update id

id.saladeaula.digital/app/oauth2.py

@@ -76,6 +76,7 @@ class OpenIDCode(OpenIDCode_):
         ).filter(scope)
 
         if user.scope:
+            # Used to define permission granularity
             user_info['scope'] = user.scope
 
         return user_info
@@ -247,10 +248,13 @@ class RefreshTokenGrant(grants.RefreshTokenGrant):
         """The authorization server MAY revoke the old refresh token after
         issuing a new refresh token to the client."""
 
-        logger.debug('Revoking old refresh token', refresh_token=refresh_token)
         token = getattr(refresh_token, 'refresh_token', None)
+        logger.debug('Revoking old refresh token', refresh_token=token)
         user = refresh_token.get_user()
 
+        if not token:
+            return None
+
         with dyn.transact_writer() as transact:
             transact.delete(
                 key=KeyPair(