text: /**
   * @title Disable the Resource Owner endpoint
   * @overview Disable the Resource Owner endpoint to prevent users from bypassing MFA policies.
   * @gallery true
   * @category access control
   *
   * This rule is used to disable the Resource Owner endpoint (to prevent users from bypassing MFA policies).
   *
   */
  
  function (user, context, callback) {
    if (context.protocol === 'oauth2-resource-owner') {
      return callback(
        new UnauthorizedError('The resource owner endpoint cannot be used.'));
    }
    callback(null, user, context);
  }
  