From 98d67e0f6ba954cb8ba946ad1c8773f7a5babedc Mon Sep 17 00:00:00 2001
From: Paul Rastoin <45004772+prastoin@users.noreply.github.com>
Date: Wed, 25 Feb 2026 18:01:55 +0100
Subject: [PATCH] Fix jwt auth guard for application (#18234)

---
 .../twenty-server/src/engine/guards/jwt-auth.guard.ts     | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/packages/twenty-server/src/engine/guards/jwt-auth.guard.ts b/packages/twenty-server/src/engine/guards/jwt-auth.guard.ts
index a565f4b9a7..917ba54526 100644
--- a/packages/twenty-server/src/engine/guards/jwt-auth.guard.ts
+++ b/packages/twenty-server/src/engine/guards/jwt-auth.guard.ts
@@ -32,9 +32,13 @@ export class JwtAuthGuard implements CanActivate {
           )
         : undefined;
 
-      if (!isDefined(data.apiKey) && !isDefined(data.userWorkspaceId)) {
+      if (
+        !isDefined(data.apiKey) &&
+        !isDefined(data.userWorkspaceId) &&
+        !isDefined(data.application)
+      ) {
         this.logger.warn(
-          `Auth failed: no apiKey or userWorkspaceId in context`,
+          `Auth failed: no apiKey, userWorkspaceId, or application in context`,
         );
 
         return false;