diff --git a/internal/httpd/server.go b/internal/httpd/server.go
index 88020a34..a4b276fe 100644
--- a/internal/httpd/server.go
+++ b/internal/httpd/server.go
@@ -1001,7 +1001,7 @@ func (s *httpdServer) checkCookieExpiration(w http.ResponseWriter, r *http.Reque
 		return
 	}
 	token, claims, err := jwtauth.FromContext(r.Context())
-	if err != nil {
+	if err != nil || token == nil {
 		return
 	}
 	tokenClaims := jwtTokenClaims{}