diff --git a/server/http_server.ts b/server/http_server.ts
index bb08bcd5..f33c0942 100644
--- a/server/http_server.ts
+++ b/server/http_server.ts
@@ -337,7 +337,7 @@ export class HttpServer {
     this.app.use("*", async (c, next) => {
       const req = c.req;
       const spaceServer = await this.ensureSpaceServer(req);
-      if (!spaceServer.auth) {
+      if (!spaceServer.auth && !spaceServer.authToken) {
         // Auth disabled in this config, skip
         return next();
       }