Fix for refresh token query when no deviceId

Author: dmlenton

models/tokens.js

@@ -29,9 +29,15 @@ exports.getAccessToken = function getAccessToken(obj, done) {
 };
 
 exports.getRefreshToken = function getRefreshToken(obj, done) {
+  let query = 'SELECT * FROM refresh_token WHERE token = ? AND device_id is null ';
+  const params = [obj.token];
+  if (obj.deviceId) {
+    query = 'SELECT * FROM refresh_token WHERE token = ? AND device_id = ? ';
+    params.push(obj.deviceId);
+  }
   db.get().query(
-    'SELECT * FROM refresh_token WHERE token = ? AND device_id = ?',
-    [obj.token, obj.deviceId],
+    query,
+    params,
     (err, rows) => {
       if (err) return done(err);
       if (rows.length === 0) return done(null, null);