diff --git a/lib/api/openid_connect/token_endpoint.rb b/lib/api/openid_connect/token_endpoint.rb
index a2e8c8ac2..7bde221a9 100644
--- a/lib/api/openid_connect/token_endpoint.rb
+++ b/lib/api/openid_connect/token_endpoint.rb
@@ -50,7 +50,7 @@ module Api
       end
 
       def app_valid?(o_auth_app, req)
-        o_auth_app.client_secret == req.client_secret
+        o_auth_app.try(:client_secret) == req.client_secret
       end
     end
   end