Resource Owner Password Credential flow deprecation and removal for Red Hat Single Sign-On and Red Hat build of Keycloak
Issue
- Since the latest (OAuth 2.0 security best practices)[https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics-13#section-3.4] effectively disallows and removes the password grant entirely from Oauth and this grant is not defined in OAuth 2.1, what is the plan for Resource Owner Password Credential flow Grant Red Hat Single Sign-On and Red Hat build of Keycloak ?
Environment
- Red Hat Single Sign-On
- 7.x
- Red Hat build of Keycloak
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
