diff --git a/website/server/controllers/api-v3/auth.js b/website/server/controllers/api-v3/auth.js
index 22530d0a55..d8359beaba 100644
--- a/website/server/controllers/api-v3/auth.js
+++ b/website/server/controllers/api-v3/auth.js
@@ -151,9 +151,7 @@ api.loginSocial = {
 // Called by apple for web authentication.
 api.redirectApple = {
   method: 'POST',
-  middlewares: [authWithHeaders({
-    optional: true,
-  })],
+  middlewares: [],
   url: '/user/auth/apple',
   async handler (req, res) {
     if (req.body.id_token) {