"isAllowedToLogin" on the ResourceServer Interface

[Jigsaw5279]

Having a function like isAllowedToLogin(ResourceOwnerInterface $user): bool defined on the interface which decides wether or not a user should even be allowed to login, regardless if he'll be an admin or not, would provide a unified place for the logic to block certain users across all providers. Currently, you'd have to rely on things like userIsActive to really block out unwanted users, or bury that logic within your loadUserDetails function like the default provider does.

Again, if you like this, I'd be happy to implement it.