diff --git a/backend/server/api/middlewares.go b/backend/server/api/middlewares.go
index e1609b1ec6a..cb465e1c86d 100644
--- a/backend/server/api/middlewares.go
+++ b/backend/server/api/middlewares.go
@@ -264,6 +264,7 @@ func CheckAuthorizationHeader(c *gin.Context, logger log.Logger, db dal.Dal, api
 		return false
 	}
 	if !matched {
+		c.Abort()
 		c.JSON(http.StatusForbidden, &apiBody{
 			Success: false,
 			Message: "path doesn't match api key's scope",