diff --git a/src/Core/IdentityServer/BaseRequestValidator.cs b/src/Core/IdentityServer/BaseRequestValidator.cs
index 7d5a329bf7..cf679248ce 100644
--- a/src/Core/IdentityServer/BaseRequestValidator.cs
+++ b/src/Core/IdentityServer/BaseRequestValidator.cs
@@ -124,6 +124,7 @@ namespace Bit.Core.IdentityServer
                 if (device == null)
                 {
                     await BuildErrorResultAsync("No device information provided.", false, context, user);
+                    return;
                 }
                 await BuildSuccessResultAsync(user, context, device, twoFactorRequest && twoFactorRemember);
             }