diff --git a/src/server/api/endpoints/app/show.ts b/src/server/api/endpoints/app/show.ts
index e3f3a1eaa..ca4f3549f 100644
--- a/src/server/api/endpoints/app/show.ts
+++ b/src/server/api/endpoints/app/show.ts
@@ -29,7 +29,7 @@ export const meta = {
 };
 
 export default define(meta, async (ps, user, token) => {
-	const isSecure = token == null;
+	const isSecure = user != null && token == null;
 
 	// Lookup app
 	const ap = await Apps.findOne(ps.appId);