X_AUTH_GRANT_DISABLED
Means
a token request named a grant this authorization server does not enable
Typical cause
the client posted a grant_type that is not in authorizationServer({ grants })
Fix
authorizationServer({ grants: ['authorization_code', 'refresh_token', '<grant>'] }) # with its lifetime