Handle sessions without refresh token

inventory-app/oidc.py

@@ -71,6 +71,9 @@ def login_callback():
     return redirect(session.pop("original_url", "/"))
 
 def do_refresh():
+    if "refresh_token" not in session:
+        print("no refresh token, skipping refresh")
+        return False
     print("doing refreesh")
     r = requests.post(metadata["token_endpoint"], {
         "client_secret": os.getenv("OIDC_CLIENT_SECRET"),