wondering if we can close this issue, it dates back to March 2016.

Or, we could add a "Help Wanted" label.