diff --git a/src/modules/auth/scope.guard.ts b/src/modules/auth/scope.guard.ts
index 9e868c52d..9c3acd272 100644
--- a/src/modules/auth/scope.guard.ts
+++ b/src/modules/auth/scope.guard.ts
@@ -13,6 +13,7 @@ export class ScopesGuard implements CanActivate {
     if (!scopes) return true;
     const user: AccessTokenParsed = request.user;
     let authorized = false;
+    if (!user) return false;
     for (const userScope of user.scopes) {
       for (let scope of scopes) {
         for (const key in request.params)