KEYCLOAK-710 Ignore missing roles in access-code

services/src/main/java/org/keycloak/services/managers/ClientSessionCode.java

@@ -102,10 +102,9 @@ public class ClientSessionCode {
         Set<RoleModel> requestedRoles = new HashSet<RoleModel>();
         for (String roleId : clientSession.getRoles()) {
             RoleModel role = realm.getRoleById(roleId);
-            if (role == null) {
-                new OAuthErrorException(OAuthErrorException.INVALID_GRANT, "Invalid role " + roleId);
+            if (role != null) {
+                requestedRoles.add(realm.getRoleById(roleId));
             }
-            requestedRoles.add(realm.getRoleById(roleId));
         }
         return requestedRoles;
     }