Make sure token.scopes exists.

Author: n2ygk

oauth2_provider/oauth2_validators.py

@@ -789,7 +789,10 @@ def get_oidc_claims(self, token, token_handler, request):
 
         for k, v in data.items():
             if not self.oidc_claim_scope or (
-                k in self.oidc_claim_scope and self.oidc_claim_scope[k] in token.scopes
+                token
+                and hasattr(token, "scopes")
+                and k in self.oidc_claim_scope
+                and self.oidc_claim_scope[k] in token.scopes
             ):
                 claims[k] = v(request) if callable(v) else v
         return claims