diff --git a/src/Api/Controllers/AuthRequestsController.cs b/src/Api/Controllers/AuthRequestsController.cs
index 24547ef1f3..fca835af45 100644
--- a/src/Api/Controllers/AuthRequestsController.cs
+++ b/src/Api/Controllers/AuthRequestsController.cs
@@ -130,7 +130,7 @@ public class AuthRequestsController : Controller
             throw new DuplicateAuthRequestException();
         }
 
-        var device = await _deviceRepository.GetByIdentifierAsync(model.DeviceIdentifier);
+        var device = await _deviceRepository.GetByIdentifierAsync(model.DeviceIdentifier, userId);
         if (device == null)
         {
             throw new BadRequestException("Invalid device.");