diff --git a/packages/backend/src/app.ts b/packages/backend/src/app.ts
index 3bbe8d2662..1b361bc4d3 100644
--- a/packages/backend/src/app.ts
+++ b/packages/backend/src/app.ts
@@ -385,7 +385,7 @@ export class App {
 
     if (this.config.adminApiSecret) {
       koa.use(async (ctx, next: Koa.Next): Promise<void> => {
-        if (!verifyApiSignature(ctx, this.config)) {
+        if (!(await verifyApiSignature(ctx, this.config))) {
           ctx.throw(401, 'Unauthorized')
         }
         return next()