diff --git a/pkg/op/token_exchange.go b/pkg/op/token_exchange.go
index 055ff13..5a2387d 100644
--- a/pkg/op/token_exchange.go
+++ b/pkg/op/token_exchange.go
@@ -282,6 +282,9 @@ func GetTokenIDAndSubjectFromToken(
 	case oidc.AccessTokenType:
 		var accessTokenClaims *oidc.AccessTokenClaims
 		tokenIDOrToken, subject, accessTokenClaims, ok = getTokenIDAndClaims(ctx, exchanger, token)
+		if !ok {
+			break
+		}
 		claims = accessTokenClaims.Claims
 	case oidc.RefreshTokenType:
 		refreshTokenRequest, err := exchanger.Storage().TokenRequestByRefreshToken(ctx, token)